Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5e736772-1447-3932-89d7-1af513a41002.roa
File:                     5e736772-1447-3932-89d7-1af513a41002.roa (raw, json)
Hash identifier:          5IsvkwvpCFQzUb99BmZq5WIQ9P6/5cuuZCbFgKDrigE=
Subject key identifier:   1B:F5:E4:50:0E:C0:7D:B6:08:1C:85:A4:A4:95:69:E6:FA:F4:3D:8D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A94CE9901F468761E7DE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5e736772-1447-3932-89d7-1af513a41002.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        98.39.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:4c:e9:90:1f:46:87:61:e7:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=7934d67a-1268-4ef1-b9dd-bb0380fd7c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b9:79:d2:b2:f4:14:73:91:49:67:76:45:e7:
                    f2:5f:dc:12:e6:3b:5e:5d:03:ff:27:da:22:07:bb:
                    fc:8c:aa:38:ab:d0:74:58:d7:8a:9f:bc:cf:a7:7a:
                    a5:7c:5b:20:88:1d:ce:8f:a3:7c:4c:dc:5e:7e:ad:
                    1f:ec:8f:ea:37:36:33:de:59:b5:84:f7:d2:c1:9c:
                    52:76:e7:47:80:8b:47:48:3f:f3:64:7f:5b:c0:3e:
                    89:4e:b6:a7:28:c3:c9:0b:c5:a7:e7:01:1a:de:7f:
                    53:05:57:b2:ad:4b:2f:f3:b6:b0:7a:24:9a:b4:b9:
                    43:66:1b:c7:81:55:aa:5c:6a:c7:98:a6:4f:d2:22:
                    c4:9a:84:f0:ae:ff:0d:7a:a7:1a:6c:37:62:da:27:
                    e3:25:16:1a:5d:b4:11:35:87:97:48:98:55:5e:1e:
                    57:69:8c:a9:41:89:72:60:2a:10:8a:e8:28:37:b5:
                    ed:c6:c2:06:a7:50:0b:5c:38:c4:1e:a1:e6:03:e9:
                    85:28:69:6f:45:20:f8:d5:cc:e5:e3:a8:ae:7c:b2:
                    9c:b6:ae:5f:bd:15:cc:3a:f5:10:20:f5:c8:b9:39:
                    bf:04:f0:cd:cd:3a:65:5f:de:c7:db:1d:11:54:85:
                    82:a4:eb:28:c8:7a:b7:7b:41:6b:15:95:b3:b0:5b:
                    1d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F5:E4:50:0E:C0:7D:B6:08:1C:85:A4:A4:95:69:E6:FA:F4:3D:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5e736772-1447-3932-89d7-1af513a41002.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.39.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:10:28:17:e3:26:fb:94:5b:08:c8:93:1f:6c:ef:87:a3:70:
         16:01:87:59:58:46:78:8e:65:fb:94:ad:ca:9f:31:74:c0:56:
         b7:32:ea:bd:46:18:6f:74:33:fc:d6:28:fc:71:fd:9a:d7:94:
         2b:6a:b0:35:9c:0e:bc:40:cb:5a:a5:e2:10:96:06:25:f4:5c:
         2f:d0:ed:fd:51:82:e1:83:22:aa:d5:ed:71:df:de:b2:26:0c:
         34:d8:f6:cc:f4:48:c9:7a:54:2c:c9:a0:49:44:84:af:6e:64:
         16:49:4e:74:6d:13:07:0a:ad:d5:2a:5e:49:50:a6:5f:b5:11:
         7e:6c:60:0a:3b:8e:ff:29:2d:86:1f:9b:c2:6a:05:9b:0c:1c:
         6d:b1:30:2c:c9:69:05:50:9a:42:ad:bc:55:27:3b:89:63:32:
         9c:7a:cb:f5:7b:c0:33:da:3e:12:47:85:d0:a9:97:a1:d3:c7:
         df:45:19:4f:70:3b:38:1b:6c:c3:49:f7:01:d2:94:08:f3:fd:
         d9:19:60:37:28:54:01:84:57:52:c3:e9:a8:5a:0d:2c:69:83:
         c9:0c:22:d2:5c:93:7d:61:de:7d:bf:79:15:d0:6d:17:42:62:
         5b:c4:8a:68:b6:75:90:f3:a2:b1:88:76:a7:f7:e0:ed:4c:c6:
         48:35:41:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:47:06 2025 by rpki-client