Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70f4ad6d-7efd-3b3e-9c21-1e628535e9ac.roa
File:                     70f4ad6d-7efd-3b3e-9c21-1e628535e9ac.roa (raw, json)
Hash identifier:          Dzh+SxIScSMGpOZvj8w9zqHV8L6uheh+6aNUGWpFdAs=
Subject key identifier:   BB:D0:19:85:09:F0:4B:A2:07:65:23:89:E9:AD:43:A1:D5:9F:E4:84
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE0317F2B8E90B3CA9C77FBF0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70f4ad6d-7efd-3b3e-9c21-1e628535e9ac.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        98.251.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:7f:2b:8e:90:b3:ca:9c:77:fb:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=3f20fafd-c343-485d-a885-c5ba3f2793d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cc:4e:9a:cb:a2:0f:5f:d4:b7:9e:a3:c7:3c:
                    ac:d0:56:bc:55:22:5b:57:e7:75:e3:0b:23:5f:a5:
                    6e:f2:01:c9:32:9e:a7:9a:71:09:0c:3c:40:72:36:
                    a8:6a:38:24:39:ac:01:34:18:ef:fa:16:7f:af:4e:
                    1d:f0:91:d3:da:66:85:4f:2e:20:7d:06:d5:15:1f:
                    03:70:03:cb:30:34:55:80:b8:00:8f:2b:24:18:4c:
                    f0:e7:9d:b6:d3:94:66:81:1f:86:50:b8:50:06:13:
                    72:dc:5a:47:12:02:1a:31:31:7d:52:29:58:53:00:
                    43:bb:5c:b7:69:e3:16:9d:7e:e5:32:75:54:2c:3e:
                    5a:2e:04:79:b3:77:07:e0:37:95:8b:b6:06:b5:50:
                    8d:41:72:df:a8:d3:6e:05:13:dc:f0:62:8b:44:d0:
                    5d:3d:2b:83:38:96:33:b5:3d:ec:22:cd:5b:ed:7c:
                    d0:28:03:73:47:35:c5:77:f4:7e:38:a9:6c:2e:6a:
                    38:0c:ca:ac:bf:db:cf:42:ef:8b:c7:55:fb:db:97:
                    46:e5:07:a9:a0:f2:c3:31:5b:ef:e5:b1:93:ff:4d:
                    d5:a7:b3:69:f4:03:e6:7c:80:00:75:85:11:d8:1c:
                    b7:7a:9a:ee:69:fe:b5:e0:ee:9c:26:08:e9:6f:ae:
                    f4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D0:19:85:09:F0:4B:A2:07:65:23:89:E9:AD:43:A1:D5:9F:E4:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70f4ad6d-7efd-3b3e-9c21-1e628535e9ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.251.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:80:02:13:1c:49:53:4a:bd:15:da:97:ee:0d:78:ee:de:00:
         42:c1:cd:cd:e9:c9:45:e3:83:5b:52:7b:27:44:cf:1c:6c:4c:
         1f:6c:fe:3d:7e:8f:18:56:57:07:58:a4:37:00:ad:60:ce:a2:
         a7:4a:be:99:6a:6a:5e:fb:25:01:86:d5:61:ea:26:16:a6:db:
         3b:52:29:f7:04:ae:2f:22:37:d6:fa:31:d3:8d:c4:ce:d8:b6:
         bf:0b:85:05:2a:15:b2:d8:d9:c1:31:52:b9:e1:b3:5a:96:a2:
         77:cf:42:33:a2:39:15:87:43:5d:09:75:16:a0:eb:3f:67:92:
         16:b2:f5:a9:54:06:26:68:11:da:fa:d3:ab:00:24:e9:39:be:
         70:13:97:0a:c2:14:ae:00:80:9f:9d:e7:07:a9:48:f1:ca:9f:
         b7:89:6e:c2:fc:f5:4c:58:31:a5:62:a6:0f:03:6d:ba:7e:17:
         1e:55:b7:92:ab:a3:30:03:db:8a:31:91:ac:75:79:fd:0c:fc:
         2e:bb:91:52:3b:b1:2d:ed:a8:e1:95:54:95:ff:4b:78:a4:16:
         9c:5b:6c:0f:a7:07:38:6d:d7:66:52:58:d7:0b:04:f6:82:55:
         29:64:f0:c5:3b:00:1c:64:6d:37:ea:ce:21:25:c4:7a:7c:4b:
         67:e0:e5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:35:05 2025 by rpki-client