Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c724099c-f445-3184-94b9-1396151a9c21.roa
File:                     c724099c-f445-3184-94b9-1396151a9c21.roa (raw, json)
Hash identifier:          9u3JmpS9/QZhqeHBKhonK/Jo/i3VR77+8I6bgLXaxfM=
Subject key identifier:   95:F1:09:78:F0:DF:0E:D8:7F:E9:CA:B0:ED:B5:58:F2:0C:3A:EC:12
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC5671DE1D7D9F15B0A2DE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c724099c-f445-3184-94b9-1396151a9c21.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        98.207.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c5:67:1d:e1:d7:d9:f1:5b:0a:2d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=a2487b00-d051-4bc8-a5f4-f408458a2705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:07:18:65:93:f9:0e:84:aa:f8:5b:97:cd:db:
                    14:ff:42:78:7c:19:34:cd:cc:b3:9f:e1:5a:55:b9:
                    7d:b1:9e:ad:55:c4:50:85:8d:ff:70:b4:4d:36:fa:
                    e5:10:80:8b:2c:59:35:d6:78:5f:6d:3e:2e:a0:fc:
                    55:3e:33:69:31:ae:a4:f8:72:8f:ef:05:1f:44:3c:
                    89:c3:8c:f8:5b:ca:29:a7:6f:16:cb:15:a9:0c:c8:
                    c6:b9:0c:5f:f5:57:4d:9a:d7:84:07:36:e1:5b:c2:
                    2d:10:81:28:8e:4d:db:a9:5f:6e:e2:37:10:57:ef:
                    14:e4:cc:47:95:92:59:d5:6c:61:57:42:8e:a1:5f:
                    b9:58:c3:02:d8:44:f0:15:bb:5b:2b:02:23:80:19:
                    05:97:03:05:d0:bd:a2:11:93:d3:67:ef:05:b4:a5:
                    ae:2c:2b:0d:0b:de:ff:83:f7:f6:fb:3a:cb:a9:1a:
                    08:81:7f:c9:ce:6f:05:0b:7e:06:67:26:68:a0:58:
                    0e:7d:5a:1f:8b:38:81:bb:82:ee:16:f8:f6:38:0b:
                    9e:93:22:9a:2f:af:69:cc:fe:c4:6b:83:3e:fc:c8:
                    90:86:ff:43:db:48:c9:e0:d6:67:d3:14:99:7b:00:
                    3b:27:ff:17:54:37:ce:78:46:a1:41:f3:1b:90:4d:
                    db:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F1:09:78:F0:DF:0E:D8:7F:E9:CA:B0:ED:B5:58:F2:0C:3A:EC:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c724099c-f445-3184-94b9-1396151a9c21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.207.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:b5:a2:4b:83:50:2f:4d:bc:db:f8:f8:1e:8a:b6:0a:5c:9e:
         a1:3d:db:23:74:4e:53:41:40:6e:85:68:95:49:94:88:44:07:
         b8:2c:93:8b:80:97:45:75:47:b4:11:6f:6e:2a:6c:d0:8c:fc:
         a5:d7:1c:99:14:3b:80:a5:89:c8:31:ea:05:54:7d:85:91:51:
         e2:73:c3:ad:d8:e6:ad:91:07:ae:4f:12:57:0f:31:37:e2:f1:
         59:5a:0f:46:39:b6:0c:ae:27:b9:cc:96:c1:08:2d:9f:b7:df:
         c3:25:3e:0b:eb:e7:df:d9:e6:41:2e:57:f2:4d:b8:05:d6:cd:
         bd:2d:16:ca:6e:46:c2:15:79:ef:ae:bd:10:1a:95:a4:68:c2:
         58:10:1d:2d:3f:37:20:36:b9:fd:f3:4b:02:b7:cb:aa:91:62:
         4d:91:19:0e:37:a4:ed:f3:03:ae:6e:0c:58:5b:4f:1f:8d:64:
         b8:78:0b:74:4a:5a:cc:4b:39:05:91:76:e7:d0:da:43:98:04:
         ca:d9:0e:47:9b:78:fc:ac:d8:4f:6c:26:cf:57:f7:48:c1:9b:
         88:b3:3d:11:d9:1d:ff:11:95:af:cb:d1:b4:f3:86:b8:eb:5c:
         10:6a:dd:d8:c5:01:94:be:bb:6d:cd:64:a6:20:b3:c4:7f:3f:
         ec:31:63:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:19:47 2025 by rpki-client