Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d2c75ec-c6f8-390e-8e9d-7995d1a7ad5f.roa
File:                     3d2c75ec-c6f8-390e-8e9d-7995d1a7ad5f.roa (raw, json)
Hash identifier:          HhTxVq8yvOUgKylxk4b2XcbV3BtdMqy1jwv5q//RBr4=
Subject key identifier:   E1:05:C9:45:5B:6C:58:07:ED:15:1A:6F:F5:BB:EB:E6:3D:94:14:4E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC57B6F5EC6AC550DD92700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d2c75ec-c6f8-390e-8e9d-7995d1a7ad5f.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        98.45.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c5:7b:6f:5e:c6:ac:55:0d:d9:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=c0dcdb2a-493f-4bec-9529-ccf5e230a243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e3:85:34:be:18:ca:b8:ff:d8:c0:72:24:ec:
                    1e:57:19:8f:3d:cd:21:15:e9:7b:e0:08:d6:41:0a:
                    6c:a3:b8:e1:f7:9f:f0:f9:fb:07:bb:b7:72:01:54:
                    00:ca:9d:e6:68:d8:ad:0d:71:79:10:4e:30:52:3a:
                    ed:ff:99:8a:e3:d5:c3:18:0f:09:cc:27:24:15:27:
                    ee:3b:4c:01:77:91:94:86:37:e2:2c:a6:49:a2:82:
                    dd:e7:85:85:5f:b4:09:55:c1:87:99:5a:2b:02:35:
                    6b:0e:e5:99:73:95:3d:f2:c2:16:e7:d4:98:f3:e7:
                    a2:0c:00:68:d4:35:89:bc:fe:9b:0b:2e:7e:24:ca:
                    1b:1d:b9:16:50:53:a6:5f:70:15:b3:6d:50:58:35:
                    6c:26:71:20:e9:52:16:a5:91:58:e6:2a:98:78:10:
                    aa:dc:c8:2b:c9:f3:b6:66:5d:3b:8d:5d:3d:91:8c:
                    1a:5c:8c:7a:56:fa:d5:bd:ab:f5:f6:8c:b1:c1:a7:
                    c6:1f:04:17:a8:95:fc:bf:93:fb:ce:6c:af:85:79:
                    29:b8:c5:79:d7:ee:87:08:76:ff:65:8c:eb:f2:2e:
                    19:db:3b:6c:06:ec:62:a3:91:57:97:9f:c0:5e:35:
                    ca:c5:de:c5:b4:65:c9:af:a3:2c:c2:f5:ec:ad:b2:
                    87:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:05:C9:45:5B:6C:58:07:ED:15:1A:6F:F5:BB:EB:E6:3D:94:14:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d2c75ec-c6f8-390e-8e9d-7995d1a7ad5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.45.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:cd:75:7c:94:53:77:9a:a9:3e:55:3e:40:66:48:bf:93:c9:
         78:c4:a5:d7:0f:77:3a:74:be:57:9d:8f:ce:b1:25:67:15:02:
         72:98:60:f6:45:14:8e:87:ae:94:dd:e2:bb:d1:0a:17:5f:39:
         d3:fe:02:3a:6f:de:e6:ee:d4:00:65:23:4d:0e:c4:c7:50:d5:
         03:77:bf:18:d8:e7:b3:40:06:00:95:63:c5:52:96:cd:c0:d6:
         f6:85:2e:b1:b9:a1:d0:d1:cd:23:a2:e8:fe:72:72:70:f6:b6:
         d6:40:ea:01:6f:80:c9:39:3d:ce:07:42:14:3c:79:97:5a:2d:
         73:4a:e3:6e:04:a5:0f:65:46:ab:8f:db:13:c0:e9:7e:b5:d1:
         3f:1e:e3:5f:79:87:47:b3:00:fa:f5:2a:f1:6a:54:d9:49:12:
         f3:42:c8:a8:07:43:dc:29:ad:06:cd:54:03:c8:36:5b:2b:05:
         bc:69:62:1d:e4:1f:35:8c:d7:48:e0:e1:14:06:41:a1:16:13:
         5f:7e:bd:8f:fc:d4:9c:84:17:35:87:7a:90:26:a0:e9:78:3e:
         aa:f0:67:23:60:2b:67:9f:b2:64:0e:0f:88:09:d1:9c:7d:cb:
         b5:0a:f0:80:d2:e2:57:dc:87:66:f2:f0:50:2c:8f:78:e8:ac:
         30:1c:e3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:52:07 2025 by rpki-client