Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/ed434245-1d95-3e5b-b4de-d39e97f8557a.roa
File:                     ed434245-1d95-3e5b-b4de-d39e97f8557a.roa (raw, json)
Hash identifier:          FHQqlCjtd8+CwPoizQs7ZhIlxfC1A3TiUwHb3vm7vlE=
Subject key identifier:   91:C2:AC:7B:74:89:C7:88:B7:83:6A:7C:AC:1C:DE:7D:EF:55:37:31
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F4328584BB45D0F61A06EF61EAC235480
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/ed434245-1d95-3e5b-b4de-d39e97f8557a.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     21803
IP address blocks:        98.124.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:0f:61:a0:6e:f6:1e:ac:23:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=e79c2733-f5a6-4087-b87c-87b41b3c3e52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:42:5e:e0:5c:f1:34:9b:7c:cf:fa:1c:09:37:
                    97:8d:be:4a:b9:ab:8f:e1:51:ce:c8:66:b4:b3:51:
                    9e:0d:60:ab:a2:53:08:ca:f7:a0:84:78:fe:41:ca:
                    de:a5:81:cb:6e:a1:c8:8d:9d:fb:7b:ec:d9:37:ea:
                    e1:ee:5d:92:3d:37:80:73:71:c2:e4:f9:00:3c:fb:
                    a5:5a:af:87:75:0c:46:ca:02:e2:b2:db:24:7a:35:
                    8f:54:26:d1:8a:d0:f9:21:62:f2:11:6f:3d:43:49:
                    37:6f:86:ef:38:18:e5:71:55:e0:ac:a6:5a:4d:a6:
                    cc:2c:6e:ad:48:47:4d:83:40:3a:7d:3f:58:dd:65:
                    1f:54:e1:5c:fe:4e:f0:40:bf:71:05:53:14:88:fa:
                    6f:a6:3e:25:ef:24:12:04:d9:1c:0f:29:b4:e7:d4:
                    e4:de:94:67:db:f3:65:99:a7:e7:8d:38:95:3b:ec:
                    3b:b8:ec:fa:4a:e9:ed:69:3f:1a:a8:eb:5b:ee:0c:
                    b5:4e:29:61:e8:88:a2:16:82:b1:07:92:b3:c9:df:
                    ed:d5:e2:9f:d1:00:8f:82:8e:e0:ab:d1:2f:b6:1c:
                    dd:d8:6a:17:48:6b:47:8a:f5:75:c3:1d:9b:18:7e:
                    52:09:6f:a2:c6:dc:66:1b:21:0e:3f:73:b5:7c:10:
                    a4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C2:AC:7B:74:89:C7:88:B7:83:6A:7C:AC:1C:DE:7D:EF:55:37:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/ed434245-1d95-3e5b-b4de-d39e97f8557a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.124.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:98:c8:8e:5f:95:7c:e1:61:a6:71:25:78:36:80:2f:e9:fb:
         22:4b:e3:e6:08:ac:9e:e4:57:ea:58:e3:f6:ef:32:e5:3d:d8:
         93:ad:88:cb:9f:b3:43:81:e8:23:26:c0:94:48:1a:62:de:d1:
         0f:eb:63:b4:27:f5:68:56:cf:3c:91:7d:5f:6f:44:11:26:6c:
         0c:6e:a4:02:79:e6:87:e9:f0:00:dd:21:4c:49:26:ed:f7:a4:
         bf:24:74:b0:df:43:3c:5a:54:ca:c5:b6:c8:71:60:9f:4b:aa:
         fd:4d:8e:aa:74:5b:81:81:b7:ab:d8:d6:bd:a2:9a:80:93:d4:
         e8:c4:03:72:03:ba:b9:c3:c0:cc:98:b4:48:fc:ed:53:83:52:
         8b:40:ea:45:56:69:ef:36:e7:7a:66:4f:5f:2f:ff:06:28:45:
         3f:bb:24:28:f9:16:67:fb:37:72:c5:5a:0a:be:f3:35:a6:4b:
         85:3f:b2:a9:91:5d:c1:ab:28:73:7c:5a:97:83:cd:58:67:bb:
         0f:dc:22:53:76:38:04:8c:d8:88:82:32:4c:4f:34:1d:b3:76:
         3b:70:be:20:e7:d4:9a:66:96:d3:4c:26:a1:e7:94:3b:5f:db:
         03:89:a4:17:9d:46:ab:53:ec:1c:d7:0d:e7:d5:2a:02:c6:34:
         32:62:d1:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XQ9hoG72HqwjVIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA2Y2JjOTEtY2ZlOS00ZDE1LThhMTMtZTNkODI4YzA0
NjljMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk
ZTc5YzI3MzMtZjVhNi00MDg3LWI4N2MtODdiNDFiM2MzZTUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkJe4FzxNJt8z/ocCTeXjb5KuauP4VHOyGa0
s1GeDWCrolMIyveghHj+QcrepYHLbqHIjZ37e+zZN+rh7l2SPTeAc3HC5PkAPPul
Wq+HdQxGygListskejWPVCbRitD5IWLyEW89Q0k3b4bvOBjlcVXgrKZaTabMLG6t
SEdNg0A6fT9Y3WUfVOFc/k7wQL9xBVMUiPpvpj4l7yQSBNkcDym059Tk3pRn2/Nl
mafnjTiVO+w7uOz6SuntaT8aqOtb7gy1Tilh6IiiFoKxB5Kzyd/t1eKf0QCPgo7g
q9Evthzd2GoXSGtHivV1wx2bGH5SCW+ixtxmGyEOP3O1fBCk2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJHCrHt0iceIt4NqfKwc3n3vVTcxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZj
YmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4MjhjMDQ2OWMvZWQ0MzQyNDUtMWQ5NS0z
ZTViLWI0ZGUtZDM5ZTk3Zjg1NTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA2Y2JjOTEtY2ZlOS00ZDE1LThh
MTMtZTNkODI4YzA0NjljLzkwNmNiYzkxLWNmZTktNGQxNS04YTEzLWUzZDgyOGMw
NDY5Yy5jcmwwHwYDVR0jBBgwFoAUtM26EqXmV2vBKngoUh64xcKEYhUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZjYmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4
MjhjMDQ2OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYnzQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKiYyI5flXzhYaZxJXg2gC/p+yJL4+YIrJ7kV+pY4/bvMuU92JOtiMuf
s0OB6CMmwJRIGmLe0Q/rY7Qn9WhWzzyRfV9vRBEmbAxupAJ55ofp8ADdIUxJJu33
pL8kdLDfQzxaVMrFtshxYJ9Lqv1Njqp0W4GBt6vY1r2imoCT1OjEA3IDurnDwMyY
tEj87VODUotA6kVWae8253pmT18v/wYoRT+7JCj5Fmf7N3LFWgq+8zWmS4U/sqmR
XcGrKHN8WpeDzVhnuw/cIlN2OASM2IiCMkxPNB2zdjtwviDn1JpmltNMJqHnlDtf
2wOJpBedRqtT7BzXDefVKgLGNDJi0fc=
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:10:14 2025 by rpki-client