Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/384010f4-fc74-38b6-afdc-e327b2eec4ec.roa
File:                     384010f4-fc74-38b6-afdc-e327b2eec4ec.roa (raw, json)
Hash identifier:          wr1CIxVSV22eZdRiXLSIPUAR5qdjdcqHnt5PN+hRQeY=
Subject key identifier:   82:04:C8:CD:98:0E:88:C7:27:43:9A:F9:4C:1D:F4:D6:74:D7:B6:69
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB81CB6A16482E6626169C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/384010f4-fc74-38b6-afdc-e327b2eec4ec.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     13367
IP address blocks:        98.61.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:1c:b6:a1:64:82:e6:62:61:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=c35556e0-6050-489d-8470-c2cbbbf79468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:98:b9:f8:8f:74:b7:b1:3b:08:6d:fa:30:cd:
                    cc:80:f9:4b:e4:1e:e9:9e:6e:a8:88:ed:e8:01:6e:
                    cf:11:c7:1e:33:1d:d8:57:b8:07:4e:fc:08:63:eb:
                    8c:62:5e:0b:c1:76:9b:41:37:61:f7:31:5b:2f:af:
                    16:70:f1:1a:4d:50:9a:e7:80:7b:f8:36:6c:ab:a0:
                    43:07:b3:16:b6:ff:83:5a:ff:9d:83:40:ca:32:fe:
                    48:a8:38:94:d3:ab:e8:fa:9f:6a:48:cf:0b:db:a6:
                    69:74:2e:d8:4c:01:35:53:17:ce:f5:20:2e:4f:b2:
                    04:c5:2a:28:b1:3b:67:3c:fa:6e:8f:a9:46:3b:34:
                    ee:a3:19:f7:b7:28:bc:20:e6:f8:4a:75:f1:b3:0b:
                    a1:e3:7d:31:bc:cf:10:d7:97:14:2c:79:f0:f1:12:
                    b7:aa:ef:0a:a1:41:d9:a5:bf:5e:e1:09:96:b1:05:
                    d0:bd:df:38:0a:52:b2:36:aa:1f:a5:95:57:cb:01:
                    af:a8:ad:8c:ec:70:a0:3b:07:65:9e:ac:fe:3e:be:
                    8d:ba:d3:61:20:bc:e9:7c:41:21:f0:1b:c4:1f:0e:
                    a7:17:e2:67:94:9b:9b:98:5b:c3:b7:17:b7:5c:46:
                    8d:52:b5:ab:02:a4:fb:74:59:b1:f8:ee:89:54:91:
                    14:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:04:C8:CD:98:0E:88:C7:27:43:9A:F9:4C:1D:F4:D6:74:D7:B6:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/384010f4-fc74-38b6-afdc-e327b2eec4ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.61.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:1b:5c:86:f2:9d:42:f3:77:79:b3:e4:81:49:8d:6f:34:7f:
         76:4a:7f:7e:52:c2:62:91:a6:dd:56:5f:07:2e:6a:b0:58:3e:
         e1:80:8d:25:a6:c7:e4:ff:c2:32:40:7f:5a:7c:30:46:2e:fe:
         86:8c:90:72:41:1b:e6:f0:43:81:5e:aa:e0:16:9a:ef:8b:ea:
         14:d2:7b:27:11:99:f6:69:55:1c:81:f9:41:92:10:e3:91:30:
         26:ba:78:9b:f3:fb:b7:02:80:17:4c:8a:9e:29:94:bf:c6:c2:
         75:50:77:b6:12:80:76:ca:65:19:63:a1:b0:30:75:01:8e:31:
         e6:74:f4:6d:e2:67:6c:ab:59:e9:fb:62:ad:20:50:5a:6e:de:
         c7:b8:10:83:5f:ba:8b:42:6a:92:46:3e:cc:41:63:1b:30:9d:
         36:f7:d1:31:9a:44:32:02:b0:38:f9:84:8b:12:c2:df:dd:df:
         ee:0d:ad:85:f6:bd:1c:bc:56:b1:f2:5b:d9:57:94:d7:3a:10:
         e7:79:bd:ea:f6:ac:71:33:94:99:0c:b7:22:e4:32:35:08:ea:
         79:26:91:07:46:c9:a4:6e:09:20:7c:29:88:65:84:a3:3f:0a:
         ff:87:0d:9a:5c:9b:d2:65:9d:1f:8c:17:67:16:69:95:ac:c9:
         c0:ec:82:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:09:18 2025 by rpki-client