Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/529ed7e8-6ea9-30fc-9ad2-54df201a0a3a.roa
File:                     529ed7e8-6ea9-30fc-9ad2-54df201a0a3a.roa (raw, json)
Hash identifier:          D5jEwECvQeiOFU5w51dmnAtOabHMDZ4W3EMbw3x7hdw=
Subject key identifier:   68:DA:AF:6B:E2:ED:7A:3D:84:77:19:B7:41:6F:34:8B:74:59:1B:56
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF756E8DEFA4015973B16680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/529ed7e8-6ea9-30fc-9ad2-54df201a0a3a.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        98.251.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:6e:8d:ef:a4:01:59:73:b1:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=e9947892-955b-41a0-8f4f-443489ac65de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:09:fa:75:7c:94:cf:26:3b:bf:5c:38:41:fc:
                    27:d9:cc:93:7b:f1:b4:7f:68:df:4d:d5:1f:65:d8:
                    64:02:7a:dd:6d:22:a3:47:9a:62:5c:2c:d3:0a:d4:
                    4c:43:61:73:e1:1f:cb:81:e0:c4:52:59:cc:53:4c:
                    5c:2e:6e:17:43:b9:c9:cb:20:26:e1:18:4c:a4:f6:
                    70:6a:59:d9:53:86:d2:63:01:86:2e:66:3d:65:d4:
                    4e:fc:90:15:c9:62:97:b8:5d:54:50:60:93:56:ce:
                    5e:0e:cd:cc:b5:0a:ee:5e:46:c0:b3:38:b2:74:ef:
                    5c:e5:37:aa:51:a6:6a:54:6d:83:5d:4b:92:74:1b:
                    10:82:8e:b3:44:0d:44:b6:97:a0:8f:27:f0:d6:08:
                    33:ab:db:75:08:a0:fb:89:a1:14:6d:ae:66:d2:c6:
                    b5:0d:25:25:60:a2:2c:5d:64:27:42:79:21:af:81:
                    36:39:b2:c9:8e:b3:cd:3f:89:69:53:59:e6:52:e1:
                    95:bf:dc:f0:25:56:da:24:d1:3b:93:47:5a:de:fe:
                    b7:9d:3c:4f:1a:05:66:49:72:c7:4b:ac:2e:ac:52:
                    f7:9e:14:2f:f5:18:1a:03:a3:ed:ac:fe:85:da:37:
                    ff:a9:78:8d:07:10:a1:36:70:e7:f1:11:17:ed:91:
                    ab:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DA:AF:6B:E2:ED:7A:3D:84:77:19:B7:41:6F:34:8B:74:59:1B:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/529ed7e8-6ea9-30fc-9ad2-54df201a0a3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.251.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:a1:35:e3:19:ee:2f:ca:b4:98:cd:9e:9a:1c:1e:9d:80:b3:
         eb:ad:d9:1f:e1:bc:a3:fd:ca:a0:15:ab:3d:24:96:3e:ae:38:
         57:53:56:bb:eb:04:4c:ae:55:52:66:27:7c:0d:9f:d6:a1:95:
         69:da:55:67:98:d9:6c:09:96:b2:d4:06:e1:3b:d4:77:bc:dd:
         39:be:fc:94:56:c9:1f:76:b4:c7:0f:9f:d0:65:34:82:e7:ff:
         96:8e:5b:6f:15:42:57:53:88:6c:75:d9:c7:09:33:fc:43:ac:
         d6:a5:96:74:32:48:f5:3a:d4:f2:2f:f8:05:05:bf:34:65:7c:
         80:ca:e5:c7:c2:08:33:cf:72:20:54:da:10:f3:16:36:9c:d0:
         0f:4d:bb:3c:90:28:42:1a:12:7e:68:74:09:cd:4f:d0:5d:f2:
         81:3c:12:dc:dd:0c:83:62:6a:07:bc:1b:eb:e0:f0:21:87:96:
         2e:01:c3:99:50:8a:38:15:27:99:a7:eb:5b:9b:2c:7f:8d:e1:
         56:f9:b1:07:6a:05:ce:5f:5b:6d:c8:cf:25:22:1b:68:e5:65:
         50:64:12:ab:e7:21:28:c8:1c:37:4a:16:e8:0f:b5:5c:4f:48:
         38:c4:e2:cc:9c:b3:3b:fd:52:2c:b3:1a:38:13:7a:a7:7e:f1:
         ee:55:c8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:37:34 2025 by rpki-client