Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3b60247-e4e7-3c71-a6bd-1871ffb0aab4.roa
File:                     d3b60247-e4e7-3c71-a6bd-1871ffb0aab4.roa (raw, json)
Hash identifier:          QnElUQWdacDiKIYempQzIhqHbPyHsldadAcgsqj9P6g=
Subject key identifier:   1A:DF:52:92:6A:F8:2B:5E:1A:8E:E9:A4:EA:50:D8:82:E3:06:0F:66
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE03181AA2E20149132072180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3b60247-e4e7-3c71-a6bd-1871ffb0aab4.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        98.252.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:81:aa:2e:20:14:91:32:07:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=f2ea601c-7178-423a-a8d7-25620c801513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:28:90:18:c0:46:64:05:ea:d4:f4:3e:b9:6c:
                    c1:0b:38:f2:0d:8c:01:21:86:ca:ba:24:b5:f7:ae:
                    7b:68:0b:92:07:c1:ff:57:6c:ed:cb:48:e8:d5:81:
                    0d:b4:a4:39:0b:81:4a:67:22:60:82:41:43:f7:7b:
                    77:8f:51:d8:1d:db:ea:eb:e3:fd:ae:c3:c0:93:a8:
                    1c:8d:f4:fb:a3:93:f7:cc:57:ca:3c:0c:47:16:e0:
                    c9:8e:b1:53:55:71:e1:21:33:92:c5:87:bd:e6:b1:
                    d9:8d:d9:12:4c:fa:15:44:36:c2:8a:b4:82:d6:7b:
                    f1:55:e8:6c:dd:56:42:ef:62:6b:89:88:7f:18:b7:
                    48:d8:06:93:92:af:82:c4:e4:d3:b1:7f:fd:2b:68:
                    ee:77:09:15:0d:22:be:3e:6b:35:fc:c2:85:bd:d8:
                    c3:b5:d5:79:a1:36:b5:3c:91:87:8b:ca:02:8f:df:
                    e0:08:43:8e:91:ff:01:5a:eb:21:a3:ff:e4:b9:17:
                    d9:25:46:6f:bc:35:22:ab:25:3f:74:79:0c:62:60:
                    46:79:b5:76:cd:47:08:9c:19:d0:5a:70:2b:22:ee:
                    4e:39:45:6c:e6:d7:12:e0:51:7b:1a:b1:7f:07:ae:
                    a9:7f:50:18:5b:0b:ee:f0:8c:4d:58:7e:2a:3c:46:
                    4d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:DF:52:92:6A:F8:2B:5E:1A:8E:E9:A4:EA:50:D8:82:E3:06:0F:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3b60247-e4e7-3c71-a6bd-1871ffb0aab4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.252.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:63:98:87:23:ec:29:8a:92:50:28:ff:28:f9:81:63:5f:02:
         1d:6f:b5:c2:39:4a:31:3a:33:94:20:eb:a8:6e:e7:86:6c:cb:
         34:f1:3b:fb:bc:57:66:39:4f:d7:3c:54:54:4a:e8:14:ae:50:
         63:f9:ca:ab:5f:dc:69:40:3f:2a:39:c6:48:99:b5:bc:df:b1:
         3e:53:36:3e:e2:58:6b:50:0b:19:d7:cf:5a:2e:a9:1f:d1:9f:
         1f:f0:92:c0:4e:1e:ec:8e:32:7c:3f:8e:18:fe:ea:ba:d5:04:
         31:ea:a1:22:92:43:5b:3c:c3:72:e1:03:07:41:30:a2:bf:40:
         3b:79:e8:46:ff:46:0a:8b:7e:d6:37:9a:0f:fa:25:b6:92:f4:
         03:98:f5:c7:ec:f8:41:e9:5b:59:f8:eb:ed:25:a8:16:cb:94:
         74:3e:d7:43:b1:d8:e1:b1:fc:e9:6d:91:f3:a4:c1:4c:31:cb:
         36:e9:6b:75:b1:36:cc:10:84:2d:2b:ed:07:db:2e:c1:ef:1c:
         72:9f:cd:a1:3c:52:48:7f:3d:55:47:08:c6:1c:08:e5:dd:57:
         0f:4a:cb:fa:61:4c:da:3a:67:d3:31:b6:1e:3c:bf:50:a3:83:
         c0:4d:d2:cf:48:14:04:2f:91:05:36:35:ef:76:1f:79:df:35:
         cf:20:e7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:20:40 2025 by rpki-client