Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6864c22e-8146-3876-91a7-26ab648b840a.roa
File:                     6864c22e-8146-3876-91a7-26ab648b840a.roa (raw, json)
Hash identifier:          pnZFo2Trirdodq0uj4ChVxLMX74WAmh0GSHj8DmFx8o=
Subject key identifier:   4B:49:2C:4B:77:D1:01:5A:E9:E6:24:31:79:5F:F5:D3:90:7E:06:A9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ED3C5DC9522566F1E43A50
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6864c22e-8146-3876-91a7-26ab648b840a.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33662
IP address blocks:        98.39.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:3c:5d:c9:52:25:66:f1:e4:3a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=28ea4f96-3d36-47c2-aca2-dde878d43638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:87:be:0e:e0:d4:26:06:64:09:9b:44:dd:96:
                    26:f4:b2:85:59:4a:0e:80:bd:ea:bc:27:7e:08:ff:
                    20:e5:a9:6d:a2:72:ab:a7:70:bd:1b:68:27:c7:8d:
                    50:8d:43:45:ff:a8:b3:b1:6a:36:1f:5d:8c:f5:ab:
                    8c:c1:09:0b:b4:44:a4:65:54:ec:e1:38:07:89:d0:
                    3c:56:5e:12:72:c5:51:73:72:54:ef:20:4c:db:bd:
                    ef:79:e4:e5:ba:b7:1a:9b:37:27:2d:6b:49:5d:f2:
                    34:12:57:9c:73:01:de:97:04:ba:ba:1f:74:50:e9:
                    c4:c0:a4:5c:a5:16:18:0e:a5:f8:54:f8:c8:d8:60:
                    ed:c7:14:47:19:f1:15:45:22:a5:82:c5:d2:9b:4c:
                    e4:80:2f:77:29:cc:ee:5a:49:db:42:65:0d:50:25:
                    2e:8c:ad:a3:cb:e0:25:ad:03:d7:df:f5:70:63:50:
                    47:3d:ef:b5:57:3a:76:f9:21:e9:e4:20:96:85:ae:
                    e8:2d:56:fc:6c:34:81:ee:24:62:f6:d9:46:2e:19:
                    12:4f:a6:a5:82:9a:97:60:d4:b5:4d:90:ce:67:8f:
                    eb:59:8d:79:45:c1:02:99:05:09:8e:cc:d8:16:c5:
                    43:1f:eb:db:64:2d:fe:57:49:4b:bc:e4:53:cd:c6:
                    7c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:49:2C:4B:77:D1:01:5A:E9:E6:24:31:79:5F:F5:D3:90:7E:06:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6864c22e-8146-3876-91a7-26ab648b840a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.39.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:ac:04:19:e3:58:af:1b:e5:a9:4b:3c:80:f1:5f:2e:10:be:
         a2:63:d2:05:08:d1:81:24:0e:4a:e1:56:85:36:aa:40:b2:cb:
         44:6b:b2:84:84:11:13:d0:9e:37:e7:8d:62:f7:b2:87:7e:0c:
         03:90:4d:ff:81:70:b2:87:fd:89:ad:74:34:40:ce:bc:05:00:
         49:2c:10:8f:60:aa:ff:72:03:ad:7e:af:b6:c1:18:42:01:1a:
         8c:af:d0:4f:ea:b2:c5:d8:e8:e0:5d:e9:2c:62:1b:58:b7:79:
         cf:cc:6b:c7:7d:7b:33:8d:f5:c2:c0:bc:79:0a:b9:d1:8f:53:
         21:8e:8e:7f:7b:18:2e:0a:ef:b8:87:1e:30:dc:c5:74:5e:b2:
         d4:60:fc:23:90:b4:ab:88:f1:ed:0e:32:67:a9:39:c4:2e:4a:
         82:da:53:b3:6e:29:a3:d0:51:0b:5e:6b:a3:5d:fe:47:8d:e6:
         06:0e:d4:8a:d2:46:47:a8:9e:76:d9:b6:a7:65:a0:44:a0:52:
         96:f7:ac:ad:fe:02:59:b4:38:c6:f6:a3:94:84:f8:19:21:85:
         f1:6d:88:aa:69:23:4d:a6:69:e1:9c:ff:f0:5d:8f:a4:45:0d:
         15:ed:f7:2b:1e:eb:46:f5:82:da:02:4a:ee:a5:d6:90:88:00:
         35:4b:8b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:05:11 2025 by rpki-client