Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ac30ae8-edfb-3bab-8b5c-1cb00809b5a8.roa
File:                     6ac30ae8-edfb-3bab-8b5c-1cb00809b5a8.roa (raw, json)
Hash identifier:          t+j6vTtAajliuCGBNAi/9/waVQXscP2w3QlHv5JmVGc=
Subject key identifier:   60:DC:37:83:C0:B8:6A:1A:3B:A8:02:7E:84:D7:01:5A:BE:DF:04:5D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC349917DEA0DE66B3641C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ac30ae8-edfb-3bab-8b5c-1cb00809b5a8.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        98.37.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c3:49:91:7d:ea:0d:e6:6b:36:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=f80ff2a2-fe52-48a1-add7-c8115b5262c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cd:e8:a0:1a:90:ac:47:13:cd:78:6c:1b:74:
                    06:36:15:64:59:6a:38:f5:c5:1f:6c:37:96:4f:4f:
                    33:42:2a:07:da:3f:cf:24:68:cf:ec:e7:a7:ed:b6:
                    62:69:6c:80:ae:d1:31:7c:74:93:1a:95:30:b9:07:
                    75:08:32:65:c9:23:8a:e6:19:b1:63:8e:b7:23:cc:
                    00:2b:b7:68:26:7e:32:9b:ea:00:3d:04:ed:40:cd:
                    48:98:05:98:77:6d:42:ab:4d:12:8d:e4:99:65:ec:
                    a4:de:5f:00:92:5b:f8:d2:97:a4:2a:4b:80:16:b5:
                    d0:0b:db:9e:36:cc:3a:c5:7c:8f:e4:da:7c:65:bf:
                    fe:92:76:5c:03:c3:1b:20:62:b6:50:7f:22:3e:5d:
                    e1:00:52:50:0c:80:6b:7a:d7:64:71:36:6a:f8:e2:
                    cd:85:78:e2:ac:43:d4:ef:3c:88:8f:49:2c:66:96:
                    22:9d:5d:76:c8:79:2f:0e:a2:d4:5d:d3:2c:c9:d0:
                    e4:99:0e:4e:29:64:5c:aa:c1:de:0e:fb:c4:9b:0b:
                    d8:a0:a0:0e:95:1a:b6:cc:70:39:17:47:91:dc:99:
                    cd:19:8f:42:e8:9c:51:93:5b:01:c4:d2:b3:50:96:
                    26:81:95:3a:ba:dc:23:99:59:fc:ce:95:9a:5c:5d:
                    1b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:DC:37:83:C0:B8:6A:1A:3B:A8:02:7E:84:D7:01:5A:BE:DF:04:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ac30ae8-edfb-3bab-8b5c-1cb00809b5a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.37.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:e0:f0:ff:1b:f6:91:2c:e3:b9:55:68:90:33:f7:75:f0:6e:
         ec:2a:89:97:91:ed:28:e1:d7:66:3b:50:72:15:3e:34:bd:1a:
         0c:08:b8:76:62:81:2a:36:6b:8c:a2:b4:79:34:28:b0:af:e6:
         97:f5:3b:90:31:f4:ed:e3:aa:53:1f:7d:f1:bf:e1:a1:55:be:
         aa:44:8d:0d:65:53:2c:b8:5a:6e:ad:12:eb:4c:27:a3:4d:d2:
         9f:fa:81:20:0c:76:26:9a:67:0d:7d:9e:85:02:da:41:c1:45:
         77:6b:7d:78:82:dc:63:21:5d:1c:a9:ac:04:29:72:0e:ae:15:
         e4:12:a5:32:56:f0:b5:2f:28:f2:90:9a:53:b6:9b:8d:f6:52:
         09:14:0a:7d:95:4f:10:be:7f:e4:4c:14:5a:54:c3:91:33:76:
         38:af:66:28:59:cc:1d:88:0a:05:a8:e5:bb:5d:ba:16:91:7b:
         4a:9b:65:54:e7:67:28:2c:93:37:cc:d6:5c:d2:08:fd:d4:2a:
         53:4c:83:42:9e:af:3b:8f:61:99:f8:5b:3b:b9:8e:f5:12:14:
         c3:92:8f:4f:0f:00:66:6e:8b:7a:02:30:f8:29:a8:bf:24:5b:
         56:3d:1f:fe:e5:55:c3:45:da:49:21:96:86:7b:61:d7:0e:bd:
         bb:60:e6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:07:13 2025 by rpki-client