Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d82d7e4f-02c2-3b6e-a4de-7b560846e3c8.roa
File:                     d82d7e4f-02c2-3b6e-a4de-7b560846e3c8.roa (raw, json)
Hash identifier:          nIpw3n3RUvTH87p0Ke+x+RQkbzzOeywrAh7XW4793+8=
Subject key identifier:   BD:92:CE:EE:9A:02:6B:90:10:9D:94:32:EC:DD:11:84:51:C1:42:54
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC373B4C9742D637DE8A200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d82d7e4f-02c2-3b6e-a4de-7b560846e3c8.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33660
IP address blocks:        98.202.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c3:73:b4:c9:74:2d:63:7d:e8:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=90485ee4-a732-42a3-be0e-d8e8d4b2cbad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7a:ee:ae:bc:05:73:f3:cb:96:98:a6:71:0b:
                    8b:36:bc:53:df:9c:37:81:65:ba:07:53:59:c8:2b:
                    73:ac:89:ab:59:5a:71:85:b3:8c:79:5c:2b:6f:55:
                    8e:2a:a1:6b:56:f9:a0:d7:c8:48:a6:11:7a:f1:72:
                    45:95:ca:c5:aa:6b:1a:5f:10:b3:b2:31:57:40:b0:
                    93:56:24:2c:fb:78:bd:1e:fa:70:50:23:88:47:9d:
                    55:04:c5:be:3e:78:6c:81:c7:c8:85:68:9f:bf:f2:
                    09:52:d5:4d:ad:9d:73:1c:be:f3:db:c8:90:cf:d6:
                    9a:70:6e:51:0d:38:19:1b:53:8f:70:5f:06:bb:73:
                    b7:b1:a4:fe:a5:f4:07:e7:ca:14:9e:c4:f8:cf:f0:
                    6d:6c:e5:98:73:ff:1c:f7:31:88:c4:3d:6d:3a:09:
                    74:a5:f0:63:7a:a4:15:cb:88:c0:ce:c7:f6:13:9e:
                    f1:c2:68:41:4c:2b:78:d8:f9:fe:3e:db:dc:d8:a3:
                    27:79:6e:a4:b8:09:a6:21:5b:48:01:7e:a7:fd:5f:
                    08:1a:36:61:9c:4d:c6:84:65:f8:c2:75:08:a3:e0:
                    97:d1:72:74:ac:9e:b6:43:d2:ed:4e:64:42:41:65:
                    12:9c:01:a2:78:bd:fa:de:47:3f:e5:ae:52:1e:e6:
                    e8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:92:CE:EE:9A:02:6B:90:10:9D:94:32:EC:DD:11:84:51:C1:42:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d82d7e4f-02c2-3b6e-a4de-7b560846e3c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.202.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:ce:35:91:63:7e:c0:78:b8:b5:81:f8:df:e9:da:97:bf:fb:
         f4:63:2b:c5:b1:59:ca:a0:b6:2b:fb:05:99:77:08:e4:3c:4e:
         18:5d:af:0d:56:23:3c:26:87:e7:65:a2:9d:b2:93:14:48:3d:
         cf:ce:c0:e0:e3:52:f0:ae:90:42:f6:4e:0d:ce:2b:eb:68:d8:
         a7:4d:17:88:b4:45:0b:a0:06:36:52:fc:8d:1c:47:68:52:58:
         6a:91:34:ac:83:82:e4:18:24:d5:77:13:b7:18:e2:78:7e:ab:
         f6:cd:bf:2f:03:46:13:1c:43:2d:5e:3d:12:2e:c5:4d:32:7d:
         1c:0e:a7:53:70:e3:6e:e9:36:59:74:e4:99:e8:1d:63:80:0f:
         85:fa:11:0b:30:a5:5a:b1:9e:09:43:6a:f1:a7:11:4e:21:c3:
         eb:2a:93:c4:6e:ff:95:57:e0:7b:d4:31:08:9c:19:89:a7:d9:
         69:73:c5:b7:71:51:b3:df:74:eb:43:0a:e9:6a:68:db:36:5b:
         67:b2:93:22:b1:d2:2b:71:65:9d:64:85:9f:dc:9a:cd:d0:49:
         b4:dd:9a:36:6f:c3:92:47:43:78:35:f2:7e:6b:a0:32:d4:a7:
         bb:fb:ba:e8:2b:ca:45:78:c1:1a:c3:23:2c:c8:85:6e:ff:4c:
         76:2b:c9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:16:28 2025 by rpki-client