Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cedec281-9719-3b9c-b098-9b06221b68d0.roa
File:                     cedec281-9719-3b9c-b098-9b06221b68d0.roa (raw, json)
Hash identifier:          nvAKeRWbuUtK1BKVkI1B13Zdc7TDcIsxLtmyhqeT2v8=
Subject key identifier:   C6:98:C7:B1:CF:78:CD:D0:A5:8A:0B:56:F2:80:27:38:92:D9:96:86
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC57C41297DFC83FD4C9100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cedec281-9719-3b9c-b098-9b06221b68d0.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        98.45.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c5:7c:41:29:7d:fc:83:fd:4c:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=8f7a4a43-a2ba-40a9-8c32-5b60e0b4c36d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:27:0b:39:86:ea:27:58:35:14:bf:5c:0d:37:
                    42:22:1a:5f:5d:fc:cf:2a:4c:4a:10:79:f6:7e:aa:
                    cd:f5:7a:61:c2:c2:e1:60:d7:d9:58:b4:18:39:30:
                    36:44:a2:cc:33:0c:b1:08:06:70:13:b4:eb:3a:aa:
                    1a:52:3f:30:84:d5:da:b8:24:28:87:27:ef:6e:67:
                    f8:30:e0:13:0b:bb:75:5b:14:97:19:6d:0c:48:ed:
                    06:3e:56:cd:51:86:93:1d:b7:fb:aa:05:de:bc:51:
                    20:31:b7:dc:a2:8f:b5:b1:54:26:53:58:56:e8:7a:
                    1e:65:d5:c8:16:31:b3:a9:b3:69:bf:a9:5c:4d:ea:
                    7a:49:e9:84:39:b6:bd:1d:ce:27:6a:42:9e:b5:1d:
                    f9:31:b5:ec:0a:2d:c9:4a:d4:32:b1:92:67:61:7b:
                    b0:47:df:a3:ad:56:3b:7e:c8:cd:ca:bf:ae:ad:17:
                    44:69:ed:8a:04:e8:5a:c2:a8:4a:ae:58:9a:7f:e5:
                    eb:01:c5:b7:38:b0:ef:6b:85:3b:15:fe:27:1b:1c:
                    c7:f5:e7:16:54:e3:b3:c2:dd:21:cf:b6:88:b7:8a:
                    6d:60:ad:82:c7:05:a9:36:07:65:44:a0:e0:ec:44:
                    a9:b2:d5:66:40:1f:ee:d3:c9:45:cb:66:3b:2e:68:
                    16:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:98:C7:B1:CF:78:CD:D0:A5:8A:0B:56:F2:80:27:38:92:D9:96:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cedec281-9719-3b9c-b098-9b06221b68d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.45.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:46:73:4e:76:86:3d:99:79:51:99:3d:a4:be:ca:90:7d:0f:
         18:b7:f9:e3:5e:3f:8b:db:5b:c3:62:a3:98:cd:a0:17:d2:f0:
         75:52:5a:d7:7d:89:01:64:34:7d:bd:10:61:8b:5e:e6:29:96:
         bd:d8:81:f1:e6:29:57:8a:34:6c:e7:92:f5:4d:0c:88:17:4d:
         27:e2:51:13:75:12:6a:8a:23:a7:40:62:5a:ef:e7:1f:45:4e:
         6b:40:10:78:1d:da:12:37:49:be:42:df:3b:ad:59:45:db:8b:
         73:3b:e6:50:be:31:48:cb:e2:d5:4a:5f:63:f6:b5:45:7d:19:
         86:4f:d1:08:e7:03:ab:8c:0e:49:26:b2:3c:27:bc:0d:e6:20:
         f5:cc:c8:d2:d9:2a:2d:65:bb:ec:f0:65:95:e4:22:4d:9d:57:
         cd:ca:bb:84:2c:6d:55:d6:46:7a:0a:88:eb:d4:67:ef:37:41:
         45:89:d9:ee:66:9d:30:66:ac:98:63:2f:c8:f1:70:c6:a8:45:
         82:b6:bb:c7:98:fc:25:cc:19:ff:a2:2c:2a:94:07:59:10:91:
         73:eb:c5:2d:55:ce:df:40:97:2b:d0:f8:af:f0:03:35:ee:28:
         4e:1d:6e:f2:df:18:b3:aa:f2:3c:c2:22:38:da:04:58:92:30:
         59:00:71:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:56:48 2025 by rpki-client