Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd91ea88-cbc7-3024-8bdc-3abb4c9fc1b3.roa
File:                     cd91ea88-cbc7-3024-8bdc-3abb4c9fc1b3.roa (raw, json)
Hash identifier:          0QLoWLUlI2dAuN0Qga1YhvTXTMbwJQECVfiIW/wv0TY=
Subject key identifier:   80:91:4F:91:91:27:A7:C0:8F:DA:C3:FF:48:6A:FE:55:93:7A:6E:EC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4326DD64711165EA557B140
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd91ea88-cbc7-3024-8bdc-3abb4c9fc1b3.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        98.195.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:6d:d6:47:11:16:5e:a5:57:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=bfca9feb-38fd-4454-a7d1-299bf2c6c320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:53:11:51:43:e8:11:c4:48:ac:6a:af:a6:45:
                    60:a0:a7:35:f3:18:d7:ed:99:af:42:19:49:27:a2:
                    6b:d3:e7:e9:f1:be:6c:f7:e4:75:f8:62:6b:c6:10:
                    f3:16:2c:73:fa:05:d5:4f:e7:fb:bf:04:7b:19:7a:
                    c0:1e:f1:be:8a:01:f2:8c:cc:59:f5:74:e4:6b:52:
                    81:dd:89:a4:bd:7f:1f:84:f7:14:7f:f8:64:b0:1e:
                    1c:9a:9f:65:dd:e8:eb:0f:0f:ad:08:ff:60:0c:89:
                    82:a7:35:ac:7f:af:76:ba:58:f3:b4:c8:8d:be:ce:
                    96:07:b7:cc:75:59:14:f2:9e:99:42:05:62:75:9e:
                    74:ec:fa:bf:19:66:0d:c0:49:d4:67:88:a6:d8:72:
                    d3:b3:60:eb:ec:87:08:bb:ad:2e:82:b8:d2:9c:05:
                    2f:9d:4e:12:39:31:3c:2c:fe:6b:7f:14:23:4a:81:
                    2e:c3:91:ff:76:5d:fa:77:31:75:70:29:4a:dd:e5:
                    a8:70:4e:dd:ec:0f:65:4d:32:69:8a:f4:dc:1d:99:
                    50:a5:57:00:e1:60:9b:be:b2:d8:5b:22:bf:5c:f7:
                    00:1c:58:4d:ca:3e:ba:95:90:fc:49:b8:4e:cc:67:
                    3c:08:2a:7a:d9:63:cc:6d:10:d8:bd:1d:be:1a:b1:
                    cd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:91:4F:91:91:27:A7:C0:8F:DA:C3:FF:48:6A:FE:55:93:7A:6E:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd91ea88-cbc7-3024-8bdc-3abb4c9fc1b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.195.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:46:f3:b8:f5:47:79:93:46:f0:ee:f2:03:6b:3b:ec:06:3f:
         5e:82:15:ea:59:e4:5e:1b:73:3e:b4:40:af:55:66:58:b6:66:
         30:3a:c7:94:3d:9d:25:12:99:0b:b9:70:bb:26:20:b3:30:ca:
         4c:fe:bb:28:cb:95:b2:e3:c5:ac:2e:ac:15:11:46:4e:e8:19:
         62:a3:a3:86:21:35:7b:b1:c6:2a:c4:ab:d0:f0:57:dc:c7:f1:
         b2:05:66:3c:78:a7:5e:eb:90:b2:16:6b:32:57:b1:0f:57:a4:
         3c:cd:99:66:29:63:e4:8a:f7:bd:76:f4:3f:ec:8e:24:8a:30:
         33:7c:9c:fd:0c:fb:6f:05:82:78:b0:3f:b3:67:81:76:dd:7d:
         9c:b5:68:9a:ef:f2:fd:10:9e:e7:3c:6f:6c:b6:0a:75:17:61:
         1d:51:f3:25:62:14:04:11:05:2f:21:9d:95:10:e3:52:2e:cb:
         fc:57:5f:d3:31:ae:8f:e1:a3:48:ea:d2:aa:2b:03:bc:8a:8e:
         f8:87:6a:c2:4c:8a:60:bd:54:e1:47:ab:55:89:ab:f2:b7:b5:
         60:c3:98:f3:0e:81:6e:44:35:40:a5:49:a9:eb:64:75:e6:4d:
         c1:4c:ff:e1:eb:45:53:ab:d6:bb:43:df:54:b1:aa:c0:be:63:
         c6:fe:10:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:11:32 2025 by rpki-client