Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee75672d-0e96-3779-8f5c-db339722b725.roa
File:                     ee75672d-0e96-3779-8f5c-db339722b725.roa (raw, json)
Hash identifier:          Rsv96sbHwlx5igLwlPUqp4Px81vAD0Er6/GKADsUqpc=
Subject key identifier:   20:99:66:D8:1B:2F:4A:DC:F9:72:95:4A:C5:3E:7E:B7:DE:79:FF:00
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC2D651AC9254AA272F1380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee75672d-0e96-3779-8f5c-db339722b725.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        98.63.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:d6:51:ac:92:54:aa:27:2f:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=6abf4ece-13f0-4b08-aabb-3532bc50f334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9b:fd:8b:3a:4d:77:ad:e4:a7:29:61:03:98:
                    23:47:a9:54:d9:e9:47:bd:8c:7c:95:5e:77:1c:b4:
                    e7:18:39:94:64:44:cc:8e:c5:d9:02:31:26:c5:cd:
                    5d:2b:bc:95:d4:d6:83:b9:b5:73:71:cf:da:c8:4d:
                    36:3b:0c:52:9f:5b:26:92:5d:77:35:eb:12:6e:81:
                    0b:7f:af:30:f4:35:20:82:8c:ec:59:0d:43:aa:0e:
                    74:9a:d6:4b:9c:ae:df:7b:6c:00:f3:73:08:7d:78:
                    6e:f2:7b:8e:a8:39:d0:d9:e0:aa:00:06:92:8d:67:
                    45:88:9e:2d:d7:99:3f:31:96:6e:8d:7d:8d:b7:f3:
                    1c:82:26:a4:c2:72:0d:2e:62:6d:c3:db:fb:fa:84:
                    12:5b:01:7d:5d:8e:d9:e1:6e:91:ec:e7:7f:ce:78:
                    7c:56:af:e9:42:9e:5f:52:09:37:97:de:d7:50:82:
                    ff:bb:ff:49:b4:2d:45:c2:bd:a0:f9:25:f5:15:99:
                    46:1f:c6:c4:38:e9:2f:e4:76:8a:cb:31:6a:d5:15:
                    4a:17:24:46:a0:9b:16:2a:95:0b:4a:b4:e1:f4:7c:
                    8e:c6:06:be:eb:71:00:46:9d:b7:96:c4:a5:9a:0a:
                    29:a4:97:8d:18:1d:1b:e8:93:c8:4e:9b:18:5a:6a:
                    46:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:99:66:D8:1B:2F:4A:DC:F9:72:95:4A:C5:3E:7E:B7:DE:79:FF:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee75672d-0e96-3779-8f5c-db339722b725.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.63.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:d4:22:33:3c:ff:00:48:97:0f:26:0f:b0:c2:66:12:f6:05:
         a7:87:16:09:77:06:17:b2:d0:51:e3:a1:82:2f:ce:45:d4:d9:
         58:e2:d9:9f:86:cd:cb:60:9b:68:d3:a2:a0:0f:8e:20:54:fc:
         e0:82:84:e2:c6:84:73:f0:46:39:76:70:c7:3a:78:a7:52:a7:
         2f:0f:e8:1a:f7:77:4c:c4:4b:97:34:9f:45:6c:f2:e3:d9:02:
         c4:38:4d:17:90:47:18:e0:54:9e:b0:f4:c4:d1:5c:a1:73:62:
         04:63:ef:49:1d:0d:7f:0f:06:5f:26:cd:d5:93:2d:8f:f8:6d:
         18:1c:5c:f4:b3:80:40:6c:8d:c1:2d:00:13:93:27:06:62:98:
         3c:6d:42:a4:38:0f:1c:b6:48:16:8e:c0:56:98:9a:46:e6:8c:
         d1:1b:93:18:d9:84:4a:db:06:d4:88:b5:3e:56:5a:83:52:cc:
         87:53:87:25:a5:06:ed:cc:04:5b:41:fa:06:27:9e:0e:63:7b:
         d8:ea:b6:2e:4f:d2:30:00:07:a8:b1:b2:bd:b0:69:37:f4:19:
         97:2f:e9:a9:ce:08:da:1b:b0:9e:16:77:69:31:5b:92:af:ed:
         08:7a:75:38:7e:88:9a:48:a8:ff:ef:b2:11:0b:4b:6f:42:d6:
         9a:e2:2f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:06:12 2025 by rpki-client