Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/26c0e1d0-fe16-3a96-879f-e63a3f38b777.roa
File:                     26c0e1d0-fe16-3a96-879f-e63a3f38b777.roa (raw, json)
Hash identifier:          fZHipXmdbEr8s6IIgDIubcqy501bks7Y1P2eTAihcUY=
Subject key identifier:   E7:B9:E9:3B:92:FF:02:E9:A4:99:F5:5B:14:B6:F8:A0:47:6E:9B:52
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB9B95D530A532A61F4D1A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/26c0e1d0-fe16-3a96-879f-e63a3f38b777.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     13367
IP address blocks:        107.2.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b9:b9:5d:53:0a:53:2a:61:f4:d1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=a29b7016-33b9-4654-9086-7d38ce34032b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8c:fb:ef:8b:82:ba:99:7c:f1:70:9f:9e:01:
                    70:0e:d7:f8:6b:03:3f:57:a2:1b:79:e8:1f:de:be:
                    77:2a:5f:1f:72:26:2f:15:3f:81:89:d6:3d:5f:67:
                    8e:c1:41:18:20:6d:d1:c1:6d:91:fb:03:ce:5a:63:
                    21:c6:79:4e:bc:8a:19:3c:2b:62:d6:1e:4f:ab:4c:
                    62:f2:ef:a6:89:88:1d:90:fc:21:01:d7:0c:ac:86:
                    2c:f2:ae:94:73:f2:e6:6c:47:62:ca:da:24:e9:69:
                    82:8a:38:30:b6:2c:98:6f:40:ea:37:62:ea:e3:4a:
                    a7:53:d4:7f:ca:0c:bb:45:8c:94:05:6e:c7:49:78:
                    5c:e3:04:11:f0:2c:1e:86:e3:d1:9b:6c:5c:12:e9:
                    34:e6:e4:43:40:52:21:73:f5:64:b7:6c:86:25:41:
                    42:93:ed:39:07:c5:44:25:2e:8f:a6:d7:67:02:60:
                    8f:58:c0:c8:0a:de:b2:fe:1d:ac:5d:f4:cb:d1:cb:
                    77:31:ab:77:0f:5d:86:6d:5e:03:7e:44:0d:70:2e:
                    5e:bf:13:ef:1c:de:34:d0:3d:0e:d7:8e:9f:ea:b0:
                    f1:67:ac:bf:d1:c6:6a:67:7b:92:99:d3:b8:8d:19:
                    53:c4:1a:bc:1e:60:c7:e5:e8:41:b0:76:94:e7:f6:
                    89:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B9:E9:3B:92:FF:02:E9:A4:99:F5:5B:14:B6:F8:A0:47:6E:9B:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/26c0e1d0-fe16-3a96-879f-e63a3f38b777.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.2.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:4e:9a:bd:55:c9:d2:a0:36:47:15:a8:6e:20:4b:9f:19:5e:
         19:4a:d2:bd:10:95:87:23:2a:ca:95:3b:34:88:e5:04:b8:4d:
         df:99:79:d8:23:c2:44:06:ba:29:a4:75:95:d1:ab:50:85:97:
         54:f2:46:e1:76:95:23:21:40:28:19:5e:16:6e:66:23:df:47:
         76:44:8b:6a:5c:d6:df:1e:b2:70:2b:6e:19:24:8a:f6:db:16:
         6c:be:60:31:b1:0f:ce:77:d8:e9:d3:e1:30:77:d9:fd:8f:18:
         c6:8c:d9:41:f4:61:69:c7:b5:1d:1a:4e:20:b3:ea:2f:61:c5:
         8f:82:b6:47:0b:68:10:0f:a6:25:49:a9:d6:ef:1c:55:79:88:
         96:ff:48:3a:48:19:3c:7e:d0:52:4d:1d:8e:4c:86:36:15:c0:
         b4:91:84:0a:5b:6b:d5:0b:03:86:66:19:76:01:dd:79:58:e8:
         1d:cb:79:dc:0b:a2:cf:96:d8:a5:cc:3c:d2:23:8a:fd:56:73:
         38:fa:c0:8e:eb:69:9a:7d:d4:ed:d8:6b:23:46:af:3e:71:45:
         4e:da:74:61:ff:50:73:82:12:eb:76:df:b3:23:79:76:f5:3a:
         9e:a8:02:8d:33:e7:2a:50:26:07:0c:40:f8:6b:d3:5f:54:2c:
         29:a2:23:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:31:54 2025 by rpki-client