Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f05d869e-df3a-3f09-8bba-b5925d2e6dd5.roa
File:                     f05d869e-df3a-3f09-8bba-b5925d2e6dd5.roa (raw, json)
Hash identifier:          Ndi09eqHR6p+kztldGZlD+zuC76eTdjI/LD9YHKjIHU=
Subject key identifier:   76:F8:69:81:AF:C1:DA:06:EB:98:8D:F4:36:69:14:F9:28:48:61:D3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ECE5368AFED3EB12DF6F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f05d869e-df3a-3f09-8bba-b5925d2e6dd5.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        98.250.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:e5:36:8a:fe:d3:eb:12:df:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=b98da382-d8dc-48bb-9dc7-2d8e3c3396cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:81:06:54:c5:3a:c5:32:44:02:0c:ba:60:33:
                    9d:dc:49:bc:dc:d0:5f:f4:50:50:24:f1:25:2f:a5:
                    c5:61:6a:a7:bf:5f:27:ff:4b:1e:99:a8:c4:b0:9f:
                    db:a6:2e:bc:17:ea:10:84:21:83:1e:f0:47:58:e4:
                    bb:67:47:2e:e7:f8:63:56:4a:d2:02:6b:89:ca:e1:
                    44:4f:51:ff:14:21:8d:3b:6d:65:b2:3b:9e:60:ed:
                    2d:e0:a4:72:20:fc:8e:75:b9:4b:3f:79:eb:ba:5f:
                    fc:d9:b3:5f:27:60:14:4a:7a:e6:35:e6:07:81:c7:
                    31:43:a3:69:bb:94:88:1d:6a:1f:8d:b3:90:ff:db:
                    ee:d5:fe:07:74:6b:cf:97:51:0e:e3:e7:03:d5:99:
                    cf:ec:82:ff:1a:5f:37:cc:3e:a4:43:ad:b8:57:70:
                    17:8d:ac:71:70:67:97:7c:2f:af:06:7f:e5:5f:d0:
                    5d:5f:03:c7:21:e9:30:e2:53:08:12:5a:4d:19:d9:
                    43:0f:c0:81:c0:42:ed:63:34:25:66:d6:37:78:5e:
                    71:b6:3a:8a:eb:ec:b0:fb:0d:1c:92:30:f3:37:81:
                    8a:88:fe:43:d4:8a:ce:89:8f:14:34:d9:c5:ab:50:
                    65:15:a7:d2:f2:c2:94:d7:38:e3:7f:23:cc:15:01:
                    b9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F8:69:81:AF:C1:DA:06:EB:98:8D:F4:36:69:14:F9:28:48:61:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f05d869e-df3a-3f09-8bba-b5925d2e6dd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.250.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:c3:2f:b5:b3:f6:4d:2d:e5:6a:c5:49:26:55:b0:e3:17:ec:
         09:d1:17:8f:48:31:42:76:cf:7a:30:df:71:4c:1e:b9:8b:60:
         54:54:2c:0f:10:69:90:a5:68:b6:7a:c0:28:bb:84:68:7d:ed:
         eb:74:b5:a7:9f:2a:05:75:7f:28:95:c2:fd:5d:89:de:1d:ef:
         7b:1c:fe:09:2e:0d:92:28:04:af:11:8a:2b:4f:79:0e:1a:d8:
         17:be:69:fc:83:ca:f1:4a:35:d9:ae:9a:85:c0:e1:e9:99:0e:
         e6:a9:d5:1e:b6:25:f6:18:98:b0:3e:c0:7d:a3:02:87:2a:d9:
         c3:8e:45:22:82:cb:07:a2:fa:62:a2:c8:28:3e:6a:04:8e:dc:
         bb:82:62:f9:f3:98:29:41:4b:14:2a:84:d6:09:62:d2:6c:0d:
         4a:20:e6:25:46:db:b7:12:48:e0:c5:c7:f8:16:a0:bd:41:1e:
         fc:b5:d0:a1:f8:c5:42:a0:9c:3b:fe:4c:99:37:ae:b4:f3:d5:
         59:49:01:56:7d:de:f7:e6:11:f7:dc:e9:c8:9a:60:5b:65:af:
         0a:06:f3:d2:4b:20:71:63:2d:53:0f:00:fc:db:aa:8a:b3:ea:
         e6:b1:d8:1a:cf:d6:cf:87:9c:f9:68:ce:fa:d0:e3:78:d8:f6:
         f0:c5:7d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:49:46 2025 by rpki-client