Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02c2000c-0b49-3721-9fdb-c5ae46ed5ae2.roa
File:                     02c2000c-0b49-3721-9fdb-c5ae46ed5ae2.roa (raw, json)
Hash identifier:          7QwqKREJY2xOeKGE4fX6wir1w4egb5PoymoG4O/pOQ0=
Subject key identifier:   C8:FD:3B:07:F9:45:68:EC:F0:48:C5:CA:81:B8:48:D9:6D:FE:64:FD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC4DFD428EF793201ABAC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02c2000c-0b49-3721-9fdb-c5ae46ed5ae2.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        98.227.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c4:df:d4:28:ef:79:32:01:ab:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=87f05aca-783a-40d8-9ba2-1a68da922562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:24:a8:a0:13:80:48:89:d1:8d:d2:68:69:ab:
                    46:46:4d:3d:67:12:fe:aa:73:7c:60:73:ed:cd:29:
                    1b:be:ba:7b:01:15:b9:f6:6c:2a:92:b1:71:2a:00:
                    07:03:92:19:85:ab:95:61:04:1f:36:97:30:d2:94:
                    6b:ad:51:8c:58:30:74:d1:7b:7a:7f:63:f0:d3:20:
                    dd:3a:09:c0:c5:b1:d3:d7:ad:ca:a7:9c:ce:09:d7:
                    4e:d9:8c:42:b5:b5:92:01:02:3e:9f:f4:55:b9:ba:
                    ae:09:24:ce:de:67:df:35:34:91:52:10:27:25:ec:
                    0a:c8:8e:d5:2f:5d:c9:4b:68:db:c7:26:c4:ea:6c:
                    97:ac:f4:f8:8b:66:d6:4d:0e:05:92:af:14:75:22:
                    fd:60:b4:d4:a4:b2:c8:3e:0e:aa:e2:7a:0b:c7:f3:
                    b2:c3:0c:5b:db:91:1b:fb:4e:17:e8:ad:b4:c3:85:
                    4e:e9:4c:7b:7d:09:62:be:ff:83:36:fc:78:30:74:
                    cc:c9:8d:de:1f:08:c4:24:9a:97:09:51:36:3b:13:
                    af:62:61:a3:90:d7:5b:bb:f8:8e:98:59:e3:29:59:
                    46:33:5c:56:c2:52:46:fe:20:5f:3c:8c:bc:7b:53:
                    ae:d4:ea:3a:52:54:d7:32:41:61:db:fa:6e:bd:4d:
                    4c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:FD:3B:07:F9:45:68:EC:F0:48:C5:CA:81:B8:48:D9:6D:FE:64:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02c2000c-0b49-3721-9fdb-c5ae46ed5ae2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.227.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:a4:aa:71:48:56:49:b3:d6:3c:e6:c8:eb:49:90:9e:18:e2:
         6d:3d:a0:9d:f6:50:a6:95:78:1e:73:0c:6e:a1:0f:59:21:f5:
         0f:b4:f6:95:d9:6e:4b:47:d9:60:38:e5:73:cb:84:5e:a4:51:
         58:8c:ea:b3:0a:92:f2:07:87:76:93:64:c7:dd:5b:3d:24:fb:
         d0:2e:23:43:a0:88:f0:65:5d:e7:4c:e5:33:91:47:b8:b0:f7:
         5c:2e:c5:64:68:89:73:79:0b:08:ef:52:d8:8f:3a:dc:c9:23:
         a6:63:12:6c:59:91:1b:82:f4:55:32:1b:f8:bf:1a:08:b7:c3:
         bd:0c:92:c9:46:0a:34:8e:e3:f0:ca:fb:4e:01:ac:eb:20:e3:
         1f:49:17:d5:7a:71:37:71:5e:8c:a9:3a:45:8a:38:ac:eb:6c:
         cd:74:ec:47:2c:eb:69:2c:54:3c:90:52:91:26:6f:36:40:5e:
         5d:01:ca:9a:7b:b0:15:9c:52:f0:e6:76:f7:b4:22:d8:cd:d0:
         c9:ad:d4:a1:9b:38:6e:f2:9d:2e:b5:b0:c5:01:e2:5e:d3:37:
         ac:03:95:4c:0b:3c:32:16:66:6f:4c:54:4c:94:42:ec:72:2c:
         f7:6a:f5:4e:38:24:1e:f2:4f:bf:bb:0f:f4:12:bc:76:1a:58:
         2c:b7:02:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:49:55 2025 by rpki-client