Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/acc8470f-0186-32b5-8b0a-962763a24ca5.roa
File:                     acc8470f-0186-32b5-8b0a-962763a24ca5.roa (raw, json)
Hash identifier:          L3tjEPy9o9igHqPG2RDWayWlPqPORGho5vv6FY0NerY=
Subject key identifier:   98:E7:06:C9:34:97:23:30:5C:EC:D9:F2:87:95:CA:F4:A0:01:2B:2F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AAF34B321AA33617AA3700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/acc8470f-0186-32b5-8b0a-962763a24ca5.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        98.39.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:f3:4b:32:1a:a3:36:17:aa:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=930b2da9-06f9-4005-9c96-50a88c9eb9e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:59:71:1a:28:19:3b:31:f8:98:0d:13:2e:e6:
                    12:af:57:36:8b:27:61:4d:4d:cc:d4:da:f1:2b:5c:
                    ae:e8:c0:43:2b:ea:eb:e6:97:ac:5d:63:f9:c2:99:
                    e8:2d:0b:53:25:be:0c:01:7f:08:b1:09:12:75:ae:
                    62:2d:db:dc:0b:4e:53:b4:e0:be:da:31:73:f0:bd:
                    90:be:8f:04:50:ba:8a:e1:96:de:81:ca:9c:70:93:
                    e9:87:22:5b:ea:d4:56:11:6d:b3:59:90:1c:30:7b:
                    55:5b:24:21:f3:43:51:d5:76:8c:dc:7b:6b:a9:d3:
                    73:9b:35:8e:0c:ac:1c:50:9e:5e:c0:6d:75:4f:85:
                    bb:e5:aa:2e:e8:47:1a:d1:25:9d:58:1f:af:13:97:
                    a7:85:14:bd:cc:4a:55:a4:2e:a3:81:5b:83:1c:c2:
                    88:97:39:d5:ea:e9:b6:f4:73:9a:48:e3:92:36:42:
                    c2:b5:32:2c:02:27:2c:ca:98:b2:dd:66:b5:c2:a7:
                    af:67:e3:02:b3:8d:09:42:36:03:7f:91:1f:86:ad:
                    08:bf:90:99:a7:df:9a:f2:5c:13:8c:b6:63:04:fb:
                    3a:58:a8:6a:c5:40:c5:89:fe:9b:21:dd:f3:f5:e5:
                    a5:f8:29:2d:f2:0c:a2:d4:41:b3:90:ff:80:46:28:
                    ed:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E7:06:C9:34:97:23:30:5C:EC:D9:F2:87:95:CA:F4:A0:01:2B:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/acc8470f-0186-32b5-8b0a-962763a24ca5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.39.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:b0:cf:b9:8c:b5:23:3e:32:7a:55:05:04:7b:4b:5d:09:aa:
         62:7a:1e:f3:04:a3:3e:30:fd:3b:67:31:e9:73:ac:ff:7d:8a:
         77:70:d5:d4:7d:b7:60:58:f6:00:5f:96:34:92:de:d9:71:51:
         f5:48:3b:bb:20:c7:f3:4a:bb:5a:de:12:06:90:54:f1:01:9a:
         00:e9:c5:4d:3b:80:8e:40:d6:98:a4:d7:f2:e2:a3:a4:6a:5a:
         7c:d6:68:83:17:9b:e2:bd:89:0a:dc:2f:5c:b3:fe:4d:87:59:
         b3:16:29:11:7d:1d:ae:83:a7:76:68:68:eb:50:54:fd:f0:00:
         ce:9c:11:36:47:00:17:9f:07:39:5f:49:57:08:44:5e:3b:f7:
         a0:b6:9f:f5:2c:e6:fa:52:fb:6d:fe:2c:72:80:52:ad:2c:a8:
         71:de:32:b7:90:a0:36:3b:cb:79:05:2a:ef:d7:e7:41:65:f6:
         65:f1:7b:36:2d:d2:ae:1c:3a:e2:01:eb:3e:b4:4e:b8:37:6c:
         74:58:d7:bb:02:9b:62:45:73:dd:4e:83:87:94:9f:0d:db:05:
         4d:78:54:1e:21:ad:25:7b:c1:1d:ec:45:d4:a1:8a:8c:dc:b1:
         92:f1:d9:0e:18:df:13:97:d7:ce:af:1f:e8:c6:51:69:02:f4:
         99:bd:af:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:45:20 2025 by rpki-client