Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dbd0d37f-7391-39df-89b8-e7f45234dbd1.roa
File:                     dbd0d37f-7391-39df-89b8-e7f45234dbd1.roa (raw, json)
Hash identifier:          YN1vY1nL70rnXrmLK4fYQIqEkTNHOyxPU0zpyTDjzEA=
Subject key identifier:   DC:F7:C7:D5:9A:1B:7B:B5:F9:D8:75:CD:27:0E:04:3D:F8:E7:E8:1D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFCCA69CFF6B58D55766180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dbd0d37f-7391-39df-89b8-e7f45234dbd1.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     22909
IP address blocks:        98.240.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:ca:69:cf:f6:b5:8d:55:76:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=8da76149-32ef-429e-a34e-d067ad0a7d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c6:35:79:1e:15:3b:aa:81:8f:56:f3:49:2e:
                    b5:f7:cb:b5:53:b6:85:b6:d7:92:79:85:8a:c1:39:
                    bd:94:99:b8:8e:00:33:5a:49:a0:d9:38:22:4f:66:
                    89:8d:5e:c9:0b:87:6d:c1:ac:22:1c:e9:29:d8:b0:
                    e9:cb:86:bc:46:b9:de:f6:7d:07:0b:52:7c:6f:c4:
                    e7:07:83:8b:2b:79:67:ac:36:6f:84:97:af:85:c2:
                    eb:ca:c7:8d:c5:cd:4c:81:99:41:32:88:1a:e2:fb:
                    12:7e:ec:44:72:89:df:5a:3b:a0:2d:7f:5b:71:3a:
                    28:2b:94:a9:c8:ba:50:52:65:a9:8f:9c:ea:09:2c:
                    e7:38:8c:fd:fc:e4:74:f6:9f:e5:99:64:12:81:4b:
                    82:1d:f2:79:8d:e6:e1:b7:b3:3a:4b:49:58:1c:5e:
                    62:15:7d:19:0f:65:89:de:50:e5:16:f3:02:dc:64:
                    3b:6b:ac:93:24:81:25:bc:56:64:a0:ad:2f:fc:3e:
                    05:9e:96:14:8e:a8:71:de:6a:3d:88:95:96:ab:19:
                    5d:e5:8d:a9:24:6a:a2:82:97:04:14:88:cc:1d:a0:
                    9a:43:ab:3d:f7:2b:70:50:79:63:83:89:7f:21:f0:
                    d5:cc:91:e1:5a:bf:71:cb:5a:66:37:61:a5:35:74:
                    1c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F7:C7:D5:9A:1B:7B:B5:F9:D8:75:CD:27:0E:04:3D:F8:E7:E8:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dbd0d37f-7391-39df-89b8-e7f45234dbd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.240.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:4e:99:0b:08:bb:17:84:7f:bf:c9:08:85:b7:11:f9:7b:3a:
         3a:52:65:e0:5d:d4:59:99:6e:b5:e1:f5:55:07:95:83:f4:8f:
         ab:b5:c3:57:cd:91:1c:a5:6a:f4:27:13:4b:11:14:10:20:59:
         a1:a8:c2:37:2f:ca:af:3c:31:c7:02:33:fe:0d:8e:e4:69:90:
         f9:c3:73:26:ad:7f:c5:9f:52:ae:c0:aa:7e:f7:df:f2:36:d7:
         66:f7:74:70:43:56:45:29:89:f8:63:13:97:8b:46:2f:96:a5:
         2a:ad:fa:ca:05:db:22:a8:c7:5f:50:e9:86:05:08:99:28:20:
         33:30:f7:5c:c4:02:fd:80:fc:59:20:fb:58:ec:33:27:93:c2:
         6c:26:90:14:2e:e0:f9:91:b7:8a:8e:70:0b:c3:57:aa:8b:00:
         6a:a3:2f:c1:e4:aa:a1:51:a0:32:98:e2:ff:6c:ff:ed:57:e4:
         ba:f8:57:f8:7a:30:5e:03:cb:94:52:7d:2c:1c:cb:50:7e:4d:
         88:be:b3:cc:27:83:f7:bb:e8:72:8a:f8:c6:38:e7:1c:33:8c:
         0d:0f:ec:5e:ae:0d:97:fb:5d:de:4d:ad:73:e9:20:69:9e:fb:
         c7:aa:38:45:fb:8a:b4:de:37:3d:4a:67:24:46:6d:20:d6:4e:
         8c:5c:07:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:10:46 2025 by rpki-client