Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/00df72f9-ad3b-38ac-b1a0-9cbbbac6180d.roa
File:                     00df72f9-ad3b-38ac-b1a0-9cbbbac6180d.roa (raw, json)
Hash identifier:          4h2Vt/aMYsXAQ/9NvVaiVb/MOF9ePvN735sdrpCTxi8=
Subject key identifier:   1A:7A:D7:12:5E:ED:77:4E:F9:5F:1C:86:47:F8:AA:15:32:BE:43:A3
Certificate issuer:       /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial:       010D0C9F432858496B7ED736CBE72FF4C3550380
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/00df72f9-ad3b-38ac-b1a0-9cbbbac6180d.roa
Signing time:             Sat 05 Apr 2025 01:00:47 +0000
ROA not before:           Sat 05 Apr 2025 01:00:47 +0000
ROA not after:            Fri 04 Jul 2025 01:00:47 +0000
asID:                     59241
IP address blocks:        162.98.40.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6b:7e:d7:36:cb:e7:2f:f4:c3:55:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
        Validity
            Not Before: Apr  5 01:00:47 2025 GMT
            Not After : Jul  4 01:00:47 2025 GMT
        Subject: CN=95f8290c-2e0b-4507-a1ef-4d85df5ff24e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a6:d2:85:9a:a7:25:74:69:9c:ca:ae:1e:47:
                    f2:87:69:20:d1:12:9e:14:e1:c2:85:4f:2c:92:50:
                    d7:18:af:15:ca:fe:78:95:f2:e2:44:4d:2d:4a:97:
                    06:86:4d:bd:f6:d7:7f:ae:1d:8e:fe:fd:58:e7:93:
                    6f:c5:0d:c3:0c:8a:56:95:a3:f0:40:11:d2:ce:64:
                    ca:dc:ed:74:b4:0d:e6:77:34:0c:d9:63:6b:28:d4:
                    f0:b6:b3:a6:96:23:dd:92:28:8e:b7:ee:e6:b6:68:
                    0b:2f:1a:8a:69:df:83:96:3b:28:90:cb:0b:47:d8:
                    88:e1:ad:e7:e6:04:05:12:f8:70:84:d7:48:57:0f:
                    e5:19:4f:c6:91:ce:8a:c8:cb:4e:18:a6:01:8b:e1:
                    d6:60:de:13:a9:65:67:97:b9:7a:ea:46:c4:67:bd:
                    43:f7:b6:4f:16:7b:cc:a0:5f:26:ff:b1:5b:0b:04:
                    a1:4f:cd:8e:52:23:31:25:d5:25:92:1a:ea:9d:30:
                    12:60:0e:bd:14:c6:20:93:fc:8e:d2:f4:d0:08:9d:
                    dc:2b:be:ee:42:80:32:93:6f:5b:4b:db:62:a8:82:
                    e7:24:d2:9c:08:c8:73:fc:42:ba:b7:69:60:8d:a5:
                    77:8d:8c:fb:a1:0b:a6:a5:5c:80:db:f5:50:ed:72:
                    2e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7A:D7:12:5E:ED:77:4E:F9:5F:1C:86:47:F8:AA:15:32:BE:43:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/00df72f9-ad3b-38ac-b1a0-9cbbbac6180d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl

            X509v3 Authority Key Identifier:
                keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.98.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:80:f4:ca:c1:3f:f0:08:35:de:71:80:10:fc:2a:0f:98:34:
         a6:6f:6c:6c:69:a0:0b:be:7e:b0:98:01:9f:f2:d1:64:50:9a:
         2c:25:fc:3b:fc:76:c7:2e:06:f7:23:78:46:fc:e0:b6:af:48:
         c0:ae:3b:94:61:25:0c:c3:29:af:92:3a:b6:59:66:ca:40:23:
         d2:ea:27:be:87:47:5c:b1:88:43:70:71:3d:d7:c0:99:c7:e0:
         01:ba:2b:a7:25:b4:07:23:20:31:28:e4:90:02:96:f0:7a:7c:
         ea:6d:19:e5:cb:e4:c0:c2:68:8a:ad:c7:c5:fb:a3:c3:1a:e0:
         b5:3c:68:8d:c4:d8:cc:20:07:1a:ea:d0:c6:e8:dd:80:c8:bf:
         26:bb:6c:53:82:26:a2:ee:1f:7f:71:ff:d8:1d:1d:02:0d:ca:
         02:9b:33:b6:67:dc:ee:45:8e:5b:6a:4b:49:e9:25:e8:92:1c:
         28:73:73:b4:dc:0e:27:f0:21:0c:7d:f1:5a:c9:04:59:02:26:
         c7:dc:a1:b9:d6:07:7e:76:6b:c2:61:d3:c1:01:25:bf:f9:bf:
         35:b2:a7:22:7a:3f:91:a1:45:d3:6a:4d:fa:59:b9:97:87:a4:
         92:b8:f6:ed:70:3d:3e:ea:9b:ac:c7:73:79:32:78:65:16:e3:
         bf:9b:a5:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElrftc2y+cv9MNVA4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4
MGJlMB4XDTI1MDQwNTAxMDA0N1oXDTI1MDcwNDAxMDA0N1owLzEtMCsGA1UEAxMk
OTVmODI5MGMtMmUwYi00NTA3LWExZWYtNGQ4NWRmNWZmMjRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6bShZqnJXRpnMquHkfyh2kg0RKeFOHChU8s
klDXGK8Vyv54lfLiRE0tSpcGhk299td/rh2O/v1Y55NvxQ3DDIpWlaPwQBHSzmTK
3O10tA3mdzQM2WNrKNTwtrOmliPdkiiOt+7mtmgLLxqKad+DljsokMsLR9iI4a3n
5gQFEvhwhNdIVw/lGU/Gkc6KyMtOGKYBi+HWYN4TqWVnl7l66kbEZ71D97ZPFnvM
oF8m/7FbCwShT82OUiMxJdUlkhrqnTASYA69FMYgk/yO0vTQCJ3cK77uQoAyk29b
S9tiqILnJNKcCMhz/EK6t2lgjaV3jYz7oQumpVyA2/VQ7XIuNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBp61xJe7XdO+V8chkf4qhUyvkOjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm
NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvMDBkZjcyZjktYWQzYi0z
OGFjLWIxYTAtOWNiYmJhYzYxODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk
ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy
ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2
YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBomIoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF6A9MrBP/AINd5xgBD8Kg+YNKZvbGxpoAu+frCYAZ/y0WRQmiwl/Dv8
dscuBvcjeEb84LavSMCuO5RhJQzDKa+SOrZZZspAI9LqJ76HR1yxiENwcT3XwJnH
4AG6K6cltAcjIDEo5JAClvB6fOptGeXL5MDCaIqtx8X7o8Ma4LU8aI3E2MwgBxrq
0Mbo3YDIvya7bFOCJqLuH39x/9gdHQINygKbM7Zn3O5FjltqS0npJeiSHChzc7Tc
DifwIQx98VrJBFkCJsfcobnWB352a8Jh08EBJb/5vzWypyJ6P5GhRdNqTfpZuZeH
pJK49u1wPT7qm6zHc3kyeGUW47+bpVU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:32:06 2025 by rpki-client