Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44e9b6d7-5b2e-34bd-a64a-c4f258d523a3.roa
File:                     44e9b6d7-5b2e-34bd-a64a-c4f258d523a3.roa (raw, json)
Hash identifier:          k57jcrZCtuvz8r7lFsWK0Ay5/zr88R62Egxou2KHhXA=
Subject key identifier:   79:44:1F:96:AF:53:C8:72:F4:FE:17:D0:3D:E1:6A:7C:3C:D3:2B:67
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC4D7B15FD71D0EB4670480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44e9b6d7-5b2e-34bd-a64a-c4f258d523a3.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        98.215.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c4:d7:b1:5f:d7:1d:0e:b4:67:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=46600512-f7a6-4a9a-9eea-8a12de417af0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d5:b6:df:e5:5e:dc:d5:07:42:ea:a5:6e:6d:
                    ce:90:f1:c3:b4:71:74:45:e8:4f:04:0a:b0:da:39:
                    3d:4f:0f:d9:95:25:0a:d2:63:d7:4c:f5:a3:9b:cc:
                    13:45:b7:62:72:fc:dc:48:d1:38:d9:f4:f2:f7:eb:
                    0b:f9:ef:39:6a:c6:65:4b:2d:d9:bf:74:86:bd:f9:
                    d7:af:44:f3:0d:ff:58:6e:3b:78:e7:bb:76:b6:3e:
                    f5:dc:bb:8e:f8:16:c9:4f:9d:34:76:13:a9:50:7a:
                    87:57:4b:5f:9e:4c:fc:7c:f5:bf:ba:b5:ba:4d:24:
                    78:44:9e:f4:d8:25:c5:14:63:6e:22:ad:6c:42:4a:
                    b9:45:77:6d:5d:f1:0a:e5:73:4c:cf:63:53:56:b3:
                    8f:7f:a2:7b:27:82:8d:67:6a:95:0b:04:1c:47:58:
                    c5:86:2b:10:2b:74:ae:61:89:02:e0:7a:81:02:8a:
                    37:e6:06:22:60:ec:dd:ae:d5:cc:16:56:f8:a6:d3:
                    1d:a5:84:0d:e3:dc:e1:0c:2b:7c:56:b4:61:05:9f:
                    0f:4f:11:e6:52:ca:ce:e0:9e:56:7d:ea:0a:ff:1f:
                    76:37:82:ca:9c:d8:3b:9a:65:21:97:5b:17:ab:f7:
                    b7:94:48:d2:73:bb:0e:7f:35:b4:ea:cd:a3:5f:53:
                    8f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:44:1F:96:AF:53:C8:72:F4:FE:17:D0:3D:E1:6A:7C:3C:D3:2B:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44e9b6d7-5b2e-34bd-a64a-c4f258d523a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.215.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:63:67:f8:07:00:ec:f4:24:30:71:93:a9:78:61:8e:2d:37:
         9c:28:5f:51:9e:df:83:b4:72:6f:21:50:06:c7:4c:bc:ff:6d:
         21:3c:25:2b:71:40:2c:c0:4c:b2:b1:68:0f:02:32:dd:60:86:
         0f:bd:45:4e:73:57:84:92:35:f8:4d:78:54:db:f9:97:4b:67:
         d9:d7:fe:d7:f1:f1:c4:2a:ca:dd:0f:20:14:55:93:29:33:80:
         d3:a4:cf:80:a4:81:83:73:01:48:f3:15:13:81:9f:14:37:02:
         85:cb:68:97:00:c0:d8:3f:d3:bb:86:39:e6:4c:54:18:4b:4e:
         b6:be:5b:56:9c:66:5a:c2:0c:bc:04:9c:43:97:71:62:32:d9:
         31:95:da:77:49:e2:1f:37:50:1f:0a:6a:ec:7a:ea:6e:c3:a3:
         7d:6c:15:eb:c1:69:4d:95:12:65:8c:98:80:49:cd:60:69:25:
         9b:2a:1c:80:fc:bd:f8:f6:45:d6:bd:8c:0b:c3:df:ea:b2:37:
         b0:05:05:c6:6d:82:dc:fa:eb:6c:fc:96:6d:9e:94:8d:bb:24:
         79:b9:b1:53:55:8e:cb:22:50:b8:e4:f8:9f:16:65:c4:b4:ee:
         1c:dd:97:56:d6:a1:5e:fa:08:60:88:f9:4d:cf:95:84:5c:f3:
         5a:34:69:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:46:17 2025 by rpki-client