Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f794df6f-54d1-3a47-935c-49f6cab1ffcd.roa
File:                     f794df6f-54d1-3a47-935c-49f6cab1ffcd.roa (raw, json)
Hash identifier:          n8gojNZXtFrprz+DnbWfSdK0vWHT36FWLbWSxdCvp3w=
Subject key identifier:   F3:B7:E8:EC:33:D6:54:A2:4B:35:28:8E:2E:BD:39:99:5C:2F:B7:0F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AAE7441AD5FD326894E980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f794df6f-54d1-3a47-935c-49f6cab1ffcd.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        98.199.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:e7:44:1a:d5:fd:32:68:94:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=3260494d-c462-4f91-a7f3-2803cb30f4e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6f:d7:f2:e4:c9:6f:1b:44:36:dd:75:e9:38:
                    10:1c:ea:66:81:a5:cd:37:f3:69:2f:56:61:8e:ed:
                    77:da:76:cf:4a:fc:51:0b:1a:92:62:d2:5e:82:70:
                    30:24:04:33:92:02:ed:62:01:7e:65:ac:f7:2a:63:
                    83:12:dc:94:cb:ac:26:97:d2:2e:8e:d2:2d:dc:38:
                    17:ff:a3:b5:43:db:ea:a4:50:fc:42:17:49:95:b6:
                    c1:53:19:a3:2f:04:7f:e4:38:c9:30:51:c9:0b:60:
                    dd:3f:7a:e4:ee:ea:33:49:cd:57:8a:6f:ff:53:02:
                    40:8b:0c:db:3c:11:62:40:ad:2a:14:1c:53:d3:63:
                    55:64:50:34:a7:16:a1:03:64:77:de:e5:e9:c8:90:
                    4c:e1:f5:47:35:06:b7:a7:1a:ef:df:a9:24:99:02:
                    c7:33:98:b6:ea:59:0b:fc:59:c6:4d:4a:09:a3:6c:
                    3e:63:c6:97:d0:71:e6:38:ae:3b:72:28:ae:11:09:
                    48:5d:42:e8:10:aa:42:90:60:04:56:d4:87:60:27:
                    57:d0:f4:60:b9:74:de:40:0b:af:7e:ac:16:a8:0d:
                    a3:c7:01:5a:f9:17:a0:26:2e:b6:fe:a0:10:e0:06:
                    74:dd:01:c1:e8:7b:f2:88:56:3f:da:9a:42:d7:9d:
                    16:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B7:E8:EC:33:D6:54:A2:4B:35:28:8E:2E:BD:39:99:5C:2F:B7:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f794df6f-54d1-3a47-935c-49f6cab1ffcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.199.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:ef:cb:83:38:30:3e:4f:8f:98:21:5f:78:0b:e6:78:fa:20:
         97:36:09:49:a3:a2:f6:7b:62:c9:43:7c:37:65:e0:cd:05:7e:
         60:f5:ef:75:d6:21:76:37:5a:ee:d8:49:e5:55:78:6e:2e:c9:
         ef:be:f2:d6:8a:50:c3:48:49:9e:40:4f:10:e3:72:94:47:f6:
         b4:f8:4d:15:9b:df:38:3e:be:db:a3:25:f2:13:50:a9:cf:1c:
         fd:d3:e1:5e:44:ab:fd:a9:0c:91:13:2f:94:ea:fd:ea:bb:0b:
         39:11:ad:f1:ad:37:40:19:c4:81:3b:6c:10:a9:85:c8:62:4f:
         13:0a:4f:9a:f2:4e:6c:67:eb:fd:cc:b4:d8:83:43:f2:c8:99:
         95:b5:50:49:75:af:8a:67:6b:c8:28:52:31:97:d8:a8:66:bf:
         05:27:0c:03:8f:ee:e2:a4:6c:43:46:fa:b8:5d:8b:8c:ea:bc:
         cb:f8:36:f4:5a:9f:29:1b:17:57:ad:94:81:01:8a:71:d8:7e:
         07:60:a4:46:bc:15:db:7b:61:ad:0a:4f:cb:41:44:41:49:ae:
         b4:33:f2:46:a1:44:e3:9a:64:16:55:3a:9d:7b:d7:42:74:4b:
         68:70:48:0d:5c:f7:7e:81:e3:87:65:0d:9c:22:64:1f:cb:93:
         9b:8c:49:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:26:08 2025 by rpki-client