Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a31533af-2d3c-3fb1-babc-85fe73db57a3.roa
File:                     a31533af-2d3c-3fb1-babc-85fe73db57a3.roa (raw, json)
Hash identifier:          OZ4cPEV+4engmZRyal1F12krKK9+YxGwNJ3QhIyVwQU=
Subject key identifier:   B0:BD:16:0D:A0:51:EF:C8:E2:7A:2B:83:29:B3:83:87:6F:E8:42:A1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A9502D78C030F220059180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a31533af-2d3c-3fb1-babc-85fe73db57a3.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        98.44.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:50:2d:78:c0:30:f2:20:05:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=25216b9c-df93-4231-90c7-426b3d1ff680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:16:39:18:b4:5a:dd:5c:43:47:ea:3e:a5:c0:
                    47:e0:eb:96:0b:74:ee:20:5f:8d:a0:08:02:7a:56:
                    6d:98:14:a8:45:55:c9:74:e5:46:dd:55:b3:ca:ab:
                    31:fd:d2:c6:ca:11:fb:45:67:93:f8:85:9e:0c:f5:
                    22:02:bc:4b:24:cc:8f:a7:13:92:11:f2:a0:fc:3d:
                    1c:0f:de:2c:82:99:42:42:bb:b8:dd:93:13:21:0c:
                    cd:a7:e8:46:cf:bb:4a:9b:c8:1f:5e:21:7f:13:25:
                    87:c3:63:a0:31:55:05:cb:86:fe:55:67:6b:ac:e2:
                    97:3e:67:0e:97:79:e8:c8:c5:f0:4f:d4:8c:67:c8:
                    1e:c1:20:88:47:2f:75:73:72:68:d0:a5:cf:5d:ed:
                    34:09:28:49:f5:fa:ca:1b:9f:8d:2a:79:65:fe:96:
                    48:99:32:6c:9b:43:41:d7:02:37:73:c0:44:0b:0a:
                    34:99:ea:e7:87:77:d9:c4:95:09:b0:e1:a0:6b:5d:
                    f2:db:03:30:28:c3:cd:69:27:fe:bb:82:98:1a:fd:
                    6c:2f:94:1b:b7:87:06:35:f3:b6:fb:51:ae:fb:6b:
                    e0:29:20:db:71:13:a7:f1:dd:58:3f:c3:3e:ab:ab:
                    46:a7:80:17:14:12:36:d7:53:ff:2b:b3:4c:01:e2:
                    4a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BD:16:0D:A0:51:EF:C8:E2:7A:2B:83:29:B3:83:87:6F:E8:42:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a31533af-2d3c-3fb1-babc-85fe73db57a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.44.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:7b:ef:33:f6:b7:82:6e:4b:da:57:08:50:f4:08:88:f3:c0:
         60:15:dc:6e:27:f1:29:5f:fb:6f:a8:7a:04:80:4a:79:2b:d3:
         d5:a6:ef:b2:5c:1f:81:30:73:9d:25:fe:a2:48:ce:8f:f0:32:
         ee:f3:2a:d5:56:75:f4:38:bd:93:b8:29:6c:64:1d:8e:53:4a:
         3f:37:c5:2f:84:0a:f9:4e:7d:75:69:19:5e:3b:1c:66:f8:2d:
         e8:a6:9f:19:8c:67:0d:21:42:34:70:1a:21:83:37:eb:ac:f4:
         d2:e7:7d:f7:49:9a:8e:12:5a:b0:38:cc:cb:56:d8:88:d6:bc:
         b7:03:f9:94:f0:bd:70:5d:e0:06:1c:80:ea:7a:72:c9:73:d1:
         60:0a:07:e9:3d:4b:fd:50:28:78:6f:e2:de:a6:8c:74:d7:16:
         be:98:ed:96:04:5f:78:8b:0a:23:5c:33:ed:44:e6:72:43:a7:
         12:9c:2f:1a:92:ac:39:31:81:ed:74:cb:05:de:2f:de:0f:1c:
         ab:ae:4d:10:78:c7:eb:fc:4e:5e:cb:fb:bf:94:fc:be:97:5f:
         cd:e9:e9:1f:10:0f:30:f6:da:b8:e7:2a:d7:42:a6:21:14:a1:
         19:a8:d8:a6:45:ef:a7:b4:6f:ef:b0:20:c4:f3:6e:05:4e:92:
         d0:1f:b0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:24:45 2025 by rpki-client