Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52336168-32e6-36ce-9a82-9fec28702b87.roa
File:                     52336168-32e6-36ce-9a82-9fec28702b87.roa (raw, json)
Hash identifier:          l+hp2tqPwj+JoWY3MD5+QV421uqjANtGUpFREu4scic=
Subject key identifier:   FD:F0:1D:19:50:F2:F2:2B:1F:44:CE:ED:38:FC:B0:A3:CC:84:C3:BD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584992948801F7BE14DF1A613E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52336168-32e6-36ce-9a82-9fec28702b87.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     33491
IP address blocks:        98.46.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:88:01:f7:be:14:df:1a:61:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=c8fc83e3-954f-403e-b906-901d2d6e12e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ba:9c:a6:47:20:94:c2:1e:cb:fe:b9:8a:c1:
                    3b:9a:16:d6:7a:22:43:eb:3f:fb:60:39:4f:45:61:
                    18:5c:fb:8b:06:ff:74:00:7f:58:93:82:0d:7d:52:
                    60:e0:85:4f:ac:ef:78:c0:61:9f:52:eb:2e:c3:a6:
                    0f:05:76:c8:4c:8a:43:18:1f:9d:22:4d:41:0e:6b:
                    52:f9:f9:49:74:29:6f:10:ba:2a:60:8c:f6:6e:dd:
                    d8:c5:17:4d:33:a3:15:30:d3:8d:b3:d8:cc:cb:57:
                    2c:eb:ec:fd:a5:9e:17:95:e5:a9:a2:64:5b:ab:81:
                    c0:67:a7:47:dd:03:ed:ef:e4:5a:29:b5:2d:ec:fa:
                    a8:c8:ea:24:b1:61:ef:83:b1:35:30:56:22:80:d6:
                    d6:c0:34:70:d9:0d:7a:03:1d:34:37:1e:14:9a:21:
                    56:4c:b6:b2:d7:e1:22:e0:90:8e:ae:d9:fc:57:2f:
                    d5:4d:01:8b:56:86:f0:76:46:d6:82:6a:d6:93:6e:
                    3f:71:f3:eb:c2:90:f2:70:08:54:ae:2e:2b:b8:07:
                    9a:a3:82:b4:53:84:c8:b4:f8:95:b5:1f:ca:84:20:
                    eb:ed:49:9a:12:7e:5f:55:d1:3b:97:a9:e4:11:f8:
                    34:0f:c2:54:bb:ea:ef:1c:0f:73:9b:58:34:8d:6e:
                    11:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F0:1D:19:50:F2:F2:2B:1F:44:CE:ED:38:FC:B0:A3:CC:84:C3:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52336168-32e6-36ce-9a82-9fec28702b87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.46.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:c7:a1:2a:8f:72:4a:ae:ae:31:b0:94:64:6e:b8:aa:94:c6:
         19:1a:5c:f2:60:a9:44:ae:03:e2:65:ce:02:1a:8c:6e:3e:53:
         27:05:4e:c6:c8:9f:af:f8:ad:47:58:8d:a6:43:4e:f3:16:43:
         65:86:24:68:8d:bb:5d:b3:79:66:c4:98:7e:ce:f4:8e:38:44:
         7a:75:df:c2:af:a4:ac:63:1d:05:f7:f0:51:d1:03:64:36:9f:
         39:05:da:2f:2e:de:77:2f:7d:64:a1:d9:30:df:cd:31:4c:42:
         6b:30:ee:b7:d3:d0:a5:cd:58:12:bb:67:5f:47:ff:2b:7d:3b:
         4f:c8:d0:7b:bf:58:83:f3:6a:02:8c:01:58:df:80:82:4c:0b:
         5b:61:d7:fa:25:5d:f9:ee:00:ae:27:6c:6f:f8:7d:ac:05:94:
         4e:7a:96:11:95:01:20:28:61:6b:dd:56:89:62:13:ec:19:ff:
         12:14:dc:6b:a3:cb:e6:81:37:17:6c:75:5f:db:5c:22:ed:2f:
         82:40:18:e2:d2:79:96:27:d4:8a:f3:06:17:69:ef:40:3d:a7:
         38:a1:fa:c6:0e:08:f2:3a:24:d2:71:44:c6:0b:09:e4:09:53:
         07:6e:a4:8d:30:5a:09:f5:8a:85:0c:3a:17:2c:c2:86:e1:d5:
         49:0b:a2:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlIgB974U3xphPoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk
YzhmYzgzZTMtOTU0Zi00MDNlLWI5MDYtOTAxZDJkNmUxMmUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLqcpkcglMIey/65isE7mhbWeiJD6z/7YDlP
RWEYXPuLBv90AH9Yk4INfVJg4IVPrO94wGGfUusuw6YPBXbITIpDGB+dIk1BDmtS
+flJdClvELoqYIz2bt3YxRdNM6MVMNONs9jMy1cs6+z9pZ4XleWpomRbq4HAZ6dH
3QPt7+RaKbUt7PqoyOoksWHvg7E1MFYigNbWwDRw2Q16Ax00Nx4UmiFWTLay1+Ei
4JCOrtn8Vy/VTQGLVobwdkbWgmrWk24/cfPrwpDycAhUri4ruAeao4K0U4TItPiV
tR/KhCDr7UmaEn5fVdE7l6nkEfg0D8JUu+rvHA9zm1g0jW4RlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP3wHRlQ8vIrH0TO7Tj8sKPMhMO9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTIzMzYxNjgtMzJlNi0z
NmNlLTlhODItOWZlYzI4NzAyYjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYi6pMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIHHoSqPckqurjGwlGRuuKqUxhkaXPJgqUSuA+JlzgIajG4+UycFTsbI
n6/4rUdYjaZDTvMWQ2WGJGiNu12zeWbEmH7O9I44RHp138KvpKxjHQX38FHRA2Q2
nzkF2i8u3ncvfWSh2TDfzTFMQmsw7rfT0KXNWBK7Z19H/yt9O0/I0Hu/WIPzagKM
AVjfgIJMC1th1/olXfnuAK4nbG/4fawFlE56lhGVASAoYWvdVoliE+wZ/xIU3Guj
y+aBNxdsdV/bXCLtL4JAGOLSeZYn1IrzBhdp70A9pzih+sYOCPI6JNJxRMYLCeQJ
UwdupI0wWgn1ioUMOhcswobh1UkLosM=
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:53:00 2025 by rpki-client