Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d607598d-b63d-3758-ac49-9d0a92a1ee16.roa
File:                     d607598d-b63d-3758-ac49-9d0a92a1ee16.roa (raw, json)
Hash identifier:          CxXzYE//wBskGejfBgA2JIxXL/85sgI7Z8zcdT2zYNQ=
Subject key identifier:   FC:FB:78:D9:3E:0C:AD:4B:E6:1F:7E:88:49:D5:0B:68:04:52:1C:C6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EE33086F2D96F529B4D520
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d607598d-b63d-3758-ac49-9d0a92a1ee16.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        98.229.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:33:08:6f:2d:96:f5:29:b4:d5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=ed292610-f762-494c-a46b-3865abb4b700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e4:75:86:3a:42:eb:18:15:3f:b2:89:7a:d4:
                    b6:bb:b3:ab:44:c6:38:26:0b:94:bd:85:bd:0a:41:
                    cd:b7:c9:81:c4:b3:77:fb:fe:71:66:1f:52:64:5d:
                    62:57:be:69:3f:48:fa:0e:5b:fa:9a:77:a4:59:58:
                    31:c0:63:1a:ab:21:ee:d9:da:62:69:bc:c3:9c:38:
                    68:6b:e7:97:75:48:07:72:5d:17:63:b2:63:5d:a7:
                    fa:6b:ae:00:53:bc:2e:13:6f:96:5b:bd:f1:00:ca:
                    0d:57:f4:36:94:00:46:c5:14:b0:7f:50:b4:a4:b2:
                    84:0c:cc:ee:32:f1:33:9a:2f:a4:6f:20:bd:28:dd:
                    55:cf:01:86:3a:70:43:e2:7b:ba:26:d3:49:07:4e:
                    72:b6:3c:5b:6e:1a:07:74:9b:fc:33:67:ce:e9:ed:
                    33:47:5e:bc:73:d3:c9:f2:4a:8f:4f:20:c3:17:7a:
                    07:3d:8f:d1:23:45:c1:68:f2:df:90:c4:ed:34:09:
                    2c:db:05:c8:f4:88:c6:43:8a:2c:d4:d3:6f:b0:5f:
                    9e:d0:70:11:e7:33:6f:8d:43:0b:11:a1:54:eb:ce:
                    9f:51:a3:73:09:da:52:d4:0b:e6:5a:b4:6d:f2:b6:
                    95:61:f8:cd:4b:78:3d:a6:26:66:57:c3:88:41:07:
                    67:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FB:78:D9:3E:0C:AD:4B:E6:1F:7E:88:49:D5:0B:68:04:52:1C:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d607598d-b63d-3758-ac49-9d0a92a1ee16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.229.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:bc:4f:9f:8f:e0:b2:42:1b:8f:00:8c:c4:30:b0:b9:fd:33:
         61:a8:73:0e:ef:62:d6:20:b5:3d:6b:b6:f2:31:9b:56:14:84:
         04:00:3b:c9:fb:12:f5:ce:a9:26:50:4f:44:f8:e8:71:d1:98:
         32:cb:86:85:6a:83:ed:af:df:25:b8:37:4f:d6:e1:02:a5:24:
         61:4a:9d:d0:cc:60:02:cb:8c:42:c5:95:47:de:d7:c8:e2:88:
         b7:76:39:5d:8e:75:e9:09:c7:c9:c3:99:47:06:e3:4f:f0:d8:
         5a:33:3b:b7:8d:f4:11:f1:bf:16:04:8f:f2:bd:db:84:57:8b:
         f7:a7:a9:25:2f:23:24:88:a9:00:29:bd:20:27:56:c5:49:e3:
         da:4a:d6:65:1e:2b:d3:cd:aa:d3:1b:dd:ee:33:87:23:cf:04:
         78:cb:68:6b:20:4f:be:3d:eb:d7:01:fd:41:0c:0a:3a:c0:d9:
         b2:ff:1c:a8:e7:72:31:06:d8:93:2e:68:fd:82:f9:c7:a8:f7:
         05:77:e4:30:46:9f:30:4f:73:b4:92:09:a4:95:09:3f:6c:c9:
         92:5a:1e:ab:ae:7c:47:42:e5:3a:df:77:8d:93:96:cb:0e:de:
         95:68:cc:1a:57:24:2a:f7:33:75:82:76:d6:fa:35:6b:ff:3b:
         d7:e0:73:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:41:35 2025 by rpki-client