Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18b6bdac-943a-3c89-a1c9-470ede248760.roa
File:                     18b6bdac-943a-3c89-a1c9-470ede248760.roa (raw, json)
Hash identifier:          6gwEMTlaFu3Mk/dv7+EklwwhoEMBhC5y+yTsANqT/Zo=
Subject key identifier:   0E:04:6A:F9:72:56:BD:BD:75:2E:D0:4D:CD:80:60:36:E1:53:5A:AF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A8F31CAB7AE98F07F599C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18b6bdac-943a-3c89-a1c9-470ede248760.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33668
IP address blocks:        98.209.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a8:f3:1c:ab:7a:e9:8f:07:f5:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=1382a18e-9669-4f5d-a2ea-37f4c97f4130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:29:f6:1a:29:bc:2d:ab:40:9d:ad:0e:4c:1a:
                    61:43:30:4c:91:4f:c5:21:f8:3b:33:0f:08:3a:d0:
                    34:da:95:27:e4:f2:4c:33:a7:35:f1:a0:57:44:c6:
                    74:fb:01:ca:b2:bb:49:6b:60:a1:7a:17:0b:79:d7:
                    d9:ee:ad:8e:ce:df:45:8f:b1:fb:ac:34:43:1f:e9:
                    3e:9d:84:46:83:e9:2c:55:05:55:52:f5:0d:1d:2d:
                    d1:d5:b3:f7:89:d3:1b:f6:53:fb:c0:d7:75:6b:92:
                    87:a7:1c:c0:6f:ee:7e:a1:24:f9:9f:0b:f0:fd:a8:
                    96:ca:a2:b2:8f:d7:7e:c2:c3:17:6b:2c:bd:52:a4:
                    ce:31:25:25:89:0a:a2:78:aa:d5:0f:68:eb:52:d7:
                    2b:49:cc:6c:f2:13:23:97:4a:2e:32:68:da:de:61:
                    85:84:da:de:37:10:eb:ef:f7:f4:bc:42:69:11:f0:
                    2e:93:3a:44:2f:12:7d:dd:37:26:b1:22:3d:2c:7c:
                    7f:8b:0e:3b:e6:db:bd:b5:ea:63:cd:52:25:d1:d1:
                    e1:6a:8b:e0:ea:cf:02:54:bb:86:22:66:77:c7:04:
                    9c:ad:3a:46:4d:d2:4a:00:78:ac:f6:a1:57:6e:e5:
                    97:5c:42:2e:c7:e8:0b:0c:09:d8:92:43:fc:06:c0:
                    bc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:04:6A:F9:72:56:BD:BD:75:2E:D0:4D:CD:80:60:36:E1:53:5A:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18b6bdac-943a-3c89-a1c9-470ede248760.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.209.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:9c:07:85:24:5d:10:5e:6d:87:f5:ba:29:e5:1d:a9:bd:28:
         c2:f5:9d:9e:fe:71:95:9f:9f:45:bb:a9:12:fe:74:c2:99:5c:
         75:97:51:d9:a5:6a:4f:e7:c5:8d:ca:3f:5e:d3:7b:c8:f6:08:
         93:b0:c7:c4:63:4f:92:ba:67:1b:4e:77:81:bc:ad:e1:b7:02:
         0a:ec:c1:ae:4d:e6:a1:ed:47:80:4e:2e:2d:08:dd:28:34:5b:
         3f:87:70:23:51:cc:f6:30:08:30:80:f6:7f:ce:6b:72:cd:09:
         be:dc:19:be:d1:36:f4:44:1c:d7:32:7a:bb:80:e4:6f:22:f6:
         8a:4d:90:ed:9e:f1:bc:36:53:ed:e2:f6:1e:4c:ce:27:de:cc:
         b8:f6:1c:58:15:23:ed:ec:50:22:93:cd:61:6f:c4:a9:18:2b:
         ee:86:0e:6f:a1:0e:f8:35:d3:f9:ec:26:f0:a5:6d:fa:08:73:
         68:1e:fa:19:f7:03:e6:72:72:d3:84:81:2f:5e:fd:2a:38:28:
         fc:0b:e2:e3:b4:dc:65:1b:12:73:cb:cb:63:30:20:1c:88:4d:
         7b:d4:2d:8c:46:1b:26:a9:47:12:60:9d:fe:f9:38:d4:60:89:
         3f:c6:e8:67:1d:be:c1:f9:71:a1:90:32:06:16:cb:2e:08:be:
         73:2e:0a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:22:02 2025 by rpki-client