Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c5f2c02-022b-371a-8966-9ae694c3b539.roa
File:                     4c5f2c02-022b-371a-8966-9ae694c3b539.roa (raw, json)
Hash identifier:          QtSJrF+DU2LqqIcpdvUU/pVuPYTbuVr3XewUK0uxq7Q=
Subject key identifier:   E0:3E:46:CC:AB:DA:AD:D6:D9:6A:72:2F:DB:87:F7:5E:AA:62:EF:8D
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584B2A2C46EC6FE36A1ACFB0BC00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c5f2c02-022b-371a-8966-9ae694c3b539.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     7029
IP address blocks:        98.20.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:46:ec:6f:e3:6a:1a:cf:b0:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=e2c34295-d321-4eec-9ee3-9f8be14d49bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c7:6c:a0:e6:a9:4f:28:03:53:9a:41:27:f2:
                    9c:1c:98:2c:c0:77:f0:fd:04:91:de:b6:95:83:db:
                    f5:27:c9:80:de:0e:a0:8f:f5:eb:32:c7:6c:ec:ce:
                    ee:33:37:98:83:5c:57:76:66:91:3f:3d:09:24:06:
                    ec:b4:45:b2:61:ef:3c:26:ce:1b:12:2e:ee:96:fe:
                    ad:ba:96:0a:8f:c2:a9:02:ee:e8:3f:f8:7e:44:99:
                    f5:58:4b:8e:06:8d:7d:01:b0:22:c1:79:29:32:d1:
                    24:c9:9d:3f:10:17:f2:4b:5f:b4:92:e9:67:39:59:
                    e6:67:82:bf:ad:55:12:26:45:2e:21:41:bd:7c:84:
                    4f:20:d9:d3:ec:ac:8d:bb:f6:73:68:f1:8b:b0:f1:
                    2b:72:ad:d1:c2:61:c4:63:5b:db:ba:af:09:fd:b1:
                    ea:d7:1e:fd:a5:96:10:19:54:9c:fa:9d:e9:36:6f:
                    6b:6e:9a:69:c0:e6:f7:fa:e2:6c:23:4e:bf:9c:d6:
                    f9:d3:60:5d:02:e9:5c:11:83:bf:43:9f:84:d8:f4:
                    44:d2:2e:64:ec:b7:53:d2:2b:a8:63:e7:7e:34:e0:
                    a5:b9:df:4a:b9:e1:ea:17:d1:97:69:0e:de:fd:6d:
                    b8:4c:76:5b:cf:66:b8:cf:19:ef:3e:e9:8f:41:0b:
                    34:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3E:46:CC:AB:DA:AD:D6:D9:6A:72:2F:DB:87:F7:5E:AA:62:EF:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c5f2c02-022b-371a-8966-9ae694c3b539.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.20.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:1a:e7:7d:0a:59:ef:4b:cf:5a:23:cb:fe:83:3d:db:68:91:
         da:d3:e9:33:61:0e:84:91:08:e2:f9:9f:17:74:f3:77:1b:f8:
         6a:4a:34:c3:a2:39:81:e5:29:b3:17:b5:07:a6:f7:ae:12:5e:
         a1:4c:32:89:2f:ed:17:a9:49:43:26:db:39:32:b0:bd:89:25:
         30:55:e1:e3:b2:a3:57:b3:d7:2f:c4:87:83:27:6b:e4:a6:7d:
         ef:19:e7:ca:7f:d6:6f:5f:c4:49:6b:fa:dc:4e:fb:0f:30:68:
         22:92:b5:75:b0:bc:62:7a:9b:5d:33:47:ee:14:35:f6:6b:e4:
         a2:37:50:3d:1d:ec:5e:1a:6b:3f:a8:5d:12:ff:78:4c:b0:bb:
         7b:fd:12:e7:f8:bf:54:b0:ef:b8:89:bf:e3:fb:cc:a7:0c:fe:
         5b:6c:af:5c:19:10:71:c7:45:5f:fd:a8:96:f3:e0:2a:a4:9d:
         14:c7:8a:d2:c0:d7:36:cf:ab:21:b0:98:f7:90:f7:f6:ea:fa:
         6a:06:74:5d:43:5c:08:2e:0e:1f:28:7a:7b:4c:98:d4:cd:d8:
         7c:42:87:68:88:9e:2e:11:62:f8:1e:09:82:21:01:27:f5:6a:
         b3:e7:8c:eb:46:f8:6f:9c:ae:41:a9:22:18:80:0a:1c:2f:ff:
         cc:c2:14:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:08:30 2025 by rpki-client