Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd450dd4-e546-394c-9bc3-896de23d5a27.roa
File:                     bd450dd4-e546-394c-9bc3-896de23d5a27.roa (raw, json)
Hash identifier:          eNT+YlNTByL3CYEi1CwKRoYoecCBogem80tVpzcoh5I=
Subject key identifier:   D0:56:53:28:35:A9:94:28:82:6F:89:25:6E:96:3F:0E:9D:C9:D9:4A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EEE3EAB6EF6A8FF9917B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd450dd4-e546-394c-9bc3-896de23d5a27.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33662
IP address blocks:        98.197.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:e3:ea:b6:ef:6a:8f:f9:91:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=f450962b-e625-4c87-b012-5ec69690775d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1e:b2:06:33:c8:36:4a:2e:2d:49:94:a0:a4:
                    4f:05:c3:ee:15:45:85:91:31:73:c6:0c:c6:18:f5:
                    39:e3:03:e1:da:90:8e:a7:56:08:8c:6b:22:f0:ef:
                    e7:c8:8a:1d:79:e3:83:e9:5e:77:46:e7:c4:8d:ea:
                    cf:35:69:93:76:34:68:f5:5f:98:d4:01:7a:b8:ec:
                    0d:de:45:04:6c:b5:2a:ef:0e:ab:69:c5:8d:54:c6:
                    53:3d:d6:14:7c:72:a6:3c:3d:e8:0a:3c:f4:d0:31:
                    eb:0a:c4:5f:73:d4:95:a8:48:8d:86:d6:43:ed:05:
                    45:fa:b0:14:37:fd:8e:9d:b7:dc:be:49:a9:df:5d:
                    ee:3c:36:41:fd:c4:c8:9b:17:7f:83:25:72:67:8b:
                    d3:17:c1:d8:00:a4:17:5e:ee:d0:66:50:0f:15:68:
                    3e:56:36:b3:24:36:79:4d:71:d3:65:68:40:fc:1e:
                    87:34:a1:b9:0c:ac:a1:d8:16:9f:83:0d:5a:40:e2:
                    64:1f:1c:63:ef:a4:b3:d9:78:e4:e8:4e:83:1d:f0:
                    6e:39:c3:c3:e6:2f:af:15:61:fe:ed:fb:76:7e:ef:
                    43:e8:cf:af:35:ff:3f:fd:4a:34:de:17:44:3d:26:
                    13:59:79:bf:d3:ae:fd:c7:71:c8:f7:95:7a:9b:73:
                    8a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:56:53:28:35:A9:94:28:82:6F:89:25:6E:96:3F:0E:9D:C9:D9:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd450dd4-e546-394c-9bc3-896de23d5a27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.197.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:4d:df:5b:f6:fa:eb:87:12:22:3e:d6:23:52:36:ac:fc:2e:
         e5:50:6e:6b:fd:d5:d4:c5:f0:b2:2e:46:65:74:22:5c:ec:3e:
         cd:d8:f8:9e:f2:26:c1:97:73:96:0d:d9:77:8d:40:4f:39:c9:
         4d:3f:38:1d:24:8d:49:59:ae:03:2e:03:03:10:ee:39:ab:9c:
         06:8b:14:4e:e1:d5:05:cd:ac:02:28:0e:78:87:6f:dd:e8:91:
         c0:ab:ad:57:92:ec:f0:ff:93:f6:26:86:e9:a3:ce:7d:a9:3e:
         7f:4b:07:b7:fa:25:d1:1f:02:4d:2e:73:8d:8c:65:40:80:40:
         6f:62:da:7a:f9:ff:46:f2:8d:94:ea:f0:de:0d:6d:a7:6f:4f:
         31:22:0c:b6:62:62:f1:7c:1d:47:a3:04:b1:fe:5e:3b:33:bb:
         01:dc:cf:9a:74:06:70:af:18:14:63:d4:92:d6:b8:82:fc:84:
         79:86:67:e3:8c:87:46:13:37:28:98:47:85:76:61:68:36:6d:
         06:b8:5d:3b:b1:17:df:92:87:c8:bd:3f:96:18:d3:1d:bf:a1:
         e1:6e:cb:96:1b:7c:c0:48:33:13:97:48:53:34:23:85:f7:a7:
         e5:77:a7:11:0d:a4:01:d3:ec:a9:ca:2b:20:2a:2f:ac:a3:13:
         5f:fb:d0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:11:21 2025 by rpki-client