Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e1d8fb36-7117-318b-ae6e-4c0c46c694b2.roa
File:                     e1d8fb36-7117-318b-ae6e-4c0c46c694b2.roa (raw, json)
Hash identifier:          v4kkBX/8HhxzteyROYbJxnezvJfR0uIWRfRGGoVmqj8=
Subject key identifier:   CC:9C:D7:71:D8:E3:3F:28:0D:A6:39:84:5E:F1:76:E8:28:92:58:5B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AADD385E6B4CC9DF2F5E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e1d8fb36-7117-318b-ae6e-4c0c46c694b2.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        98.196.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:dd:38:5e:6b:4c:c9:df:2f:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=a7e15d3c-b041-418d-9174-f9c5a32d4dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:58:44:2d:3b:f4:89:0d:68:4a:dc:f7:9b:67:
                    7c:29:eb:fc:6f:c0:2c:91:a1:51:e9:b1:06:93:cc:
                    5e:77:75:b0:f9:7a:47:2f:38:20:05:14:69:10:b2:
                    31:f4:eb:59:5c:a6:9f:12:8d:a1:fd:d8:be:e5:16:
                    96:12:ef:da:08:53:ee:1f:d9:f6:14:4e:7c:ef:5f:
                    b6:b6:d2:86:45:c7:3a:8e:78:dc:ff:44:11:77:81:
                    83:f6:27:53:b3:57:8c:2e:10:cb:c8:6f:48:f6:43:
                    0d:f8:ad:1a:d0:f9:0e:c9:a2:81:e7:54:c1:c9:02:
                    09:4e:89:36:0e:59:f6:15:26:1b:c9:d0:3c:2b:26:
                    cc:cf:db:77:38:b3:f4:85:4b:b7:41:5e:c7:e3:58:
                    d8:b7:3a:39:43:a6:da:64:1b:2a:0c:53:4e:07:b7:
                    55:f1:70:6d:fb:44:2c:9a:8b:9a:a9:46:1f:c6:20:
                    a2:7e:4d:62:5d:9c:3a:81:b1:47:06:a6:b2:d6:99:
                    dc:81:a9:7f:60:8a:d0:a9:9b:2c:21:1c:e0:48:1e:
                    0d:39:66:ae:1f:76:15:93:e1:5e:26:29:a8:20:97:
                    cd:f5:59:10:99:10:23:5d:16:83:5c:27:be:c8:8e:
                    b5:b6:ed:2b:00:fb:d4:7e:4d:49:01:78:ff:18:42:
                    d2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:9C:D7:71:D8:E3:3F:28:0D:A6:39:84:5E:F1:76:E8:28:92:58:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e1d8fb36-7117-318b-ae6e-4c0c46c694b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.196.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:f1:a7:54:2f:09:c9:af:39:a1:e4:b2:57:21:fb:a1:b6:26:
         31:f1:54:37:97:b6:02:5e:73:5f:f9:27:76:fa:cb:65:19:e7:
         07:17:73:d8:5a:11:27:1b:fd:c9:9a:b4:92:21:aa:e4:ef:2b:
         b9:1e:58:ac:7f:82:e2:f5:90:80:40:0c:41:d5:61:38:b5:77:
         84:05:fa:23:9c:f3:36:dc:46:05:56:a0:28:43:25:c5:7e:ce:
         95:63:d1:b8:f5:aa:55:5d:b7:7d:14:1c:3e:b3:0e:94:29:53:
         f1:c0:41:f9:35:00:69:18:5f:3d:66:89:9c:78:44:08:b8:3e:
         72:be:07:78:1a:6c:a4:e5:87:2d:40:bf:53:e3:83:9f:68:20:
         31:27:4f:f9:c6:ed:a3:e0:98:fc:5c:17:fd:bf:05:2f:51:aa:
         08:92:0a:8b:6c:78:e4:b8:fb:d8:7a:44:36:df:ef:cc:20:14:
         7d:20:58:20:f9:80:d9:61:db:71:c4:78:e0:eb:64:07:aa:5d:
         d6:14:34:53:73:ed:bb:90:aa:91:c1:c9:55:33:7f:12:ec:c0:
         a1:c8:41:2f:0e:32:ef:06:2b:05:26:b0:a3:9f:db:68:b0:a5:
         86:8b:2a:c5:83:f7:8d:7b:67:97:a2:e6:90:9b:87:04:8c:45:
         7b:ff:c1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:32:14 2025 by rpki-client