Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f53d3b6c-bbb7-368c-98cd-23baf6025738.roa
File:                     f53d3b6c-bbb7-368c-98cd-23baf6025738.roa (raw, json)
Hash identifier:          zQdxN2TOsQV0fe423Das7oBGeWjPVU7H6oMU7lA2GYw=
Subject key identifier:   18:0E:F9:B2:63:B9:AD:6C:19:5B:22:AF:FE:A1:D4:5E:E7:64:EB:BE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EBC9E0E18C952CB4C20B40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f53d3b6c-bbb7-368c-98cd-23baf6025738.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33490
IP address blocks:        98.246.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:c9:e0:e1:8c:95:2c:b4:c2:0b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=34571243-a51d-4e37-9bcf-487b84c30075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:84:9f:e3:00:ba:03:8a:02:75:ca:a7:77:90:
                    ee:84:54:77:bd:8d:bf:d5:b6:87:b9:2e:a8:96:d7:
                    a6:89:04:54:52:4e:c0:65:7e:73:ad:4b:fe:37:74:
                    2d:c2:34:61:45:b6:10:d1:bf:28:40:e9:f3:9b:0d:
                    d7:0f:f1:46:a6:85:49:4d:c9:9d:4f:19:5d:99:a5:
                    cf:a8:49:b8:96:6d:6a:8b:e9:9a:03:37:af:b2:d6:
                    92:b0:99:e2:a0:bd:41:e8:52:44:40:da:25:9f:4c:
                    d4:77:60:3e:da:71:cb:f6:86:0a:d0:00:f2:11:5a:
                    f1:af:d6:eb:d8:a8:d2:d1:8a:bf:20:de:6d:5f:e8:
                    30:b7:bb:e2:61:be:d1:a9:64:32:1a:36:c0:11:89:
                    f1:f5:7e:6f:52:67:82:4c:33:22:d7:e4:5c:b1:94:
                    e4:af:4e:b5:c3:f8:d0:99:dc:81:d1:5e:c2:f7:3a:
                    eb:86:0f:2b:af:5c:70:db:f9:bf:cb:01:fb:a9:f0:
                    01:91:5b:39:39:da:40:22:4c:6c:bd:32:e3:09:50:
                    0a:21:71:e6:48:c3:81:f6:14:54:bd:e1:a7:f5:83:
                    98:3d:57:cc:68:07:00:b1:22:dc:22:cc:31:de:52:
                    cc:19:69:44:94:ed:2b:02:8f:ef:cc:b9:16:5e:a7:
                    7e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0E:F9:B2:63:B9:AD:6C:19:5B:22:AF:FE:A1:D4:5E:E7:64:EB:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f53d3b6c-bbb7-368c-98cd-23baf6025738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.246.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:7a:3e:1e:69:5f:93:fc:07:7a:67:4e:a2:d9:4b:d5:91:eb:
         7f:dd:10:a5:11:83:c5:83:3f:5c:ee:fa:fe:78:b7:7a:83:cf:
         c7:9a:82:c9:72:82:16:38:70:3a:7d:79:4a:29:cb:01:67:0b:
         6c:34:cf:5c:5a:ca:dc:52:ed:a4:62:06:f1:5e:0c:6c:70:49:
         73:6c:12:44:bc:aa:01:a2:0d:70:29:13:81:d7:20:c0:27:69:
         8f:08:8f:87:da:50:7f:a6:32:8e:e1:96:e2:84:1b:3a:f7:71:
         48:cb:fb:54:73:51:7b:4c:f8:64:9b:00:6d:4d:6d:2e:69:ce:
         c9:f1:ec:b4:4e:dd:fa:3a:a7:b7:49:bd:ca:5c:c4:47:af:f6:
         a4:e6:af:7f:5e:da:bd:75:bd:2b:6d:e1:47:53:c5:24:a2:ed:
         7d:a8:00:24:09:f0:c8:59:39:af:47:1a:d9:37:3a:3c:b3:f5:
         e8:dd:e2:b4:f8:e0:88:d6:cf:40:5e:ef:17:a7:79:7f:dc:1e:
         71:77:f4:02:27:a4:21:93:ed:0d:4c:df:3f:68:bc:39:62:e7:
         81:00:ba:8b:68:d1:7a:99:fe:a1:a1:bc:35:04:74:a7:f1:04:
         a1:53:a6:1a:9f:08:09:42:4e:ca:a2:99:2b:a4:ed:c0:3f:93:
         72:85:77:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq068ng4YyVLLTCC0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
MzQ1NzEyNDMtYTUxZC00ZTM3LTliY2YtNDg3Yjg0YzMwMDc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoSf4wC6A4oCdcqnd5DuhFR3vY2/1baHuS6o
ltemiQRUUk7AZX5zrUv+N3QtwjRhRbYQ0b8oQOnzmw3XD/FGpoVJTcmdTxldmaXP
qEm4lm1qi+maAzevstaSsJnioL1B6FJEQNoln0zUd2A+2nHL9oYK0ADyEVrxr9br
2KjS0Yq/IN5tX+gwt7viYb7RqWQyGjbAEYnx9X5vUmeCTDMi1+RcsZTkr061w/jQ
mdyB0V7C9zrrhg8rr1xw2/m/ywH7qfABkVs5OdpAIkxsvTLjCVAKIXHmSMOB9hRU
veGn9YOYPVfMaAcAsSLcIswx3lLMGWlElO0rAo/vzLkWXqd+WQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBgO+bJjua1sGVsir/6h1F7nZOu+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjUzZDNiNmMtYmJiNy0z
NjhjLTk4Y2QtMjNiYWY2MDI1NzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYvYEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ96Ph5pX5P8B3pnTqLZS9WR63/dEKURg8WDP1zu+v54t3qDz8eagsly
ghY4cDp9eUopywFnC2w0z1xaytxS7aRiBvFeDGxwSXNsEkS8qgGiDXApE4HXIMAn
aY8Ij4faUH+mMo7hluKEGzr3cUjL+1RzUXtM+GSbAG1NbS5pzsnx7LRO3fo6p7dJ
vcpcxEev9qTmr39e2r11vStt4UdTxSSi7X2oACQJ8MhZOa9HGtk3Ojyz9ejd4rT4
4IjWz0Be7xeneX/cHnF39AInpCGT7Q1M3z9ovDli54EAuoto0XqZ/qGhvDUEdKfx
BKFTphqfCAlCTsqimSuk7cA/k3KFd/I=
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:04:01 2025 by rpki-client