Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6dd3929-45ac-3d58-9abb-e7b3d89d4937.roa
File:                     a6dd3929-45ac-3d58-9abb-e7b3d89d4937.roa (raw, json)
Hash identifier:          jlk+7L+BB2k8DH+MJJiIwvY8HLc+nkz2XAjdDryj5BQ=
Subject key identifier:   ED:51:06:50:BB:11:76:B2:86:8B:69:0C:75:D6:2B:30:42:02:97:32
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AAE43F95779231E6452A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6dd3929-45ac-3d58-9abb-e7b3d89d4937.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        98.198.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:e4:3f:95:77:92:31:e6:45:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=c649205a-a202-415f-9fb8-442330ab2bf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:44:a4:8c:bc:b4:e5:94:3e:a2:49:ba:23:7a:
                    9b:5c:03:d6:93:6c:78:1a:55:d8:22:9b:fe:cf:4e:
                    65:1e:d6:5a:eb:92:0c:56:e1:a1:85:36:44:9a:83:
                    34:b6:29:ad:38:75:db:4a:8c:a7:bf:7e:c1:ba:5b:
                    05:43:2a:8d:6d:a9:3b:fe:30:01:26:04:a8:c2:e5:
                    25:f7:6d:c3:75:38:1d:ee:d2:fa:17:84:c0:a2:04:
                    13:24:67:78:8b:de:3f:c5:77:90:a4:78:12:4c:b2:
                    09:32:68:5c:61:16:df:84:3f:6a:a4:26:71:a2:e1:
                    da:49:2f:a5:2f:0b:b5:65:c8:a2:95:c4:5e:ed:64:
                    64:d1:5f:ed:c0:a4:f3:a4:53:8c:78:a1:58:e7:d2:
                    c9:4d:79:af:f6:50:04:e8:59:58:1e:0b:23:46:79:
                    ed:b8:06:26:7c:20:b7:ca:8f:23:71:b6:51:da:e5:
                    d5:3c:f2:91:22:0a:ae:d5:92:24:4a:43:6d:5b:95:
                    35:f0:a2:7b:32:e5:be:a0:6f:5b:8e:82:0c:5e:01:
                    c8:96:44:a4:e9:6a:9d:d6:f1:ac:6a:ea:4a:78:c6:
                    1d:77:de:de:bb:9a:c9:be:d6:ca:05:fd:bd:48:65:
                    a9:c4:8e:a7:80:90:01:4e:a4:e4:dd:e1:b9:4b:a6:
                    ba:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:51:06:50:BB:11:76:B2:86:8B:69:0C:75:D6:2B:30:42:02:97:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6dd3929-45ac-3d58-9abb-e7b3d89d4937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.198.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:6d:e1:a9:c7:b2:82:49:bf:16:82:f1:a0:4a:5e:6a:52:96:
         b0:fd:50:dd:84:ca:31:7e:3c:8f:2c:60:0f:3b:20:29:a1:16:
         64:ca:21:68:14:76:61:21:2f:11:a7:91:af:3b:60:87:8b:aa:
         ec:38:2f:1b:35:0b:4b:d9:e1:dc:02:ad:ba:a0:ab:ce:23:61:
         10:70:53:16:dd:78:2f:42:12:a7:89:e8:38:73:d5:d6:1f:12:
         60:54:c1:89:5d:39:d1:fb:e1:cb:59:0b:f0:95:30:ba:6e:c6:
         b1:f6:7d:53:c8:66:6f:4a:c7:f1:03:3d:09:03:56:a6:02:e5:
         10:cb:ba:e5:c4:eb:55:70:1c:84:f4:3e:8d:e0:cf:8f:d4:70:
         ec:71:e2:ce:53:2d:f1:74:21:9c:9e:da:dc:ab:55:a2:17:ad:
         16:ac:b5:4a:1e:70:9e:66:b7:70:04:fa:d8:fe:8d:d6:7c:4b:
         78:27:7b:86:45:f3:94:89:2c:ac:d1:ee:5e:c4:31:45:0a:f8:
         1b:ca:3c:09:c5:26:af:a7:f2:c0:32:cc:fe:8b:ee:e5:09:d9:
         2b:f9:e0:ea:17:6e:38:d0:2b:ed:0c:f8:af:6a:61:dd:21:21:
         45:6a:ec:2f:46:a8:fb:a9:2b:bc:1e:0e:3f:8a:f2:47:fa:13:
         c4:4c:1a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:24:12 2025 by rpki-client