Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3ed5ffc-40d6-3d11-a927-457c2ecf65d8.roa
File:                     f3ed5ffc-40d6-3d11-a927-457c2ecf65d8.roa (raw, json)
Hash identifier:          cQcTGD39KocD+gqp/v+mbR7HBC4jp7yCbZVlOVmJ3Xo=
Subject key identifier:   DB:55:19:A1:9B:EA:AE:82:14:12:23:EC:B1:86:73:9C:9C:13:E9:A8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AADE2D5D16227FF9F003C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3ed5ffc-40d6-3d11-a927-457c2ecf65d8.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        98.196.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:de:2d:5d:16:22:7f:f9:f0:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=d4c677d0-53f6-4bb3-8675-77b2ac5bce57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:50:8d:b2:7d:b5:2b:4a:51:f9:b0:43:2a:18:
                    10:30:60:d5:03:54:73:03:c6:f3:57:9d:e4:2d:82:
                    ce:ac:f9:9d:ff:a7:d6:32:e5:64:fc:ff:09:b8:ce:
                    82:e6:aa:00:b1:6c:18:e4:fd:b0:09:e8:47:fb:30:
                    c2:d6:71:ed:f0:51:cb:4c:d5:e2:42:67:dd:0b:ff:
                    09:2a:85:19:a3:05:d3:7b:49:3f:eb:83:6b:61:82:
                    58:e1:00:b5:b0:24:b2:d5:c2:ba:eb:96:e7:9e:f2:
                    40:ec:0b:ac:06:d1:c9:0d:4b:40:90:41:d8:94:5c:
                    1d:91:5b:d6:05:61:d5:c2:71:8f:8f:9f:fc:2a:40:
                    53:0d:3a:27:13:20:37:e8:ef:77:ae:db:10:eb:2c:
                    e6:c4:10:77:e6:aa:bf:64:00:57:23:f3:03:93:92:
                    63:a4:16:65:a9:5d:8c:41:34:c0:85:87:9c:3f:32:
                    0a:39:e6:e8:b0:7a:a5:fc:f5:4f:36:8f:ef:61:bb:
                    8b:26:b2:a1:c5:31:a1:1b:e3:da:33:1d:aa:74:12:
                    67:09:49:1f:8f:90:69:d6:4e:4b:06:6e:ca:4b:0e:
                    77:85:ec:b4:49:85:e6:cf:d0:68:69:55:25:c6:f5:
                    7b:49:e4:0a:06:e9:3a:6d:77:be:6e:c7:12:73:1b:
                    69:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:55:19:A1:9B:EA:AE:82:14:12:23:EC:B1:86:73:9C:9C:13:E9:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3ed5ffc-40d6-3d11-a927-457c2ecf65d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.196.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:9a:a9:ed:45:40:9d:7d:90:08:af:bb:14:ad:d2:a6:14:da:
         5f:f5:b7:de:d8:aa:8c:11:51:9d:49:89:7b:95:f5:79:ff:02:
         b0:ca:4b:f9:f0:a6:8c:ee:b2:08:39:58:7e:09:92:79:94:fc:
         ce:81:75:1b:2c:0a:ed:50:6c:01:fc:36:70:1d:64:4d:b4:be:
         38:81:13:de:51:62:98:8d:51:13:fd:88:ca:99:ad:19:51:00:
         41:9d:cd:cb:e8:ec:a2:70:a7:b4:db:8a:bd:ff:9e:ca:70:59:
         22:1d:3a:e5:30:ca:40:32:dc:a7:4d:b7:37:7b:2f:0d:1d:e9:
         df:2a:46:fd:e7:a2:1a:a6:16:bd:5c:2a:26:15:9a:a4:58:db:
         9c:9b:75:73:83:4e:8b:5a:f8:52:e4:6b:98:4d:64:0b:a3:e6:
         be:af:51:5d:24:d8:6e:60:bb:c4:80:f0:1b:8a:e9:24:4b:fa:
         08:22:3c:e4:ca:d7:4c:72:a3:60:ec:28:75:23:8f:30:ed:12:
         9d:27:b8:3b:fa:e9:57:02:f0:c8:61:9a:32:97:af:2c:2d:b0:
         89:89:14:e2:43:18:e2:55:81:f8:89:76:a9:b8:27:cd:53:32:
         af:28:05:e4:f7:da:95:da:68:17:25:38:a3:8d:a5:26:00:d2:
         c1:12:0a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 02:35:27 2025 by rpki-client