Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b6529b1-16f7-327d-983f-4b905b236204.roa
File:                     3b6529b1-16f7-327d-983f-4b905b236204.roa (raw, json)
Hash identifier:          +rQAJ3jJ0gnGiqsd9PyO+hrrn8xE8JBtovB6ZScPRP0=
Subject key identifier:   36:B3:88:19:70:E0:DF:20:78:56:64:AA:04:B4:9B:AD:BD:5A:57:E0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B92DD83F4CA4F001D55FAF580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b6529b1-16f7-327d-983f-4b905b236204.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     22258
IP address blocks:        98.251.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:83:f4:ca:4f:00:1d:55:fa:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=6cf5f9cc-542b-4986-898b-06dd6cdf35c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:97:92:8f:d3:92:5a:8d:88:02:0f:62:02:b6:
                    80:db:02:aa:6a:f8:34:d4:71:68:24:27:a8:15:fd:
                    e6:c5:8d:cf:d3:89:92:2f:87:24:b0:81:82:6d:a3:
                    eb:3f:d2:d2:83:b1:69:3c:c6:78:14:b9:59:56:d9:
                    af:89:eb:71:93:85:cc:22:4b:a4:aa:0d:b4:43:99:
                    37:3e:03:07:5d:90:60:a1:e7:20:db:df:7a:ce:93:
                    e1:90:70:f7:09:6f:03:49:8e:6b:25:97:13:fa:1f:
                    18:ef:76:bb:3f:8d:3c:a0:70:19:ee:42:f9:2c:6b:
                    00:6d:35:f1:5e:87:8d:c1:ed:f1:5b:92:bc:bb:ff:
                    50:d7:73:61:06:4b:98:a9:c3:74:d5:5a:6e:87:79:
                    7e:d5:8d:d1:40:c7:16:dc:f8:d6:56:b5:bb:88:be:
                    e9:04:06:95:9a:3b:b5:e8:5c:81:f5:f3:13:a4:9e:
                    91:9b:68:45:e7:80:e5:0b:28:74:0f:b4:a8:06:d4:
                    99:57:36:ef:07:00:26:74:82:2a:a9:48:20:97:4e:
                    7e:08:23:19:f0:17:c2:0c:c9:7a:10:6c:a6:12:22:
                    ae:4b:da:7e:8d:df:e7:ad:0e:58:cc:8f:02:a2:f7:
                    3a:db:0d:37:66:64:20:29:ee:d1:fc:e1:92:dc:fd:
                    59:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B3:88:19:70:E0:DF:20:78:56:64:AA:04:B4:9B:AD:BD:5A:57:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b6529b1-16f7-327d-983f-4b905b236204.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.251.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:d6:97:2c:5d:0f:06:92:af:6d:03:18:19:72:ea:d0:ed:65:
         ae:16:cc:04:f7:3a:7c:9f:dc:c2:d6:0a:13:5b:a0:4e:17:6c:
         d4:80:96:28:1d:9e:6a:a9:93:4c:35:e1:ff:74:27:1a:dc:52:
         e1:08:28:f0:e1:5c:8b:ee:8d:1e:3d:fc:a2:7c:a2:98:71:a7:
         9d:59:97:e0:9b:9b:d3:84:80:a2:ff:cc:4c:40:44:24:61:12:
         f0:e8:e7:8f:1d:b8:7d:78:14:dd:57:e3:dc:8e:ef:1d:6c:56:
         3f:44:7d:a0:78:67:91:a2:1a:9d:42:9c:f9:58:b3:dd:23:fa:
         42:af:c2:1b:42:17:a9:11:c5:8e:0c:af:e1:00:eb:bd:cb:92:
         65:59:ab:40:32:43:a1:45:68:dc:4b:d7:0b:ba:4f:8e:aa:24:
         91:14:1d:e0:82:eb:00:14:41:59:3c:8a:23:6f:5a:df:37:79:
         26:80:fb:8f:ca:cc:23:f5:ae:df:ef:6e:a0:70:8d:db:f1:a6:
         59:e9:37:bd:2a:34:84:4b:30:d8:4a:9f:0e:82:25:e9:d8:52:
         5e:34:5e:1f:ec:a4:75:e7:39:f4:fa:6f:7f:3a:53:97:cd:e0:
         97:ff:c7:42:62:f2:78:b0:ce:a2:59:90:91:d4:ab:97:2d:d9:
         3b:18:c1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:02:52 2025 by rpki-client