Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/92f0d530-e1cf-349b-a561-2aeac4c69db1.roa
File:                     92f0d530-e1cf-349b-a561-2aeac4c69db1.roa (raw, json)
Hash identifier:          A4RbaFw0iun5TMC7POBWKhxQIaKHG3O/BI8oDvdrJJ4=
Subject key identifier:   3E:2C:D1:DB:B9:E9:18:4C:C3:53:12:4D:D1:10:68:CA:F4:B2:40:1D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A939788D6486C75DA75180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/92f0d530-e1cf-349b-a561-2aeac4c69db1.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        98.195.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:39:78:8d:64:86:c7:5d:a7:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=2abe895a-c96d-4b6f-bb1b-c7c690f4e774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:81:48:aa:6c:aa:dd:ed:ff:3d:f4:5e:31:54:
                    2b:e7:f1:9d:a0:5b:6f:87:22:89:5c:61:92:f1:fa:
                    fe:ef:62:77:53:f9:c4:b6:4f:06:14:1c:95:12:bd:
                    8a:bd:0a:6d:94:bf:3f:d6:76:6e:17:52:cc:fc:e0:
                    62:f7:3d:f7:98:94:59:ca:a7:ed:14:22:42:b8:99:
                    8b:c5:3e:e7:ab:16:f7:9b:28:ab:b1:1f:88:73:8a:
                    99:f4:30:d5:d7:cc:26:d0:4b:c3:e8:cf:3e:ed:07:
                    b1:f9:54:18:01:88:52:37:9a:02:e9:b1:69:fe:22:
                    8f:fa:97:1d:0f:78:ea:05:12:63:cc:54:97:92:c8:
                    6b:04:8e:8d:46:1a:dd:2d:0e:4c:eb:b6:f0:29:31:
                    c6:09:c2:28:eb:21:99:09:5d:c2:86:ac:50:b7:0d:
                    3d:86:d4:ca:99:f7:92:83:e0:86:7d:62:32:03:e9:
                    dc:42:b6:1b:9f:ee:ef:5a:9c:b6:b4:c5:30:2a:18:
                    08:9b:6a:ec:f6:51:4b:46:5d:a8:34:2f:8f:6c:27:
                    af:4f:0c:68:5e:e8:9e:44:4c:bb:56:67:5e:32:45:
                    2b:0a:e7:bc:54:04:9f:ac:e0:57:f6:1f:b1:83:97:
                    9a:41:36:e0:c4:88:07:51:15:ed:56:cd:d5:dd:8e:
                    96:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:2C:D1:DB:B9:E9:18:4C:C3:53:12:4D:D1:10:68:CA:F4:B2:40:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/92f0d530-e1cf-349b-a561-2aeac4c69db1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.195.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:6d:f5:60:4e:f1:d2:f3:ca:56:76:4f:b1:c1:d1:2b:bd:ae:
         ca:08:46:97:af:86:8f:a1:c0:8a:02:bd:f8:6f:89:1a:0e:3a:
         72:3e:04:99:e0:32:e0:39:b1:a0:2e:98:a7:b6:4e:ac:a9:58:
         eb:71:e0:94:e3:04:0c:fa:5b:13:d4:d6:73:5c:d6:51:90:33:
         58:3c:50:45:b3:19:63:0c:fd:b3:97:6b:fa:a0:6c:af:28:ee:
         58:06:1f:70:b7:07:a9:5d:ef:4c:ad:c8:8c:75:b1:f0:94:51:
         ef:3f:f6:f3:ad:d7:dd:bb:f4:4b:40:e2:36:00:de:62:d1:57:
         db:34:d8:ac:9e:9e:21:49:32:03:fa:6f:26:4d:a4:5f:c8:fa:
         05:71:99:7f:94:98:6b:41:a1:d4:95:d6:1a:00:a9:d7:4f:15:
         37:5e:2d:25:27:43:57:ab:c4:88:3d:a7:6d:cd:42:29:ed:74:
         bd:65:04:5d:7a:4e:b3:df:e6:ff:fb:e2:a1:a9:3b:71:87:e6:
         2e:7c:23:01:42:f8:ff:4c:87:f5:24:5d:9e:1d:56:ab:59:8b:
         a2:25:79:b9:d7:e2:ab:fa:4f:b4:d4:d2:8f:47:7a:fc:8d:16:
         ae:cb:7b:82:9c:17:28:cd:92:15:56:b8:e4:00:c6:63:4f:30:
         56:ec:76:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:06:30 2025 by rpki-client