Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6acf264-ab7f-3743-b6a5-0c1b1774fa12.roa
File:                     e6acf264-ab7f-3743-b6a5-0c1b1774fa12.roa (raw, json)
Hash identifier:          HCVpPOS/ku+Mvg2WA9M+HZWxXGPi8gU/z8WST8iq8TI=
Subject key identifier:   96:73:8E:FA:65:51:69:7A:90:96:B6:A0:FB:79:CA:9F:1F:92:EF:92
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EEF8070BD478298EA07300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6acf264-ab7f-3743-b6a5-0c1b1774fa12.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33662
IP address blocks:        98.39.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:f8:07:0b:d4:78:29:8e:a0:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=31737030-b489-48d3-b0a2-111f3a0ca72d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:82:09:a4:cc:46:7e:3e:2a:0f:4e:1e:6b:30:
                    89:35:de:82:40:5c:53:9c:56:38:f0:39:1e:ca:93:
                    66:9a:8b:40:65:c2:e9:ba:a1:83:2c:a7:a1:35:d1:
                    f8:03:59:6a:63:a3:ef:1d:d8:a4:79:fa:d2:0f:6f:
                    1b:1f:1e:9f:e2:fb:40:bd:72:31:ef:13:9f:67:df:
                    dd:e3:21:07:3a:bf:3c:77:62:ac:2a:3c:c7:de:ed:
                    49:c6:e0:ba:42:c8:0d:4b:e6:a5:00:af:08:a6:df:
                    db:6d:68:8e:d4:26:ab:2c:a6:f9:b6:d0:63:23:9d:
                    f5:6b:3a:ba:71:ec:36:a6:84:66:a8:cb:e4:ac:60:
                    c1:3d:fe:3d:ee:00:88:a1:8b:29:0f:f8:e2:24:4e:
                    65:8c:65:31:f8:c1:ee:f8:1e:ef:78:a7:ea:60:03:
                    ac:61:17:5b:0a:41:72:26:33:8c:b0:c9:f2:56:2d:
                    3f:10:ac:4a:e6:1d:bb:06:bd:e4:4f:e9:0c:35:30:
                    fb:0a:8f:6d:2e:31:37:fe:fd:6f:74:54:93:ba:7a:
                    69:40:09:e9:f4:c9:63:34:f8:ff:85:01:d7:6b:2a:
                    19:69:5f:1d:96:13:ca:84:68:c4:d2:ba:c7:aa:6c:
                    25:38:74:44:3b:b7:0e:28:5d:5c:ba:9e:c6:22:b4:
                    38:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:73:8E:FA:65:51:69:7A:90:96:B6:A0:FB:79:CA:9F:1F:92:EF:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6acf264-ab7f-3743-b6a5-0c1b1774fa12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.39.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:8d:22:6d:f2:3f:94:e2:3c:64:f0:41:de:4c:77:9f:77:0a:
         99:e9:38:20:eb:be:56:fb:c3:9a:3f:60:ff:93:a8:1b:f0:76:
         7d:ab:4d:c5:f7:37:b4:00:31:ba:b6:ac:c7:69:98:72:e1:38:
         5d:5f:b1:c8:96:e5:d3:0a:f6:ed:a6:1d:db:f2:a5:61:94:02:
         66:fa:c0:b0:c0:72:fb:e7:bc:df:08:09:5b:4f:66:00:2d:26:
         d0:b5:d2:34:14:53:7f:9e:ed:d6:a6:df:c2:4e:08:de:3f:dd:
         28:68:c9:48:36:8b:67:5d:6c:7a:8f:83:f4:03:6b:50:20:3e:
         4c:89:71:d7:73:4a:d9:87:ba:e6:68:c3:82:20:0b:28:87:a4:
         5a:b8:93:85:db:6b:44:c4:94:7e:ad:53:19:2f:2e:7b:f0:4f:
         51:e1:54:87:0c:06:cb:5c:1f:60:b9:f2:df:15:0e:18:e2:d7:
         f3:6f:ba:74:c7:d3:66:a6:ea:54:a3:33:32:fb:3f:79:49:1f:
         e8:d9:da:c5:9e:0d:88:50:79:01:df:3c:3b:fa:ea:9f:d0:ff:
         0e:7d:48:a4:60:92:2e:2a:d1:24:36:67:be:a3:a7:d2:e4:c5:
         7e:3f:8d:9f:0f:c0:ed:92:68:e6:df:cf:b1:b0:94:33:7a:07:
         09:6d:be:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:32:51 2025 by rpki-client