Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/599aaa64-3d0c-361a-a411-573013ac68d5.roa
File:                     599aaa64-3d0c-361a-a411-573013ac68d5.roa (raw, json)
Hash identifier:          nEFewV2elghvDW0KFCWCyABVK0QXRwvb9cdQzyqfBZs=
Subject key identifier:   94:EC:4E:96:32:26:1E:F7:BD:16:45:E4:99:81:93:1E:72:25:9D:B2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DBA132106CDEBB6570A9980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/599aaa64-3d0c-361a-a411-573013ac68d5.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     7922
IP address blocks:        198.0.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:ba:13:21:06:cd:eb:b6:57:0a:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=000e4509-1e6d-4b68-8a0a-1bdd9ae2f619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:76:bc:82:ec:2a:00:8f:7c:bd:10:02:b0:2f:
                    68:c5:11:df:1f:9e:0e:87:db:ae:20:c5:20:2f:92:
                    72:17:8f:bf:ce:58:ad:a2:8e:50:df:6b:9a:f7:cf:
                    7d:dc:64:4a:13:49:d4:55:67:82:06:60:7d:b9:ff:
                    5c:9b:37:42:fe:2c:a1:a7:2b:b5:1e:27:66:51:92:
                    71:74:da:06:98:b3:20:a6:08:a3:42:d6:9b:fe:8e:
                    c6:54:58:40:a1:04:6c:10:fa:6a:f7:a7:86:ce:82:
                    31:76:1d:cb:d4:55:ad:d1:0d:3b:03:35:f3:3c:11:
                    a3:8d:c9:4d:ed:e4:a0:4a:84:c2:d2:9c:e6:5b:eb:
                    70:73:f4:73:20:e4:4a:60:f6:2c:e0:17:ec:04:dd:
                    df:2b:02:15:ba:17:de:99:20:79:55:f3:b1:40:a0:
                    e0:c9:3b:45:ad:b8:21:9d:2f:96:c0:8a:9d:22:59:
                    d2:a3:1b:fc:5f:7d:2a:51:b1:09:a2:c4:41:02:2c:
                    a5:1c:a4:48:b8:61:f1:a5:e8:39:d4:bc:81:46:d5:
                    cd:93:df:16:5b:27:71:72:ae:fd:29:ea:8c:f0:b4:
                    14:54:0d:2f:fb:91:cc:23:06:2e:07:06:a7:51:d8:
                    fa:bd:a2:b4:1b:2e:3e:6e:40:b9:de:cc:1d:13:29:
                    01:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:EC:4E:96:32:26:1E:F7:BD:16:45:E4:99:81:93:1E:72:25:9D:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/599aaa64-3d0c-361a-a411-573013ac68d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.0.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:1a:7e:b1:51:8c:57:b7:64:ee:35:1b:79:ee:40:ae:2e:df:
         c2:81:d2:0d:b4:51:60:b4:82:5f:9b:e0:ce:97:f8:44:c8:e3:
         a4:cb:84:8e:a7:9c:75:a5:a9:c9:83:f5:a4:52:1e:71:7b:06:
         95:a5:74:bb:0e:fd:8e:be:43:1e:d7:a8:da:49:18:22:ec:bf:
         70:a9:e4:42:ee:9d:71:d7:f7:6a:31:cc:4e:80:a3:90:7a:28:
         af:56:dd:eb:26:f0:45:7c:56:7e:e7:8c:d7:4a:e8:17:c7:60:
         98:6d:65:d6:ae:70:7f:a7:21:7b:d7:7d:a9:86:e8:de:72:b1:
         87:73:79:fe:1e:21:9e:69:7a:86:69:eb:aa:e4:de:ce:33:a1:
         60:90:61:78:df:5f:34:a7:71:71:0a:5b:b7:e5:ee:93:de:99:
         b3:a8:7a:a1:dc:a1:87:9c:49:97:8f:86:a9:fb:f5:e5:96:da:
         07:61:16:28:63:12:88:50:58:cc:13:94:3e:5a:6b:f7:12:e2:
         5f:a4:f7:a0:0f:65:02:ca:07:0a:bf:2b:98:90:34:75:e7:60:
         8e:9b:c9:66:fb:67:3a:f4:83:6b:22:05:2a:51:f8:a5:21:2c:
         5e:55:e8:46:97:68:db:c5:5b:92:17:b4:27:ef:5e:4f:25:9c:
         d6:5d:2a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:02:16 2025 by rpki-client