Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/4bbee707-45ea-32d3-b4a9-ef733ecd8d08.roa
File:                     4bbee707-45ea-32d3-b4a9-ef733ecd8d08.roa (raw, json)
Hash identifier:          7qZEIXHVnbIvqbLTopgdc9HWuCgLG+lKIt7xfXpCkhc=
Subject key identifier:   83:E8:1C:E9:DF:86:3D:E2:ED:6E:92:0E:09:3A:EE:88:AC:78:DB:A6
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584B2FC184628A41616AA52BCD30
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/4bbee707-45ea-32d3-b4a9-ef733ecd8d08.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     62610
IP address blocks:        98.96.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:84:62:8a:41:61:6a:a5:2b:cd:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=6390d87c-b19e-43e2-b732-de7856c7a457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6c:88:99:9c:28:6e:46:a5:83:c6:44:18:cb:
                    19:14:af:95:fb:33:55:1b:f3:53:67:91:83:64:06:
                    43:99:44:92:86:8e:0e:37:0c:eb:c2:20:23:60:2f:
                    05:9f:5e:8f:b9:f8:a7:0a:fb:49:90:ed:18:e9:f8:
                    23:d1:60:d3:45:2e:4d:dc:cf:b7:a9:50:a6:53:63:
                    fe:89:cb:c7:6a:60:52:6a:96:39:2e:85:88:7e:7d:
                    c1:80:ea:9b:49:73:f0:77:77:f2:61:e3:47:d4:76:
                    f4:4f:57:9d:e5:d4:8c:84:b1:5e:e1:a7:22:f3:e5:
                    18:ea:a0:a4:60:2f:d9:35:60:f6:68:56:a9:52:63:
                    1f:42:fe:88:47:ff:ed:8e:8f:23:72:40:d3:5e:3b:
                    73:a4:e0:83:bc:f2:ac:06:02:b1:bf:8d:20:97:c8:
                    39:5d:b3:3b:30:62:34:ec:4f:71:20:1b:36:01:d3:
                    c3:62:12:f5:6e:4b:f8:26:10:03:b4:60:dd:58:f0:
                    18:3d:8a:95:bd:70:95:33:7c:37:2b:db:ed:9e:a5:
                    84:0a:93:09:3f:f3:4d:c2:81:aa:35:7f:cc:81:95:
                    69:e8:d0:25:ad:56:9f:3a:b3:fb:18:a5:ed:b4:2a:
                    86:4a:8e:83:0e:96:79:c1:a3:c4:39:a1:66:66:99:
                    dd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E8:1C:E9:DF:86:3D:E2:ED:6E:92:0E:09:3A:EE:88:AC:78:DB:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/4bbee707-45ea-32d3-b4a9-ef733ecd8d08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.96.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:1a:35:f8:66:50:b8:40:f4:fb:ae:dd:8b:f4:fc:26:bd:49:
         aa:35:7d:04:fa:8a:d9:fa:41:8a:f1:ca:78:02:6e:72:c3:90:
         8f:17:a7:7f:cb:fd:23:83:e7:04:d7:7f:3a:2d:09:e1:8d:c6:
         af:9c:f7:63:a2:5d:7a:3c:2d:a4:3f:7f:6d:1c:1d:e4:fe:2f:
         ec:83:38:72:e0:54:0e:4c:63:ae:b7:7e:f0:cd:b6:f3:fb:ff:
         07:7d:e3:26:ab:66:37:7b:a0:a5:60:37:ef:02:3c:7a:cf:f5:
         98:93:c7:44:06:4f:41:17:cc:68:6e:82:0f:84:2c:4d:7b:61:
         9c:4b:f1:d0:7a:f2:5b:9c:a5:00:b0:ca:ac:06:eb:90:fe:35:
         04:26:9d:b3:f4:4b:d2:20:cc:38:6b:1a:92:6b:da:cc:9a:cd:
         61:ca:2a:59:37:77:b1:29:07:2c:d2:d0:5e:6e:56:57:44:80:
         07:14:21:cb:e9:ac:8f:ee:5a:e9:09:e2:9f:bc:26:58:2b:b7:
         f9:8e:d8:fc:03:61:22:8a:d6:13:63:48:84:35:a0:84:54:82:
         40:f8:89:4a:15:40:3d:82:90:7b:9e:ef:e6:cd:e6:df:7f:31:
         e4:21:74:32:a9:31:81:c8:10:cb:4d:fa:e0:57:03:4d:98:5e:
         bb:d2:75:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:55:14 2025 by rpki-client