Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0dc0d387-396d-30ef-a527-6b801be76ad9.roa
File:                     0dc0d387-396d-30ef-a527-6b801be76ad9.roa (raw, json)
Hash identifier:          xgMSYQYD6+U/s6+IeEkg+B2zUeOeb9nWEv4vq5UMoRs=
Subject key identifier:   3B:D4:0F:70:BF:B6:3D:61:BC:5F:80:47:C1:54:A1:16:85:5B:82:D2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB8D18D83408134570921C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0dc0d387-396d-30ef-a527-6b801be76ad9.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     22909
IP address blocks:        98.40.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:d1:8d:83:40:81:34:57:09:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=108a3d10-46db-4beb-9c4f-f3ae65c195c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ed:84:a8:76:30:1d:db:29:bc:c4:69:96:0f:
                    94:60:f9:85:02:b5:51:07:54:f8:e0:25:85:c3:30:
                    70:ed:1c:68:25:ce:4d:fd:63:40:80:81:3e:5b:64:
                    22:2c:3b:74:50:7f:8f:ca:74:f8:48:44:a4:37:9f:
                    35:fb:d3:d0:da:2a:58:f8:56:18:6a:bf:fa:48:86:
                    52:fb:6f:66:0e:2b:e3:7e:71:7e:35:f1:f5:54:ee:
                    7b:4a:cc:57:c9:f9:5f:16:1a:e7:e9:d4:d1:1f:a4:
                    8f:3d:9a:3e:58:91:d1:00:aa:f4:f4:bd:dd:45:92:
                    95:92:3d:50:ac:34:21:39:de:1b:0a:aa:9a:cc:6d:
                    97:ee:0a:1a:65:54:c3:3e:02:13:d9:68:18:c7:89:
                    2e:c5:ea:f5:d3:ab:75:0e:dc:b7:0d:69:6f:8a:1a:
                    ac:8a:32:86:fb:3c:ed:10:2e:d1:74:ec:de:47:64:
                    29:ec:07:1d:0c:9a:69:1d:09:e3:34:3d:49:f8:25:
                    5e:88:d1:27:7d:b6:0c:fc:7c:9a:85:ea:f7:83:40:
                    9c:0e:19:80:75:8c:17:2c:ee:3d:5f:33:b6:9d:60:
                    f3:5d:e3:d5:fc:0b:9d:8f:67:66:6a:08:1a:6f:0a:
                    79:b3:73:58:dd:25:e9:2b:c6:39:d8:fe:b4:89:0e:
                    a0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D4:0F:70:BF:B6:3D:61:BC:5F:80:47:C1:54:A1:16:85:5B:82:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0dc0d387-396d-30ef-a527-6b801be76ad9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.40.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:57:56:fb:c5:79:6b:32:ba:5a:ce:e1:e4:a4:b0:85:50:8d:
         14:3a:f6:de:19:0f:f7:16:a5:90:9f:6f:3d:69:9d:ee:6b:75:
         16:6a:b5:53:d7:a5:6e:0e:f3:6a:d1:8f:fd:b3:dc:e8:5d:b1:
         42:23:82:f3:22:c5:f1:b7:45:71:d3:26:3d:1c:9a:f2:2a:76:
         21:2a:f1:11:24:20:97:f6:bc:e9:95:a4:74:d1:47:08:ee:1d:
         db:fe:b9:bf:98:e2:a5:7f:ae:3d:82:a2:be:09:61:76:4f:24:
         92:63:a1:35:26:41:f9:39:55:f4:13:40:6e:74:26:9c:fd:31:
         46:93:a3:ba:92:e2:6a:14:0b:9d:91:af:bb:c8:ac:c5:29:b6:
         19:29:8b:83:da:e5:4c:79:a1:5a:66:7f:24:42:31:7e:d8:bc:
         da:1e:b3:cf:f1:7a:b3:13:41:d4:ee:1e:fc:c3:43:32:fc:9e:
         2f:96:3d:5d:09:30:fc:0e:d8:a9:29:2f:3a:a2:b7:ec:9a:c1:
         53:fa:3e:8f:e4:60:33:a0:5a:2f:d4:84:f8:b5:c1:11:4b:0a:
         06:91:01:95:60:37:e7:b5:70:35:3a:8a:06:fe:09:1e:79:68:
         8a:42:65:60:90:9a:56:d1:8e:57:01:84:f6:aa:4c:20:e3:30:
         a8:9b:63:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:11:13 2025 by rpki-client