Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a351e04-41e4-3eec-8848-a42584ef6937.roa
File:                     9a351e04-41e4-3eec-8848-a42584ef6937.roa (raw, json)
Hash identifier:          /R7gJnPdiABoU68YYGzahydF524mfo/sfuqV+kyW85o=
Subject key identifier:   EF:01:88:4D:86:6B:7C:86:10:82:CB:B8:8B:C5:43:E6:7F:C2:0A:90
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EEE4A41518A571EFA48C60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a351e04-41e4-3eec-8848-a42584ef6937.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33662
IP address blocks:        98.197.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:e4:a4:15:18:a5:71:ef:a4:8c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=6bfc7d36-2af4-49c5-a43a-94eff1539d44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:92:9c:4b:e2:c9:60:52:01:fa:81:ed:b7:75:
                    80:01:f9:e4:7e:c5:10:7d:c5:8a:ab:ed:20:8f:eb:
                    7d:f4:b8:27:66:6b:4a:10:5d:11:cf:2b:5e:cf:52:
                    04:1f:e4:70:50:2f:cc:1f:bd:f9:17:9d:6c:a8:c4:
                    d7:fc:5b:c1:89:02:35:6b:88:31:55:d1:5f:29:68:
                    e6:0c:2e:07:92:3f:09:4c:47:ab:b8:b4:39:23:27:
                    c9:1c:d6:67:68:a9:10:32:1b:14:8f:de:23:a0:7a:
                    dd:1c:13:9d:e7:d9:e8:62:4f:56:0f:2a:1d:05:a4:
                    de:a0:76:96:f4:39:95:f3:db:34:67:4f:ae:9e:3a:
                    0a:ec:70:8f:88:68:9c:8f:3f:53:5f:97:d5:74:e5:
                    7d:0e:72:67:1c:52:2a:e2:5b:b8:89:0a:83:c3:87:
                    5e:97:ba:ee:31:57:b3:e0:bd:74:0f:63:91:df:2f:
                    e8:a6:cb:5d:a9:f9:95:8f:47:40:d7:8b:3b:1e:4e:
                    a9:6a:db:e6:71:ba:18:6b:35:b6:0f:91:45:a2:7c:
                    e8:07:2e:1a:f6:54:51:4a:d8:99:52:9d:ab:10:21:
                    4e:a1:d1:68:e3:8f:c6:58:10:65:8f:4c:e8:32:e6:
                    77:5f:23:ab:6b:41:d3:a0:71:cf:a2:ec:91:21:eb:
                    04:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:01:88:4D:86:6B:7C:86:10:82:CB:B8:8B:C5:43:E6:7F:C2:0A:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a351e04-41e4-3eec-8848-a42584ef6937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.197.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:51:4b:f4:ee:a7:e9:52:03:77:84:8f:2a:7c:26:19:70:58:
         9b:d8:da:c6:ad:d2:0f:0e:fc:91:b3:17:fd:83:7c:51:55:87:
         a0:b3:0b:27:89:7f:84:dc:64:35:b2:c2:cc:1a:18:62:9b:7a:
         e3:87:50:86:c8:6c:7e:cb:18:60:dc:29:d6:39:11:9b:07:fa:
         3d:bc:20:32:ec:65:99:21:43:37:09:81:b4:03:9b:c7:22:66:
         ef:99:3d:5f:6e:ba:37:6e:1f:1d:4f:43:d3:9b:b6:6b:01:d7:
         93:d0:4c:10:1b:5f:8f:99:d8:f7:26:fb:98:f5:e5:d3:4e:41:
         90:6b:5c:fa:63:9d:a1:59:83:6f:e3:7b:cc:ce:3b:56:ea:43:
         7f:2c:dd:96:2c:ea:87:0b:cc:10:dd:61:18:df:4e:ae:3a:2f:
         83:b1:84:53:9c:ca:b9:4c:f7:40:45:89:44:64:0c:d6:1f:80:
         d3:96:a8:c0:62:86:0d:3d:55:51:67:bc:c3:fa:3f:dc:64:df:
         41:c3:56:cc:fa:43:9e:9f:90:22:f6:2c:14:e2:f5:e8:60:d5:
         f8:7c:11:49:94:e9:bd:9b:0f:bf:a0:d3:ec:34:d9:3b:a3:96:
         82:a6:48:cd:a8:94:92:c3:11:26:9b:58:c2:87:fb:c0:29:49:
         73:8d:39:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07uSkFRilce+kjGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
NmJmYzdkMzYtMmFmNC00OWM1LWE0M2EtOTRlZmYxNTM5ZDQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+pKcS+LJYFIB+oHtt3WAAfnkfsUQfcWKq+0g
j+t99LgnZmtKEF0Rzytez1IEH+RwUC/MH735F51sqMTX/FvBiQI1a4gxVdFfKWjm
DC4Hkj8JTEeruLQ5IyfJHNZnaKkQMhsUj94joHrdHBOd59noYk9WDyodBaTeoHaW
9DmV89s0Z0+unjoK7HCPiGicjz9TX5fVdOV9DnJnHFIq4lu4iQqDw4del7ruMVez
4L10D2OR3y/opstdqfmVj0dA14s7Hk6patvmcboYazW2D5FFonzoBy4a9lRRStiZ
Up2rECFOodFo44/GWBBlj0zoMuZ3XyOra0HToHHPouyRIesEgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO8BiE2Ga3yGEILLuIvFQ+Z/wgqQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWEzNTFlMDQtNDFlNC0z
ZWVjLTg4NDgtYTQyNTg0ZWY2OTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsX+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADxRS/Tup+lSA3eEjyp8JhlwWJvY2sat0g8O/JGzF/2DfFFVh6CzCyeJ
f4TcZDWywswaGGKbeuOHUIbIbH7LGGDcKdY5EZsH+j28IDLsZZkhQzcJgbQDm8ci
Zu+ZPV9uujduHx1PQ9ObtmsB15PQTBAbX4+Z2Pcm+5j15dNOQZBrXPpjnaFZg2/j
e8zOO1bqQ38s3ZYs6ocLzBDdYRjfTq46L4OxhFOcyrlM90BFiURkDNYfgNOWqMBi
hg09VVFnvMP6P9xk30HDVsz6Q56fkCL2LBTi9ehg1fh8EUmU6b2bD7+g0+w02Tuj
loKmSM2olJLDESabWMKH+8ApSXONOcA=
-----END CERTIFICATE-----
Generated at Wed Aug 6 18:45:16 2025 by rpki-client