Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a355d77-92fa-315b-81a3-6d15da1ac622.roa
File:                     1a355d77-92fa-315b-81a3-6d15da1ac622.roa (raw, json)
Hash identifier:          Vi2T8ZhbiP+M41OOj17FrtT6QHYlfZXU8EXYHto3y70=
Subject key identifier:   9E:73:50:08:D7:62:62:E1:46:C3:96:34:9F:3B:94:A0:D4:29:DF:C8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE031F50B1101D488E92F138C
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a355d77-92fa-315b-81a3-6d15da1ac622.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        98.242.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:f5:0b:11:01:d4:88:e9:2f:13:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=e25211a2-e208-48f4-b178-796215dfa9a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e5:97:b3:cf:ae:87:2f:2e:ca:b7:76:ed:33:
                    b5:f6:37:71:8e:d0:12:c3:74:99:78:51:a1:0c:3c:
                    dd:08:8a:2a:ea:a4:17:9f:b4:09:5b:80:ad:42:4f:
                    7a:9d:67:e5:6d:f1:e2:44:bf:05:8b:18:c4:5b:8a:
                    e9:98:8e:5d:b9:83:46:2e:6a:78:c8:56:e6:16:23:
                    91:d1:25:ed:c5:9c:97:d6:0f:8a:23:75:57:7d:c8:
                    e7:a5:7e:96:ff:0c:b0:b4:60:35:a7:c9:e4:af:b3:
                    2d:ab:af:45:8e:10:5b:ac:b9:42:fd:5a:8d:04:4d:
                    52:43:35:7c:58:75:14:5f:c6:f0:b1:b6:d1:42:ac:
                    b3:10:1a:b3:d3:8f:d7:10:99:8a:4f:77:0f:22:b5:
                    46:fd:eb:1e:1f:eb:42:aa:16:8c:ca:e4:4b:b6:5d:
                    39:1e:a6:ba:c3:86:60:58:16:26:21:6a:44:57:7b:
                    98:28:68:25:85:ed:e2:d5:47:a6:15:35:e8:f3:00:
                    07:26:27:de:ea:6b:92:3b:6a:9b:0d:1f:0a:49:2b:
                    6c:d7:aa:74:b2:43:84:0c:21:92:c0:22:07:f7:1a:
                    4a:06:8d:cc:1e:51:a7:a2:df:91:ee:92:fa:76:29:
                    ca:f7:47:9b:b0:cb:85:10:89:20:cd:24:ff:50:0a:
                    5e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:73:50:08:D7:62:62:E1:46:C3:96:34:9F:3B:94:A0:D4:29:DF:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a355d77-92fa-315b-81a3-6d15da1ac622.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.242.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:31:f4:2e:a4:57:00:7c:d6:30:fa:57:36:b5:f0:08:2c:a7:
         8c:32:47:97:80:29:cf:f3:12:99:6a:2c:f5:34:45:51:ad:60:
         56:9f:33:8d:d1:07:77:82:97:f1:1f:d4:7d:0e:0b:d5:32:cb:
         07:a9:41:03:12:bf:a8:d3:67:b4:03:5f:62:64:43:5d:8e:ee:
         fe:d6:4c:bd:50:97:75:4f:5f:39:7f:21:a6:f6:29:86:33:ee:
         94:95:88:2c:f9:25:7b:89:84:44:cb:80:08:bc:8a:c6:78:de:
         62:f1:29:71:67:c6:1f:b5:77:95:f1:94:2b:83:0d:b1:0c:04:
         b3:04:cf:ca:00:d0:2f:f3:6d:6f:3a:ae:fc:ba:d8:be:06:5f:
         42:1e:97:3b:cb:15:80:06:0e:94:66:20:a1:12:14:a5:5b:50:
         8b:0b:05:a4:07:fc:e5:d4:eb:92:de:13:2e:7c:16:28:a1:db:
         cc:8e:b1:35:c5:67:b7:a2:30:69:8a:33:5b:51:36:ec:fd:ac:
         15:91:93:c3:e7:84:02:2c:b5:45:2c:cb:76:6c:ba:7a:32:c8:
         93:c4:e0:bf:df:f0:7f:d1:08:22:a3:a1:ea:eb:63:21:e1:25:
         07:51:46:dc:b5:fb:2b:32:08:f9:d8:ff:74:cc:8e:7a:bc:9e:
         1e:84:4b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:11:16 2025 by rpki-client