Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e186ed6-2802-3f9e-90a4-bafc2e13312e.roa
File:                     0e186ed6-2802-3f9e-90a4-bafc2e13312e.roa (raw, json)
Hash identifier:          2jDZ64ZM3WGUlOK4zotBUrx1yaUSmZtGqD8mcRUsXf4=
Subject key identifier:   5E:ED:58:A2:91:B2:FD:DE:F5:9A:93:27:0D:D3:40:32:0A:BD:01:F6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA691F92DF655A4F9444240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e186ed6-2802-3f9e-90a4-bafc2e13312e.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     13367
IP address blocks:        98.61.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:91:f9:2d:f6:55:a4:f9:44:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=1c9e03a4-233a-4d1a-94b6-382dcfe9e61e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:25:50:7d:77:ea:65:83:f7:f7:7c:1c:04:1a:
                    1c:a4:c0:21:b1:68:8d:e0:b5:c1:6a:21:a4:60:20:
                    f3:47:a6:9f:a8:8a:71:39:cc:d6:62:b7:44:c4:47:
                    0f:b0:a8:b5:2b:3f:b1:75:f0:26:82:38:17:d1:ce:
                    18:a0:6c:02:f2:e3:88:e8:ed:56:98:bf:16:20:bc:
                    c2:c1:5f:c7:be:f1:8a:f4:a3:8c:ba:90:55:ad:6b:
                    8b:c0:fd:1a:cf:c3:2b:c0:40:7e:c7:e7:bc:c9:8c:
                    23:e9:29:34:a6:6f:7e:6e:94:7d:83:d3:7f:05:85:
                    99:6c:2d:a6:f2:91:a5:2f:78:d6:a9:8c:5b:92:e1:
                    a7:97:79:47:92:c1:18:d0:7d:78:90:d0:70:c5:70:
                    4e:06:0b:c3:da:f8:b5:da:72:5e:a0:69:4a:7e:aa:
                    58:31:d0:31:9a:b0:ba:56:4b:d5:c9:37:23:76:40:
                    18:90:4c:70:99:f0:3e:21:87:cd:99:93:e1:a2:03:
                    94:7a:c7:4d:9d:0c:b6:09:fb:0b:5f:32:8a:f7:a2:
                    c1:8b:a0:4c:6b:00:ea:85:0d:49:53:8c:b6:3a:f7:
                    6e:d9:7d:ba:8b:bc:ab:6b:50:77:6e:2e:81:5c:80:
                    05:32:10:6f:cd:1b:2c:06:91:48:58:8c:14:1f:c8:
                    05:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:ED:58:A2:91:B2:FD:DE:F5:9A:93:27:0D:D3:40:32:0A:BD:01:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e186ed6-2802-3f9e-90a4-bafc2e13312e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.61.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:dd:0a:b7:3e:4b:b2:71:32:d1:f1:27:dd:10:9a:ab:8e:59:
         02:f7:9a:2a:41:57:8f:e1:26:2c:0e:88:b9:89:3a:9d:8d:bb:
         d9:f0:d3:15:5b:07:6a:52:7f:fc:34:97:a8:9d:28:87:0e:a8:
         62:ef:f8:2b:04:43:e8:95:f0:49:b1:9a:ad:73:10:5c:5f:01:
         5a:08:1e:9c:41:5e:4f:3e:9b:cb:e3:b7:0d:c4:ef:3a:24:de:
         0c:13:c8:34:5f:f6:d9:f6:d5:f1:21:d4:06:de:35:41:93:ac:
         e7:f6:3f:0a:bd:15:f0:2b:b1:65:c4:76:fb:17:c4:05:86:40:
         cd:09:84:e9:e8:e4:98:24:11:02:70:dd:25:6c:0e:03:d4:9d:
         b9:5d:36:26:72:f7:a0:1a:4c:e1:53:e5:80:d3:20:9b:d7:a4:
         b3:f8:00:35:53:ca:71:8a:5c:0c:eb:55:fd:b8:8c:aa:ab:d1:
         64:a5:7d:ee:01:06:f5:aa:7d:00:d3:20:e6:04:83:a3:a2:35:
         cc:07:14:0e:b1:97:2d:7e:53:e8:36:e7:87:2b:62:73:cd:bb:
         3b:c9:cb:25:86:63:e1:6d:73:81:f0:1a:6b:d6:8c:db:60:16:
         38:c9:c9:4d:fd:90:47:e9:a1:fe:e9:e4:17:61:4c:a3:7a:89:
         3a:f7:a8:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9ppH5LfZVpPlEQkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
MWM5ZTAzYTQtMjMzYS00ZDFhLTk0YjYtMzgyZGNmZTllNjFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyVQfXfqZYP393wcBBocpMAhsWiN4LXBaiGk
YCDzR6afqIpxOczWYrdExEcPsKi1Kz+xdfAmgjgX0c4YoGwC8uOI6O1WmL8WILzC
wV/HvvGK9KOMupBVrWuLwP0az8MrwEB+x+e8yYwj6Sk0pm9+bpR9g9N/BYWZbC2m
8pGlL3jWqYxbkuGnl3lHksEY0H14kNBwxXBOBgvD2vi12nJeoGlKfqpYMdAxmrC6
VkvVyTcjdkAYkExwmfA+IYfNmZPhogOUesdNnQy2CfsLXzKK96LBi6BMawDqhQ1J
U4y2Ovdu2X26i7yra1B3bi6BXIAFMhBvzRssBpFIWIwUH8gFFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF7tWKKRsv3e9ZqTJw3TQDIKvQH2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGUxODZlZDYtMjgwMi0z
ZjllLTkwYTQtYmFmYzJlMTMzMTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYj3YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAM/dCrc+S7JxMtHxJ90QmquOWQL3mipBV4/hJiwOiLmJOp2Nu9nw0xVb
B2pSf/w0l6idKIcOqGLv+CsEQ+iV8Emxmq1zEFxfAVoIHpxBXk8+m8vjtw3E7zok
3gwTyDRf9tn21fEh1AbeNUGTrOf2Pwq9FfArsWXEdvsXxAWGQM0JhOno5JgkEQJw
3SVsDgPUnbldNiZy96AaTOFT5YDTIJvXpLP4ADVTynGKXAzrVf24jKqr0WSlfe4B
BvWqfQDTIOYEg6OiNcwHFA6xly1+U+g254crYnPNuzvJyyWGY+Ftc4HwGmvWjNtg
FjjJyU39kEfpof7p5BdhTKN6iTr3qJ4=
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:37:41 2025 by rpki-client