Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1051af0a-0d70-382f-9c88-132d6bf3f881.roa
File:                     1051af0a-0d70-382f-9c88-132d6bf3f881.roa (raw, json)
Hash identifier:          UQFPnFEwl1UmWEuS3vJRMtOD6vKrakiBfvqWDGUNH6k=
Subject key identifier:   16:A9:C4:D8:2C:EF:44:BD:ED:DD:66:7B:2D:00:1F:C4:49:9B:3B:C7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A94DB2B4BAA60DC774C580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1051af0a-0d70-382f-9c88-132d6bf3f881.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        98.39.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:4d:b2:b4:ba:a6:0d:c7:74:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=2e360310-a4e7-4393-9981-8031ce8ded75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f2:e6:fb:31:5d:da:13:14:46:aa:74:40:12:
                    29:a6:94:6b:db:10:ae:30:cd:ff:a6:e8:6d:63:a1:
                    b7:af:2f:dc:35:3b:75:7b:13:26:2f:74:43:60:ad:
                    7a:9e:2c:53:03:1c:6e:7e:c3:0c:6c:69:88:1e:51:
                    6f:d4:89:d1:0d:7a:91:e1:09:c9:aa:a1:92:38:5b:
                    79:e6:ba:22:de:ca:92:fa:54:bb:1c:d8:56:e4:30:
                    b9:f5:8b:76:46:df:0b:de:d2:28:2d:af:e2:bf:a2:
                    fa:b7:87:9f:28:64:6b:4f:c5:f3:36:90:0f:65:b1:
                    98:67:55:ed:3b:55:9f:73:62:3b:de:56:27:79:ea:
                    e9:c0:f3:f8:2e:37:4d:fc:b7:e0:b5:ca:a4:86:3c:
                    5e:e3:95:1d:f7:a9:d8:04:c4:22:b2:35:ca:1a:76:
                    91:bf:43:c2:9f:bf:46:f1:b9:5f:aa:16:70:d5:94:
                    30:82:9e:f0:46:11:9e:65:f9:31:52:82:a8:7e:3f:
                    25:88:f6:2b:b6:d9:0e:83:48:60:c8:41:0b:c7:ee:
                    a9:56:43:70:6c:5f:10:2b:a4:68:fe:fb:ff:24:4c:
                    bf:7d:76:b2:fa:72:0c:ab:ae:ad:4a:b2:84:b0:8b:
                    09:79:36:be:4d:36:ce:fd:23:0b:7e:94:fe:d8:0d:
                    97:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A9:C4:D8:2C:EF:44:BD:ED:DD:66:7B:2D:00:1F:C4:49:9B:3B:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1051af0a-0d70-382f-9c88-132d6bf3f881.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.39.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:21:ee:22:e4:a1:90:45:23:2f:9f:db:2f:69:c2:3e:07:0a:
         11:90:d2:c4:28:3c:b2:26:be:06:0d:2b:be:f1:d5:b7:36:50:
         42:33:e0:b3:b5:f1:03:6f:8a:e8:e5:03:f5:6f:59:99:90:58:
         82:7a:bd:68:38:0e:73:9b:6d:9e:d3:0a:32:23:a1:c7:8d:28:
         dd:cd:50:f6:9f:4a:cb:83:4c:7c:68:15:a3:81:3a:c6:06:73:
         89:d1:19:f3:cb:1f:87:b3:7b:af:8b:55:41:05:e9:08:d0:29:
         68:08:52:d8:f5:eb:51:b8:64:a1:a4:c8:d7:22:51:cb:dd:41:
         da:52:ff:e8:75:a4:be:28:f1:31:b0:fc:3f:e1:18:ef:a8:36:
         9c:87:08:96:1a:82:a9:4f:e0:3b:b7:06:df:0e:7b:02:d0:f9:
         ca:d1:aa:97:50:68:e3:a7:32:83:02:74:62:01:07:cf:23:1d:
         25:c0:4f:e4:c1:18:b2:c2:e8:8c:72:c0:29:5c:08:7c:8b:ba:
         f4:1e:05:96:66:e0:b8:f3:c7:f2:67:62:b1:56:4c:fa:77:7a:
         4f:8a:31:5a:6a:ff:b2:d1:58:c8:1f:94:63:9e:31:af:b7:f2:
         fa:fd:60:1d:c5:d5:c2:cc:f0:21:42:c3:20:fc:82:a7:9e:4a:
         f3:ca:d9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:21:45 2025 by rpki-client