Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5b5250f-92c4-3f8c-9bee-e8d23036b943.roa
File:                     b5b5250f-92c4-3f8c-9bee-e8d23036b943.roa (raw, json)
Hash identifier:          J5JLjnwv/Tm1yQjVKGcbg22czONIAYipWLfIQcgfM2Y=
Subject key identifier:   16:12:BC:76:E9:FB:D5:3F:32:A2:C5:CD:81:30:C6:EA:99:53:BC:C9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ED2F482EFA7C381FE57A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5b5250f-92c4-3f8c-9bee-e8d23036b943.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33662
IP address blocks:        98.198.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:2f:48:2e:fa:7c:38:1f:e5:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=e4e9bc7d-7f5a-4ae2-ab8f-1059c30233c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:64:3f:97:12:a1:f9:92:1b:82:eb:9f:81:06:
                    40:04:d0:f5:c6:0f:7f:07:be:61:42:5c:f0:ea:05:
                    69:95:f9:68:1b:0b:77:2d:c3:5f:e1:a8:a4:25:b4:
                    36:6e:35:71:b7:58:a1:80:aa:bb:db:19:f2:06:cc:
                    90:7a:88:29:4d:6d:39:ac:ad:91:40:a8:ab:8b:35:
                    a0:0b:cd:a3:cb:d1:c9:59:7c:38:90:03:6a:9b:e8:
                    2b:99:18:83:2d:70:d8:53:9c:80:59:fe:9b:8f:38:
                    cf:77:3d:4e:45:b7:76:76:8b:2c:59:ef:2b:03:ae:
                    75:d3:62:78:9f:79:a4:7c:25:71:02:d5:a1:f9:50:
                    5e:38:af:93:75:16:67:31:ad:8b:ff:0a:6e:8e:6e:
                    87:06:fa:4f:f1:fb:1b:77:c1:ad:70:97:77:b9:b1:
                    87:96:24:0d:92:4e:1c:32:b3:15:dc:8c:82:a9:18:
                    d1:94:b4:61:ee:ea:38:11:70:8a:52:30:e3:46:83:
                    b7:56:5e:dd:7c:79:07:7b:17:e1:c7:3f:25:6b:67:
                    86:ef:8f:e4:21:bb:9f:22:d2:21:04:b8:0f:cd:ca:
                    f5:0e:7a:1e:b4:db:8f:63:3a:ef:83:3c:1e:45:e2:
                    92:0a:9b:50:3b:df:76:f2:79:e0:38:08:43:78:8a:
                    47:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:12:BC:76:E9:FB:D5:3F:32:A2:C5:CD:81:30:C6:EA:99:53:BC:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5b5250f-92c4-3f8c-9bee-e8d23036b943.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.198.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:d1:a6:af:b8:c5:33:a5:6d:c8:58:62:f9:1e:e1:99:84:d6:
         71:b9:2b:4d:21:fd:2b:79:8e:73:94:d8:43:99:28:f9:22:66:
         de:9b:f8:d3:62:6a:a8:34:39:2e:d0:fd:87:82:db:41:f7:e8:
         0c:52:f4:88:14:be:e4:04:81:71:a3:a9:a5:31:b8:2c:6a:ad:
         92:1e:bc:33:3b:82:48:2b:f4:ca:d8:d6:7d:2e:78:e7:57:fb:
         f7:6b:38:12:ca:90:e4:aa:00:59:fe:c9:04:3d:66:07:51:c9:
         0a:6e:53:2f:6f:f6:9a:01:72:af:28:b6:5e:99:cf:d9:de:bd:
         a6:9b:fb:40:5a:9b:91:60:ad:e4:64:45:a0:a6:1f:3f:21:6b:
         3d:1b:76:26:cd:d9:dd:01:b0:0c:d5:ec:56:33:fc:e5:67:16:
         45:fa:60:fb:3e:76:e8:38:ac:13:30:f5:12:96:34:30:81:81:
         25:55:aa:39:84:ec:bf:79:82:84:2d:9b:01:67:05:14:22:33:
         0c:2a:13:67:1b:e8:27:71:4a:31:45:e2:cc:ed:84:37:02:50:
         03:98:2c:bb:18:5d:76:15:0b:d2:2c:fd:e4:95:e5:3f:8f:a7:
         22:64:3f:34:06:16:65:fa:ee:d4:b1:dc:39:a9:66:d1:6b:94:
         61:56:dc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:47:53 2025 by rpki-client