Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f460148-b51d-397b-a699-6579b8e8c810.roa
File:                     8f460148-b51d-397b-a699-6579b8e8c810.roa (raw, json)
Hash identifier:          nOBge+sSweTiTJQshxLqv8L2yplwBGaVWjf4vpVG8b0=
Subject key identifier:   BC:74:8D:4A:14:38:D7:0D:A0:55:48:BF:A8:B1:89:8C:C4:BC:CE:7D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB2212213FAAE5AA0B1BF06C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f460148-b51d-397b-a699-6579b8e8c810.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     22258
IP address blocks:        98.50.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:22:13:fa:ae:5a:a0:b1:bf:06:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=8d80f1ac-c33b-4566-a839-4cd2135c8aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:46:fe:49:52:e8:6d:ef:f6:20:ad:66:f0:e9:
                    bf:32:9c:92:07:a1:38:bc:d3:4c:ed:a7:02:d1:2a:
                    53:c2:03:9d:1f:c7:bb:19:d2:62:3e:0c:9b:ca:1c:
                    3c:38:16:93:49:14:cf:72:6e:2e:61:6e:0d:1a:12:
                    fa:13:c4:b2:f7:76:e6:a8:1c:a9:40:d2:7c:b8:f5:
                    4a:c6:f1:1d:c7:7b:4c:12:b0:ed:5c:ec:ed:79:31:
                    1c:46:c0:b3:7b:6b:df:df:d7:76:2f:9b:89:db:bd:
                    a4:24:fe:7f:83:a4:5c:fb:5d:42:4b:de:99:d5:9f:
                    a2:0f:64:38:95:1f:32:81:fc:5c:25:72:c1:13:71:
                    6b:04:33:1e:a1:e6:58:b7:03:a7:eb:ed:2d:f6:1c:
                    dc:29:9b:6c:f3:f4:99:fb:84:aa:07:0c:fa:e5:25:
                    1b:b7:05:88:83:6d:f9:92:3c:14:ee:fb:c5:c7:c9:
                    49:cc:84:26:58:54:a2:da:bc:38:16:d6:62:6c:0d:
                    c5:9d:94:21:19:ef:da:0a:6e:a3:05:e3:9b:87:f2:
                    fb:c9:12:70:ac:9a:64:81:c9:60:6d:e1:1d:99:b8:
                    82:92:4d:04:e0:55:a0:86:4b:3e:ea:91:9a:b4:e0:
                    25:f3:92:4f:33:15:51:10:33:bf:95:13:ac:33:a2:
                    65:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:74:8D:4A:14:38:D7:0D:A0:55:48:BF:A8:B1:89:8C:C4:BC:CE:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f460148-b51d-397b-a699-6579b8e8c810.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.50.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:16:dc:bf:0c:4a:53:be:86:d7:06:69:53:ad:de:a8:57:17:
         4c:db:84:25:f2:d0:f1:21:64:e8:6e:f9:68:41:a6:84:ad:c1:
         aa:b9:06:15:52:c5:56:75:e3:44:6e:af:c2:98:98:29:62:e7:
         18:f5:33:0c:21:1e:3d:df:f3:ac:a0:27:32:95:9b:f6:fe:17:
         02:03:43:c7:00:e7:85:ea:f1:16:f0:19:6d:94:2c:42:45:db:
         66:63:bc:c3:33:e7:9c:55:dd:de:f1:7c:4b:4e:44:18:a7:f4:
         79:76:d4:2d:54:34:a5:26:8d:eb:38:3d:37:ab:21:91:d0:49:
         67:6d:c3:dd:24:8e:9b:cf:91:49:cb:b4:3c:96:22:2f:02:54:
         c6:d9:ee:bd:d6:0e:c3:43:61:5a:1d:62:e5:99:5d:ba:5e:6d:
         a4:0b:01:00:e4:e1:c4:cd:ed:f2:26:7f:b2:7f:e6:91:5d:14:
         48:98:a9:9e:31:70:aa:c9:17:4a:d4:e6:2d:15:14:62:b7:94:
         43:f9:89:55:10:d3:e0:ac:29:4e:02:d0:7c:f0:b6:f4:b5:e7:
         0c:22:40:86:a3:1f:7a:78:c1:0d:40:19:1e:3a:6f:93:09:09:
         94:ae:9e:d6:83:04:e6:33:ec:14:7d:c9:24:4e:62:77:ca:ef:
         e4:9f:c9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:53:37 2025 by rpki-client