Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9255a89e-4bb8-39bc-8292-5005761c51c3.roa
File:                     9255a89e-4bb8-39bc-8292-5005761c51c3.roa (raw, json)
Hash identifier:          ysYXIN0BcED/SYcKmhzmPsLH5fzCRJIJqD4+XHrFkLI=
Subject key identifier:   A6:CB:27:AF:23:3D:C5:9C:0D:3F:5A:47:58:67:A7:DA:01:20:CA:B7
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161771D604D887B28C5A4C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9255a89e-4bb8-39bc-8292-5005761c51c3.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     33588
IP address blocks:        98.127.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:77:1d:60:4d:88:7b:28:c5:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=d41826f8-5b35-4d75-a8ea-e2c784da478d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9b:f4:5f:ba:4d:f3:92:07:6c:05:d9:9d:98:
                    df:a1:fa:1b:e4:9b:5d:59:76:47:d7:67:5a:0a:81:
                    94:fa:f2:b5:5e:be:6c:c0:65:e4:7e:75:a4:13:a1:
                    58:46:4b:13:32:08:19:2a:22:72:5d:76:5a:aa:d9:
                    b9:84:0a:dc:1b:e1:bb:f0:2d:9d:66:40:df:36:02:
                    25:25:1f:e8:13:e9:d9:89:49:13:8d:e6:ff:87:ce:
                    1c:ba:6d:9a:26:9c:27:17:b4:f2:9c:51:d4:de:ea:
                    3e:a5:6e:79:54:b8:e5:03:1d:6e:fd:39:44:c7:d3:
                    47:7f:8a:01:1b:ea:49:a2:34:e5:51:57:f2:2b:cb:
                    ea:ed:a3:93:cd:2e:62:88:57:65:85:fc:45:09:05:
                    5b:95:42:15:d6:e2:df:2c:13:94:ba:4e:54:d5:98:
                    b1:e3:e7:e1:00:38:f9:99:3d:53:6d:bb:1e:70:24:
                    c3:7d:20:f0:e3:35:c5:a8:1f:58:23:fb:db:f6:ec:
                    65:fa:3a:27:e9:32:dc:b8:62:51:13:2f:51:bd:77:
                    e8:71:47:79:f9:e5:ed:af:8e:06:57:89:03:31:ba:
                    6e:03:1e:32:a4:ba:bc:c0:bd:85:af:43:a8:22:bd:
                    c8:c0:c5:08:ed:4e:68:b8:c6:85:f5:06:b0:94:e8:
                    b9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:CB:27:AF:23:3D:C5:9C:0D:3F:5A:47:58:67:A7:DA:01:20:CA:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9255a89e-4bb8-39bc-8292-5005761c51c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.127.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:8c:00:18:b9:99:bb:95:32:d6:86:b1:9d:4a:88:db:5e:9a:
         a4:08:3b:84:7f:b7:55:30:6b:14:07:b6:59:c0:dd:b4:00:22:
         be:86:07:60:4d:23:b9:cd:de:34:9c:80:b8:a6:9c:b9:35:a5:
         17:d2:0d:d9:7f:b2:8a:1b:2c:25:84:2a:ef:11:2c:a1:03:97:
         cc:4b:9f:1b:c6:fe:f3:31:fa:83:8a:ab:43:f8:c3:0c:de:34:
         20:7b:d7:c4:4a:82:ba:6f:90:17:4e:26:1c:f7:03:7d:ca:bd:
         b3:ba:d1:ab:27:3d:5e:e4:ec:7a:42:6a:83:9f:b3:5e:5c:f6:
         cf:cb:ea:91:df:e2:e2:c8:78:c1:6a:47:2b:e5:6c:f0:ed:d5:
         01:cc:ad:3b:c3:b0:70:50:7e:d9:18:6f:28:38:11:02:12:1e:
         c9:f8:9f:dd:0d:c3:06:50:92:b3:58:1f:85:55:2a:f0:5e:71:
         b0:07:00:33:6f:ad:ff:d9:61:ee:bc:16:9e:04:8c:bf:70:d8:
         12:60:ab:96:2f:d9:fd:d8:c3:1a:69:9e:cc:6e:44:63:30:10:
         c5:e1:98:71:97:3e:0d:15:ed:af:f0:5d:1c:b9:49:0d:de:71:
         02:61:11:b2:83:55:34:3b:b3:70:d2:1f:85:68:78:9d:0b:67:
         b7:7e:cc:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:17:49 2025 by rpki-client