Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/95abe071-01ec-3966-a785-34c7bc430ebd.roa
File:                     95abe071-01ec-3966-a785-34c7bc430ebd.roa (raw, json)
Hash identifier:          TBqP5IlvNeRu33V4hNTmQwd7cfUx98EWDaaN4U9MhCM=
Subject key identifier:   75:9C:68:BE:8E:3A:81:04:AA:11:CD:2D:6E:8C:CA:4B:5D:99:E4:50
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFD3736F1908CC9700416C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/95abe071-01ec-3966-a785-34c7bc430ebd.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33668
IP address blocks:        98.243.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:37:36:f1:90:8c:c9:70:04:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=3d9209b8-942c-49ea-9fdd-a7edd699fd38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d7:d9:2b:3f:f4:46:04:f7:e8:04:98:40:71:
                    e7:3d:13:20:b1:05:33:35:84:66:42:b3:e3:16:43:
                    04:9a:59:ee:47:b4:0a:22:c9:1e:fd:e4:7f:b9:71:
                    e1:52:7c:eb:a8:36:b6:fc:3d:1b:91:e0:63:02:32:
                    6a:00:3d:59:64:70:07:dc:62:4b:04:d0:b1:17:a3:
                    37:1a:fa:c1:2a:24:69:bd:c4:7b:c1:dc:4b:bd:4e:
                    d9:4c:60:c3:42:a7:ee:35:a7:98:e9:7a:91:60:3a:
                    00:8f:61:55:28:e0:ed:56:eb:6c:31:50:5a:95:66:
                    96:e7:23:e8:42:a1:38:7b:eb:9f:e3:20:43:ab:0c:
                    ef:62:8d:eb:fa:2e:93:17:7e:ed:d5:5f:4a:11:07:
                    a8:3b:85:22:00:ae:47:ef:ac:fa:ed:95:03:16:22:
                    e2:c1:0a:85:50:2d:52:9a:15:ab:45:4d:51:b6:07:
                    87:05:a8:6e:6b:27:76:a7:f9:4d:39:4f:63:9b:ee:
                    7c:cd:46:5b:d6:9a:03:34:54:fa:4c:f4:9f:91:41:
                    65:ee:bd:bb:d1:a6:47:61:80:da:65:da:5d:88:e8:
                    ff:f7:95:d0:56:59:11:1c:d6:b1:9b:73:76:39:6c:
                    a9:96:79:d4:76:22:88:b9:4c:da:85:fe:9e:f1:6d:
                    77:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:9C:68:BE:8E:3A:81:04:AA:11:CD:2D:6E:8C:CA:4B:5D:99:E4:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/95abe071-01ec-3966-a785-34c7bc430ebd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.243.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:28:bf:08:98:11:ac:09:7a:8c:50:7b:cc:df:d6:03:36:98:
         e0:34:9b:b9:16:4f:d3:cc:9e:70:e8:00:1d:d9:8d:9a:c3:fd:
         c6:e3:2d:bb:dd:02:60:02:5f:be:bf:76:f7:fe:73:44:33:ca:
         b2:55:74:2e:1a:1b:b1:b7:a0:fc:29:65:16:d9:3f:c5:0a:ef:
         2d:d9:80:01:ad:76:7a:11:46:2b:99:51:5f:71:3c:a2:91:d9:
         25:c2:0d:57:09:35:6a:c8:6f:f4:ad:97:ff:69:2f:d1:0d:be:
         40:ca:f4:6e:ea:87:7b:1f:95:de:65:37:32:6c:a3:ac:75:59:
         c8:b1:19:33:c2:18:de:49:28:b8:82:d5:b3:c5:ec:dc:99:9b:
         86:43:22:5a:12:f9:9c:e1:cc:e7:0b:9b:04:b2:2b:bf:37:e1:
         9d:6d:73:1b:a0:bb:7c:7a:42:03:75:99:82:3d:aa:1a:5b:c4:
         19:70:a7:fd:d5:bb:ee:66:5e:29:27:f0:04:b6:18:08:0e:5c:
         48:06:16:94:8e:ab:30:22:b3:fa:eb:41:23:ec:39:eb:8b:1b:
         09:08:8f:67:59:fd:2e:d4:34:49:ed:6c:73:00:01:a7:1c:9b:
         c5:61:ea:47:cf:74:94:2e:cb:9e:52:61:1e:42:b4:1a:df:4c:
         da:38:0e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 02:18:58 2025 by rpki-client