Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3b83317-d70b-3d60-a276-14bf7794b2a5.roa
File:                     b3b83317-d70b-3d60-a276-14bf7794b2a5.roa (raw, json)
Hash identifier:          y4+kjUYf/6Xdz0rh+9etf8EihYBiBhkXb4233ant2WI=
Subject key identifier:   40:40:6C:2F:8C:5E:3F:9E:50:56:99:F0:50:7F:CE:4E:BC:21:ED:E5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC2C99689D41D0D8B2683C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3b83317-d70b-3d60-a276-14bf7794b2a5.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        98.227.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:c9:96:89:d4:1d:0d:8b:26:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=abdfcf7e-a9c0-4903-8127-5d589d0a25a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8f:b4:89:c1:29:f6:1e:b1:9a:96:87:b7:46:
                    02:f1:95:a5:14:c8:c8:94:03:f3:a3:01:8c:42:2e:
                    69:a6:a7:f9:46:b6:75:e0:a3:09:7f:c3:9c:0b:3f:
                    15:2e:aa:fe:d9:82:9b:1f:0d:5c:27:dc:13:6a:97:
                    76:74:b2:4e:8b:48:5d:9b:9c:57:52:04:b5:40:19:
                    43:71:9c:f3:3f:af:de:f6:df:5b:49:f2:ce:18:6a:
                    81:90:2b:cc:93:be:19:41:4c:2f:d2:d4:15:82:71:
                    1e:3c:fb:f4:62:1f:56:3d:1e:64:fd:f1:6d:05:e7:
                    af:d1:70:49:58:70:52:32:11:22:16:77:48:93:c1:
                    87:8e:22:b9:3b:bd:b5:f5:ba:a9:71:09:29:e9:7c:
                    22:29:dc:8c:b7:60:a7:06:a8:f1:ae:bf:aa:c1:22:
                    a2:aa:00:69:90:94:b9:bc:f8:64:13:fd:bf:0e:03:
                    c5:09:fe:64:69:9a:59:5f:38:d1:7d:13:a6:6a:16:
                    46:81:4c:5e:53:31:09:f0:58:44:b6:5f:10:b8:7e:
                    70:92:84:da:a2:9b:09:b4:96:8e:06:30:86:f9:fb:
                    13:8e:33:15:59:58:6f:2a:bd:f7:ce:0d:74:19:a8:
                    65:4f:59:f3:74:a4:9c:63:32:dc:d1:fb:e6:25:03:
                    97:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:40:6C:2F:8C:5E:3F:9E:50:56:99:F0:50:7F:CE:4E:BC:21:ED:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3b83317-d70b-3d60-a276-14bf7794b2a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.227.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:14:48:50:35:f9:49:b5:ab:0d:58:34:7b:72:66:8b:40:c9:
         b7:12:f8:75:78:8c:1f:48:b0:21:5a:b0:f3:ab:d8:ee:87:fc:
         e1:92:20:f1:12:68:14:03:b0:1b:14:d6:cb:8b:7c:e8:0b:89:
         ad:50:a8:f2:92:ff:d7:28:d7:1e:ad:09:4d:a9:36:a6:a3:cb:
         d0:d3:8e:1d:86:0f:be:39:da:dd:6a:4c:9a:93:d4:54:64:df:
         df:68:56:82:e3:d5:77:a4:56:50:0e:9c:ff:19:93:5d:a5:dc:
         67:fe:7e:12:e4:62:81:d0:e0:65:1e:6c:77:cb:3e:77:f4:43:
         93:b8:3f:3b:fd:17:51:3b:a8:1b:b2:10:83:ea:ed:0b:fd:cd:
         50:c3:f3:57:bc:99:a9:23:cb:96:8f:01:63:5f:62:87:9f:d5:
         1b:9f:09:07:a5:49:82:e6:a0:b1:4b:b9:c5:ef:f9:04:58:bc:
         b5:39:ee:41:fb:64:53:4a:ee:13:4a:72:67:dc:02:3d:91:b7:
         c2:5d:f1:7f:0c:61:30:c4:96:9d:68:68:f7:be:38:f9:b2:39:
         3c:39:68:1d:4a:92:dd:10:c1:3b:31:30:04:ef:d2:74:d2:2b:
         29:49:1e:83:60:7c:29:e9:b8:28:8b:a4:2a:56:f9:99:14:d8:
         26:42:35:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:24:50 2025 by rpki-client