Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2506d58c-56be-3bde-b723-da874254b0c0.roa
File:                     2506d58c-56be-3bde-b723-da874254b0c0.roa (raw, json)
Hash identifier:          V6djUd+j4h7ByFU5RUMkrokDyTnu+mkFZk+ZgnVw6zY=
Subject key identifier:   2C:CE:5E:33:48:61:56:05:78:66:52:2D:8F:90:A8:F7:37:E1:4B:72
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EC7BA6CE41A6820D84F140
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2506d58c-56be-3bde-b723-da874254b0c0.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        98.229.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:7b:a6:ce:41:a6:82:0d:84:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=cfd18686-6c8a-4e60-bc13-e92b686bb90f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:20:91:fc:1a:c9:76:26:5f:07:a8:92:a0:c8:
                    8e:9e:7e:a2:d9:b8:7e:ea:36:f7:c2:a6:87:b8:9c:
                    37:1a:a6:7a:26:c0:2d:3f:28:a4:92:93:64:24:5d:
                    f3:7b:f3:ad:1f:68:4e:07:00:0e:50:ee:55:91:b7:
                    19:f8:89:53:30:04:a7:44:0d:24:ca:39:fa:a5:86:
                    56:84:85:72:69:14:2b:25:2c:d6:25:92:ed:13:22:
                    d6:f3:7b:14:e4:8c:c8:6c:68:50:11:a5:35:b1:97:
                    f1:b9:79:66:63:54:1e:07:fa:da:32:06:6d:53:fc:
                    13:32:5d:70:b3:eb:ed:71:01:d9:55:8e:5f:de:06:
                    e6:59:4e:ea:6d:14:38:f0:34:2b:01:40:d0:8d:1d:
                    a7:a4:50:4c:f3:40:42:3b:06:82:8c:df:74:95:bc:
                    b8:9b:0c:58:0d:5d:98:28:6b:4f:0a:98:d4:2f:95:
                    43:2a:ea:e8:c9:a1:b1:38:c6:be:7b:1b:6d:53:8a:
                    ac:e7:69:51:02:e2:9a:c7:62:1a:72:03:ed:2d:bc:
                    a4:60:9e:00:f5:a5:cd:cf:ad:60:ea:ea:00:c0:b7:
                    1a:75:f6:2e:b3:2a:11:22:dd:5a:3b:ae:8a:59:33:
                    05:b7:29:87:5c:66:0d:01:4a:b9:bd:d0:7d:ca:ef:
                    a2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CE:5E:33:48:61:56:05:78:66:52:2D:8F:90:A8:F7:37:E1:4B:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2506d58c-56be-3bde-b723-da874254b0c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.229.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:14:61:24:99:16:a1:82:a0:59:2f:ff:8f:3b:07:8b:5d:5c:
         ad:0c:18:a0:f1:c0:09:71:4c:cc:4d:d3:04:f4:0d:63:1c:43:
         f7:9d:2a:59:87:34:58:06:de:e1:19:ce:79:16:ef:2f:17:74:
         86:9a:13:54:48:da:b3:2f:ce:ee:93:0a:da:fd:e9:1f:a8:83:
         28:05:c3:15:85:2d:19:99:61:13:a8:ab:03:b0:0d:71:65:c1:
         a7:50:d1:f9:1b:7d:d3:f9:d1:d0:f5:46:30:c4:a8:a3:d7:60:
         4c:6c:d3:8a:6d:d7:7c:78:d3:82:cf:e4:72:84:22:2c:e5:c8:
         d7:1a:e7:29:27:e0:bc:7c:19:47:33:7b:48:14:b4:0a:0e:13:
         33:e6:6c:cf:19:9b:6e:aa:fe:4d:28:63:de:c4:16:48:97:32:
         3b:4d:2a:92:51:f7:28:31:22:ec:5a:44:24:6e:bd:22:fd:b3:
         5e:42:d4:1f:ea:5c:99:c6:b0:2d:bb:90:22:a3:fa:a6:42:84:
         21:46:f2:e2:f3:f2:6a:fc:64:51:77:1d:66:51:4f:8b:ea:38:
         6b:e0:1e:79:ea:4e:23:87:7d:3b:e7:d4:66:f2:9b:19:d9:68:
         a5:93:e5:67:59:3e:d1:8a:2e:62:0d:7c:b8:99:1a:a6:6b:b1:
         ef:60:0e:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07HumzkGmgg2E8UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
Y2ZkMTg2ODYtNmM4YS00ZTYwLWJjMTMtZTkyYjY4NmJiOTBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiCR/BrJdiZfB6iSoMiOnn6i2bh+6jb3wqaH
uJw3GqZ6JsAtPyikkpNkJF3ze/OtH2hOBwAOUO5VkbcZ+IlTMASnRA0kyjn6pYZW
hIVyaRQrJSzWJZLtEyLW83sU5IzIbGhQEaU1sZfxuXlmY1QeB/raMgZtU/wTMl1w
s+vtcQHZVY5f3gbmWU7qbRQ48DQrAUDQjR2npFBM80BCOwaCjN90lby4mwxYDV2Y
KGtPCpjUL5VDKuroyaGxOMa+exttU4qs52lRAuKax2IacgPtLbykYJ4A9aXNz61g
6uoAwLcadfYusyoRIt1aO66KWTMFtymHXGYNAUq5vdB9yu+iKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCzOXjNIYVYFeGZSLY+QqPc34UtyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjUwNmQ1OGMtNTZiZS0z
YmRlLWI3MjMtZGE4NzQyNTRiMGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYuXgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB8UYSSZFqGCoFkv/487B4tdXK0MGKDxwAlxTMxN0wT0DWMcQ/edKlmH
NFgG3uEZznkW7y8XdIaaE1RI2rMvzu6TCtr96R+ogygFwxWFLRmZYROoqwOwDXFl
wadQ0fkbfdP50dD1RjDEqKPXYExs04pt13x404LP5HKEIizlyNca5ykn4Lx8GUcz
e0gUtAoOEzPmbM8Zm26q/k0oY97EFkiXMjtNKpJR9ygxIuxaRCRuvSL9s15C1B/q
XJnGsC27kCKj+qZChCFG8uLz8mr8ZFF3HWZRT4vqOGvgHnnqTiOHfTvn1GbymxnZ
aKWT5WdZPtGKLmINfLiZGqZrse9gDhg=
-----END CERTIFICATE-----
Generated at Wed Aug 6 06:02:07 2025 by rpki-client