Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/d0b8d282-ccf0-3eac-901d-cf61401b6161.roa
File:                     d0b8d282-ccf0-3eac-901d-cf61401b6161.roa (raw, json)
Hash identifier:          RUvdo+fI3Jiofw5Vm13OSJ0BKhSta5I0M4mZfncKBgU=
Subject key identifier:   13:E2:78:F3:C3:2F:95:E5:6D:39:62:11:24:AC:FD:58:E6:68:82:E4
Certificate issuer:       /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial:       010D0C9F4328584AE89126DD96AE92C532295980
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/d0b8d282-ccf0-3eac-901d-cf61401b6161.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     14618
IP address blocks:        98.97.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:26:dd:96:ae:92:c5:32:29:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=e0e91e20-b163-4506-836f-7d9688621777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:78:64:57:98:07:bc:6d:1d:5a:23:c4:23:aa:
                    46:62:6f:45:c1:9c:87:0b:6f:51:0c:61:28:75:9a:
                    da:df:7d:ae:a0:e7:49:45:16:bc:1c:58:c3:9f:6f:
                    d4:7a:37:d1:67:47:0d:14:07:6b:6c:7d:e5:7d:16:
                    ca:86:59:8b:9c:e0:27:78:9c:9f:75:17:82:cc:83:
                    65:c2:ac:a4:50:57:a9:b5:7e:0b:e7:1e:1d:fa:9f:
                    ac:d4:a4:87:f4:44:61:db:49:96:39:17:f3:6b:6c:
                    bc:78:25:c3:db:4a:38:9e:78:bf:0f:c3:39:45:4c:
                    d1:35:98:bd:04:f8:0a:36:b8:cd:0f:41:fc:37:85:
                    d2:ef:24:21:b3:9e:93:4a:d2:2a:d6:cd:ee:ef:96:
                    93:f8:5b:99:21:a1:2e:36:3d:9f:7a:87:f8:39:63:
                    ce:2d:12:f4:cf:75:39:6b:ed:ea:17:a5:da:af:f6:
                    59:12:f0:23:c6:76:64:e8:b2:05:55:f3:2d:5d:61:
                    fa:78:90:3c:e1:bf:f1:64:c6:bf:2d:66:79:8f:71:
                    54:73:d0:c7:12:c8:84:29:06:86:b4:69:c1:96:c0:
                    97:0a:a3:d7:15:8c:2a:6f:33:9f:a8:80:d3:7c:96:
                    0f:1c:e9:88:bc:49:da:bf:ca:0d:b2:1f:7c:df:79:
                    5d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E2:78:F3:C3:2F:95:E5:6D:39:62:11:24:AC:FD:58:E6:68:82:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/d0b8d282-ccf0-3eac-901d-cf61401b6161.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl

            X509v3 Authority Key Identifier:
                keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.97.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:86:98:52:7d:2e:06:72:57:56:6b:6f:44:67:ec:3f:12:43:
         50:f3:bd:15:e3:05:ce:d3:8d:0a:33:fa:62:c6:a4:45:93:77:
         0b:e4:20:f8:b7:5a:51:28:57:eb:1f:c4:e8:fb:12:53:e4:6b:
         7e:46:4a:6e:22:50:e8:ae:93:04:52:07:15:4b:9d:60:97:14:
         37:6b:92:b1:e5:34:73:19:06:1c:fc:9a:ed:4e:6c:38:a1:f0:
         55:27:63:fc:7c:23:13:5b:5c:db:bf:3a:c5:80:62:5a:94:4e:
         8a:da:97:7a:a1:82:62:f8:f4:48:6b:be:4d:07:9e:78:7a:f6:
         72:3d:86:f7:5a:1f:7e:63:6e:93:96:9a:3b:53:7d:66:e2:b9:
         93:db:b9:94:b9:54:00:a3:20:c4:13:a2:2b:20:dd:bd:dc:fc:
         32:b3:6a:b2:31:e6:1c:00:db:92:b7:bf:a9:d6:b4:3d:36:80:
         79:b7:96:d4:d9:83:f0:fe:8f:f8:cf:2b:62:23:40:4b:0c:53:
         14:7f:00:98:b9:b6:d3:34:bc:a1:54:f9:c0:fc:d8:5a:29:45:
         0b:a9:1f:c6:e2:bd:fb:4d:13:38:75:15:15:74:be:5f:09:45:
         1b:fb:7b:29:7e:78:74:7a:7c:59:fa:74:5b:49:6e:c8:ff:f9:
         6c:fa:fc:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 18:58:43 2025 by rpki-client