Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d47fe3e9-0d87-349b-aed8-7daded280481.roa
File:                     d47fe3e9-0d87-349b-aed8-7daded280481.roa (raw, json)
Hash identifier:          8kKRiZfK86SmHQ28FkneTJ9y3ggG6fd+8n9TpHMSb1U=
Subject key identifier:   3D:62:EB:40:55:93:86:AC:5D:4A:3B:37:AB:9B:D7:C7:2D:AA:2A:92
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EEF2C9E06CE5160967E240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d47fe3e9-0d87-349b-aed8-7daded280481.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33662
IP address blocks:        98.201.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:f2:c9:e0:6c:e5:16:09:67:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=8e3ce67e-418e-4673-956e-98980590c71c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e3:6c:d8:0a:33:e4:a4:14:7e:e3:fc:80:c3:
                    66:5e:32:8f:e2:b3:08:ae:15:4f:e2:51:e8:7e:5b:
                    75:01:ab:8c:96:70:29:12:56:7f:fd:a3:5e:c8:39:
                    37:c9:4d:62:e2:28:56:a0:29:58:85:0b:34:7e:e2:
                    4b:c1:1d:ef:7c:12:1f:be:02:b3:31:71:3c:57:c8:
                    96:c0:aa:f1:f2:b9:58:fa:c3:98:2a:3b:a7:fe:a1:
                    61:b5:9c:d7:13:14:55:5d:c6:26:23:62:a2:52:2f:
                    64:3e:97:7a:91:e1:4b:3b:a3:37:93:55:5c:17:36:
                    56:8f:a0:d7:55:7a:9a:20:32:13:33:35:d1:e4:c5:
                    03:6b:5f:11:9c:da:ec:e2:f8:8d:99:4c:02:f1:a9:
                    53:d9:c1:f4:37:d5:5b:f4:19:1e:9a:92:f3:5e:fb:
                    66:c4:72:b2:94:b1:5a:7f:52:c8:69:29:b0:80:f3:
                    ac:87:43:58:b5:f0:2a:33:20:95:c5:33:46:c9:a8:
                    23:2f:10:ae:06:f8:69:71:43:b3:17:b1:82:e6:01:
                    df:4d:14:25:6b:ac:3d:85:85:bb:48:72:54:74:90:
                    87:e9:1d:49:20:fe:d4:7a:76:72:bb:53:c4:0f:3d:
                    8a:da:9a:20:82:f9:cf:1a:87:2b:1a:66:b3:22:ac:
                    82:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:62:EB:40:55:93:86:AC:5D:4A:3B:37:AB:9B:D7:C7:2D:AA:2A:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d47fe3e9-0d87-349b-aed8-7daded280481.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.201.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:5f:e7:53:23:95:58:3c:df:58:3a:39:75:63:4c:e0:51:ce:
         18:72:8d:6c:a3:39:ba:9b:5c:ec:01:44:08:41:91:66:59:28:
         81:93:37:ac:24:70:22:11:d3:16:5e:ca:8c:ba:0b:02:77:89:
         9d:67:bc:74:80:4c:60:79:50:b9:fe:d7:d9:53:f4:6d:8e:ce:
         4d:e8:34:ba:db:db:63:96:7e:8f:4d:72:38:95:48:84:5e:da:
         b4:7e:8a:65:f2:6a:bc:d6:a9:32:d4:e3:6b:24:ba:ab:69:07:
         40:a0:cf:3b:d0:83:13:aa:c0:50:f0:cc:d3:d3:29:81:36:1b:
         fb:b0:21:e0:6f:ee:71:f1:4b:8a:bf:9f:e8:ab:db:15:0d:f6:
         48:de:69:5b:d8:cc:d9:24:01:72:91:c0:98:91:88:af:c4:f7:
         ef:d0:46:8c:08:7d:7f:56:4b:28:8d:b5:63:6a:9a:a4:91:06:
         0f:2c:52:ba:c5:12:5e:29:82:1f:0e:a4:9b:bd:94:85:65:37:
         a6:dc:d9:0e:b6:a8:0a:eb:64:79:ef:c2:b9:b1:c6:60:6a:68:
         9d:a8:1c:31:24:89:ba:ca:d1:8b:56:a3:1a:bb:30:dd:dd:0b:
         14:85:98:2a:72:8e:c7:55:f5:13:06:a6:a2:b3:a0:4f:45:25:
         94:4c:57:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:56:56 2025 by rpki-client