Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e5d7e92-5cdb-3e75-bc95-b52e7e7f9c10.roa
File:                     7e5d7e92-5cdb-3e75-bc95-b52e7e7f9c10.roa (raw, json)
Hash identifier:          N0+yENmtBQOUhDiIeQlLwTnOwmyDGC0IC+JVGal+aIo=
Subject key identifier:   77:B3:7A:CC:8B:44:D0:FC:DF:AB:57:F0:A6:B9:3D:74:0F:63:EA:BC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AAFAB51A04566408306500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e5d7e92-5cdb-3e75-bc95-b52e7e7f9c10.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        98.44.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:fa:b5:1a:04:56:64:08:30:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=48cf0347-372c-41ed-8895-1935fb55feab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4f:38:a7:2f:5c:a9:8b:aa:29:07:37:33:96:
                    39:56:bf:b2:34:77:09:69:ff:fc:3f:8c:e4:ff:66:
                    cc:79:c9:0d:2f:d5:a0:7a:e2:26:ca:ef:24:6a:14:
                    18:ed:b9:59:02:45:dd:8e:60:cb:50:dc:96:d9:55:
                    c4:18:17:f4:a4:f6:4c:09:c1:d5:89:1a:4d:b1:cb:
                    fc:e5:9b:db:1b:7d:ee:bc:1d:1d:c8:de:43:0f:bc:
                    35:1e:90:29:9d:3e:c3:93:ac:9b:af:cc:3f:35:a9:
                    a7:74:be:f8:22:7a:c0:ed:7b:16:8c:b6:81:c8:4b:
                    7e:f9:cd:af:55:df:e3:4a:2e:0d:67:36:30:d1:16:
                    51:54:dc:34:88:91:91:15:38:ba:77:16:b4:18:17:
                    6f:ff:89:46:c1:bb:49:22:db:ee:6e:5c:e0:fa:21:
                    d5:31:4a:f5:f6:3f:36:bb:76:31:d1:71:9b:85:78:
                    d0:8d:cb:82:d1:50:43:96:90:e8:1f:5d:5e:5d:05:
                    b4:f3:f2:02:e2:01:0f:a1:21:c7:0d:33:e7:bd:43:
                    a3:be:24:d2:ca:b4:45:c9:02:d5:d9:85:21:4a:69:
                    ad:0c:4d:09:23:ed:44:fd:cb:f4:2b:00:62:92:46:
                    5e:70:6d:d3:f7:8b:49:50:82:1a:b7:26:a0:24:70:
                    12:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B3:7A:CC:8B:44:D0:FC:DF:AB:57:F0:A6:B9:3D:74:0F:63:EA:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e5d7e92-5cdb-3e75-bc95-b52e7e7f9c10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.44.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:f4:08:2c:06:8b:5a:41:5c:24:37:70:1a:56:89:9f:55:b2:
         d4:6d:69:65:70:4d:1a:24:76:dc:32:b8:22:39:c3:e4:ff:15:
         e9:dd:3b:dd:20:b5:4e:e8:b8:50:cd:9d:84:ab:62:47:80:8d:
         5d:01:68:33:41:f9:f9:ef:ab:01:19:10:99:1d:09:0e:1c:8e:
         83:fd:50:e0:67:d1:f8:ea:a9:08:9f:02:6e:a8:04:3b:d6:50:
         18:f6:c2:24:b9:c2:22:bd:53:fc:fc:e1:56:74:24:1f:07:b3:
         c3:2c:65:14:0b:53:a4:1e:27:e9:f2:bc:78:f2:05:38:ca:72:
         fd:8e:97:4c:a4:9a:d2:37:3f:12:62:9d:3c:ee:d7:8b:fc:0b:
         eb:f8:c3:0c:77:76:25:62:77:cd:82:35:1c:14:1d:e5:78:b5:
         eb:05:80:1a:28:3c:22:d6:d3:08:84:76:57:7b:5f:33:a8:00:
         82:2c:cb:84:35:ec:ef:e4:49:b9:91:0d:67:46:53:b8:a0:60:
         dc:11:57:da:67:a0:3e:ff:d5:a7:75:f4:cb:11:90:1b:d6:ea:
         6f:29:a2:95:af:29:9d:54:29:2c:ae:e5:e6:bf:83:3c:7f:3c:
         8f:36:74:c0:48:1e:0e:f5:38:8b:d8:41:45:d0:af:89:6b:28:
         c9:f3:e1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:19:58 2025 by rpki-client