Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/178f9674-2c22-31b1-9366-c442e989ae4c.roa
File:                     178f9674-2c22-31b1-9366-c442e989ae4c.roa (raw, json)
Hash identifier:          dY9DfWhU8Ph69z8HV6V+ZF1QIgzLAJ6+5oJHE1P4zCM=
Subject key identifier:   08:A5:46:A3:EF:55:10:44:8D:E2:CF:67:67:23:FE:E8:22:1E:0B:78
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A955346E32AE424B03CAC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/178f9674-2c22-31b1-9366-c442e989ae4c.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        98.57.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:55:34:6e:32:ae:42:4b:03:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=c0af2ec8-67c1-444f-baa8-a1ae0a00ac58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5d:37:3e:e3:b4:06:8e:e1:da:e5:e4:16:e4:
                    b8:79:ca:35:a0:ce:f1:20:aa:f4:d5:51:a9:81:fe:
                    80:4b:47:67:8f:57:e5:cb:10:fb:b1:dd:ec:dc:bf:
                    a1:91:8e:4b:ea:8b:33:8e:57:12:61:28:b9:9d:2a:
                    84:d9:e5:f6:11:8c:9f:9d:dc:09:fa:47:e5:7a:97:
                    db:80:91:6b:eb:0e:03:ec:eb:2a:d4:76:1e:67:94:
                    64:7f:ef:15:52:59:2d:73:2c:bd:bf:e0:0c:45:67:
                    be:96:2b:b9:3b:77:65:4f:3e:3f:ab:d5:54:83:89:
                    5a:c7:f5:e1:72:e9:1e:fc:e2:eb:5d:89:8b:04:15:
                    e1:51:13:2d:1f:60:f2:ef:c6:26:4e:7a:73:d9:b7:
                    6e:53:6f:bb:f0:ff:6b:6f:bf:5a:e4:c5:7b:50:97:
                    af:fa:54:2a:c1:3a:51:ba:11:f2:75:4a:87:91:d5:
                    75:bd:92:37:67:a1:8e:7e:33:3c:56:6b:02:6e:3b:
                    c8:be:4c:9b:5f:b8:06:98:03:2b:3d:bd:d9:de:d6:
                    19:92:70:e8:dc:24:c7:2b:82:58:51:4c:7c:cb:c3:
                    13:9d:44:8d:dc:13:d7:82:e8:84:9e:ce:a7:a4:42:
                    bc:54:20:47:3c:23:d3:26:05:c4:3c:5d:aa:40:a1:
                    6a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A5:46:A3:EF:55:10:44:8D:E2:CF:67:67:23:FE:E8:22:1E:0B:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/178f9674-2c22-31b1-9366-c442e989ae4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.57.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:59:7f:56:b5:03:3b:32:3f:77:05:0c:3d:75:fa:70:3c:9d:
         fc:94:14:a8:ed:b6:cc:68:94:de:8d:e2:f0:30:3f:02:66:14:
         75:a5:7b:0a:1f:e4:bd:c1:61:af:b6:f0:df:79:29:7f:40:59:
         5e:36:7d:3f:15:db:02:be:d6:42:fd:de:8a:ab:e1:a1:28:6c:
         ef:94:f7:e7:9d:01:1a:41:e8:98:83:6e:21:82:e8:b2:5a:e1:
         67:25:f9:d4:2b:53:5e:50:61:de:e6:5c:0d:69:c7:d9:ea:34:
         c6:8f:97:d0:74:1a:c2:5d:4d:3b:b1:a5:7a:2f:0b:f5:0a:fd:
         24:40:a0:50:e8:90:44:f5:dd:2c:0e:bb:e5:ac:08:f5:ff:41:
         f3:cc:3d:50:59:58:fa:9e:f9:3c:3c:c6:43:82:91:b1:bf:80:
         f2:ad:40:ff:62:2e:86:3e:a4:36:f8:53:82:77:3e:d4:6e:8d:
         95:9c:20:39:3f:25:a1:dc:98:69:63:9e:46:c9:f7:2a:e0:3a:
         19:4d:58:24:53:6a:6e:25:cb:eb:b3:20:ac:73:99:c2:f8:4b:
         b7:bf:03:ff:0a:2f:72:3b:fb:8a:9e:29:7d:81:86:9e:e8:6c:
         d4:f3:11:fd:26:fe:04:a2:f6:a0:be:79:41:57:b7:52:da:78:
         23:ef:a8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:24:03 2025 by rpki-client