Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af7cd545-4792-3326-b241-e838885860ad.roa
File:                     af7cd545-4792-3326-b241-e838885860ad.roa (raw, json)
Hash identifier:          1H736Qq7rfIkcu5orYCi3QPhzwpfYVkIgozVhLP3Bw4=
Subject key identifier:   CB:4D:6A:19:59:5C:09:15:FE:96:DD:1A:03:04:86:E0:85:1A:05:8D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB2211F7825164F216162FA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af7cd545-4792-3326-b241-e838885860ad.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     22258
IP address blocks:        98.251.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:1f:78:25:16:4f:21:61:62:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=2e8b6f5a-fe29-4247-827a-087587150155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e4:2a:1d:8a:a4:27:d2:b6:ce:c9:ad:f6:4b:
                    3e:b9:0f:05:fc:18:7a:88:87:1e:0d:d6:0c:11:da:
                    3b:f4:35:af:7d:a9:13:a1:b0:5b:e5:9a:c7:99:4f:
                    9a:47:92:d9:f0:e2:d1:58:be:a9:c0:de:8d:54:47:
                    58:a8:9d:d4:ce:40:24:f4:f5:b7:37:f0:36:e5:f4:
                    b6:5d:02:e8:8a:06:f9:ce:c2:5b:2f:ff:89:40:32:
                    fd:69:a1:9e:e9:3b:23:76:b1:22:66:8a:20:c0:c3:
                    9e:37:38:65:8d:89:52:70:cf:ca:c2:b5:fd:a5:0b:
                    94:de:c7:9e:97:ab:c2:3b:ce:7e:73:24:26:b5:e0:
                    b2:0d:60:ca:ba:a8:05:a3:8c:c3:5e:23:18:ea:a1:
                    53:7d:52:59:5a:34:dd:97:f4:4d:3f:24:d9:62:8c:
                    f1:de:ea:8d:ef:6e:06:62:fb:9c:7b:b1:47:51:ad:
                    6f:9f:29:cd:6f:33:e5:8e:90:7c:b8:77:b8:50:9c:
                    5a:8d:de:57:c7:25:e3:79:ab:e0:3d:89:dc:9e:0e:
                    33:3a:34:57:89:b7:39:ce:82:3e:69:a2:a8:37:36:
                    fa:69:d2:79:43:92:a1:47:6d:1a:f4:1f:bb:1e:0f:
                    38:38:b2:56:75:14:6e:0e:6f:bb:18:be:fe:83:b9:
                    9d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4D:6A:19:59:5C:09:15:FE:96:DD:1A:03:04:86:E0:85:1A:05:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af7cd545-4792-3326-b241-e838885860ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.251.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:6f:fc:14:83:58:bb:ac:70:2f:96:fa:28:27:0c:9c:0e:e0:
         2a:54:b6:c5:46:43:54:25:62:e7:d8:1b:8e:04:4b:be:d8:8d:
         14:a2:c5:08:30:da:16:92:0b:f7:9a:ec:f5:55:c9:34:22:61:
         79:6d:f0:1e:64:80:ff:b6:92:e8:4f:af:a6:55:75:2e:00:22:
         d2:a3:bf:7c:83:76:00:a1:61:fb:44:76:da:95:34:42:ac:27:
         25:0a:42:7b:1b:e5:46:ca:53:81:45:52:1e:93:e8:7f:4b:03:
         90:1a:04:95:8d:72:43:45:d2:c2:9f:6d:64:9c:6d:fb:ff:d2:
         26:49:52:0e:24:31:7f:f3:d8:89:4a:f7:1d:15:64:c5:04:c1:
         24:6e:ba:60:52:d4:79:c2:4e:d1:ed:1b:b7:44:cf:24:d0:ca:
         55:e3:05:31:86:d9:38:be:f7:22:e9:23:b6:f1:b0:cc:cc:f6:
         7d:06:80:1f:ee:d1:f7:47:07:50:fb:6c:a5:1b:68:15:83:fc:
         9f:68:f5:aa:1e:09:32:37:af:7f:d2:83:69:5e:b5:5c:59:f6:
         86:08:b3:fb:c2:8d:45:bf:52:bd:3f:00:2c:01:a3:1b:1a:be:
         a9:1a:2d:e0:ad:be:cb:33:64:f9:94:4e:f8:95:47:cb:d2:37:
         04:2e:fa:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:18:59 2025 by rpki-client