Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/67b706d6-1288-3281-8328-a253df3deb79.roa
File:                     67b706d6-1288-3281-8328-a253df3deb79.roa (raw, json)
Hash identifier:          yECxIy+da4v2obbZKkGe6etOH75QdASlYAqWdGfl+ks=
Subject key identifier:   5E:5B:DD:9D:69:AA:94:06:B3:86:96:35:E0:B7:89:0C:BE:AD:85:D6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ED2D61E45583541A2D5280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/67b706d6-1288-3281-8328-a253df3deb79.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33662
IP address blocks:        98.197.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:2d:61:e4:55:83:54:1a:2d:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=87bdb774-05c3-4204-b9db-f7392e637a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3d:90:11:71:fa:1e:da:da:f1:98:f8:b3:d1:
                    cd:3d:f3:47:9e:fe:10:b6:38:86:1d:bd:83:1d:52:
                    94:3e:cf:0f:6c:24:d3:06:44:3a:70:b0:df:f4:a1:
                    35:e9:6c:1d:ea:8a:81:96:f5:75:7f:bd:09:73:bd:
                    1f:8a:ea:43:2d:d8:39:b2:4f:9a:ac:8e:f4:81:b2:
                    d4:8f:8b:01:87:98:90:1d:84:a1:5a:d0:c0:9e:58:
                    b8:dd:36:0f:90:58:c8:e3:7c:bc:99:fe:8d:70:e3:
                    1d:9f:7e:8c:48:d3:ce:42:3d:5e:00:65:ec:00:81:
                    a5:ff:12:18:11:bb:9e:7c:79:0f:44:1f:59:1b:bf:
                    78:44:7c:04:ed:d1:cb:b9:e2:41:28:3d:93:50:6e:
                    d5:2b:d7:50:af:1a:de:38:88:15:a5:c7:50:bb:9b:
                    65:54:0f:66:c1:35:21:5c:df:56:93:d2:5f:5f:fa:
                    8b:31:4c:95:76:d2:28:8c:37:28:3e:ab:7c:0e:3c:
                    57:40:74:3f:a1:b5:20:b3:c3:d8:79:fb:a9:e4:68:
                    45:32:7f:f6:97:5b:42:82:29:64:4b:ab:ac:a1:63:
                    3e:2c:79:46:32:18:0d:b5:ed:2e:4d:23:75:60:f2:
                    58:65:0e:10:7b:4c:e1:d5:af:f6:7b:52:94:43:74:
                    8c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:5B:DD:9D:69:AA:94:06:B3:86:96:35:E0:B7:89:0C:BE:AD:85:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/67b706d6-1288-3281-8328-a253df3deb79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.197.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:ce:0e:d1:d6:39:44:8e:80:d7:82:8d:a6:68:3f:f1:b5:2e:
         79:5a:08:5f:f9:b0:b9:5f:ff:fe:c8:3d:bd:32:b3:4f:80:d2:
         da:0b:f4:c3:0d:bb:49:5f:ca:39:04:2b:eb:57:9d:c5:fd:33:
         c0:76:12:37:a6:34:81:44:ee:11:72:13:d3:6a:6b:7d:24:1a:
         ed:c4:7d:4c:ea:ef:0e:81:af:a2:39:c6:db:c0:31:61:f3:c7:
         e9:cb:43:cd:82:35:7a:25:d1:61:40:a9:bf:f8:e5:fa:56:71:
         da:7c:a9:7f:a2:dc:5b:82:aa:08:dd:b7:d3:82:8b:9f:cb:a1:
         65:30:5e:e0:8b:f3:52:98:f9:21:38:08:21:a3:d3:35:e8:9f:
         34:94:63:58:c5:54:55:82:4a:d4:0a:0b:f7:d6:b7:e3:a8:a2:
         32:7a:4a:08:b2:a3:44:77:24:25:cf:2a:95:9d:a9:5e:db:29:
         51:5f:a2:75:16:72:20:70:7c:f0:27:33:21:94:03:31:25:9d:
         df:cb:cd:6c:5f:4f:30:d0:c2:a6:76:e3:54:02:1d:71:3b:00:
         ce:06:e8:ee:a6:0f:07:69:9f:cd:bd:3d:51:10:22:56:bb:ea:
         70:5e:fd:0e:83:46:b3:5a:5c:2f:8b:69:0a:74:60:5d:15:68:
         08:1b:88:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:57:00 2025 by rpki-client