Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/921a9c01-afc6-36ae-838d-8467b412aebd.roa
File:                     921a9c01-afc6-36ae-838d-8467b412aebd.roa (raw, json)
Hash identifier:          YqaJKCn4my3BDhtpzeDmVGob2bpiu/0SSguM+dMRGqA=
Subject key identifier:   7E:96:35:5D:1B:12:03:D6:86:F1:58:E0:3B:BB:FA:4B:18:6D:DB:A2
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285849A4BA4BE5785EFDB84DF0E580
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/921a9c01-afc6-36ae-838d-8467b412aebd.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     21859
IP address blocks:        98.98.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:4b:e5:78:5e:fd:b8:4d:f0:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=7b9e6c10-6a94-4111-a703-ec9354397f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d2:38:7c:01:6f:9e:e0:d1:16:e6:22:d2:c4:
                    6f:a6:d5:d9:ee:1a:d9:c1:d9:1b:0e:f6:9e:d1:97:
                    c2:b5:28:cc:91:de:61:17:e3:30:c4:0e:28:8d:33:
                    f6:ae:62:b7:a3:55:d8:3a:b5:91:34:38:13:0e:22:
                    57:23:c1:28:2f:73:54:ff:fb:d0:29:33:fc:dd:3a:
                    35:eb:de:77:29:0c:96:cd:00:96:a1:00:00:09:f2:
                    be:1c:4b:e5:39:f7:05:b6:be:1a:c4:cf:5c:73:ff:
                    ba:e4:c0:8c:d0:36:e6:81:cd:57:02:a5:5a:48:3d:
                    f2:b3:ca:61:58:6a:5b:ca:0b:41:b2:8a:7a:d4:26:
                    7d:a3:c1:60:fb:b1:46:d3:cb:06:bf:9d:ab:bb:ae:
                    89:9f:5e:0d:73:da:9c:8b:d3:c5:91:98:f4:c6:f7:
                    7e:c3:32:84:90:94:03:10:13:1a:f2:23:39:88:4f:
                    d8:f0:7c:a4:50:e0:39:e3:64:c4:9c:02:7f:e3:cf:
                    89:31:08:12:00:d0:18:8b:91:f6:8c:7e:9f:30:0d:
                    af:4a:91:6d:88:b6:58:86:b4:66:f3:1e:fe:d4:c6:
                    44:10:60:63:00:b0:ca:62:6f:75:96:ef:84:61:48:
                    a8:66:27:98:4c:a6:cb:db:90:16:05:95:79:3d:46:
                    39:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:96:35:5D:1B:12:03:D6:86:F1:58:E0:3B:BB:FA:4B:18:6D:DB:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/921a9c01-afc6-36ae-838d-8467b412aebd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:0d:57:d7:7b:97:07:24:c6:2e:65:ad:0a:56:b4:bb:e3:a5:
         a7:dc:2f:59:09:c6:4c:73:72:53:04:c3:11:99:8b:eb:b0:5a:
         c8:c1:26:90:31:06:e3:05:d3:79:bc:75:d1:b0:e8:2d:72:6d:
         35:b6:d9:cc:c3:ca:17:54:52:f3:d2:16:f6:5f:07:02:35:d9:
         02:69:84:62:23:68:ae:4c:e3:a3:93:51:75:c6:97:c6:e4:fe:
         06:9b:51:7f:a5:ec:6b:83:f5:27:b9:76:e4:f8:dc:45:6c:79:
         11:86:a3:ad:23:f8:c9:f6:fb:80:06:fa:19:f0:83:28:8b:6a:
         6a:ad:13:55:c4:93:f0:d3:18:85:67:48:15:d2:a6:49:03:a8:
         42:16:1e:13:8e:ba:7b:71:eb:57:48:ab:35:2b:37:f2:e4:2e:
         3f:d6:cc:d0:ff:56:6d:7a:d6:dc:77:ed:dd:13:24:f6:3a:66:
         4b:06:43:9a:8f:85:a4:43:da:26:a6:4e:13:73:04:9a:b9:4f:
         3a:17:cc:ef:29:45:4d:55:bd:07:6e:01:c2:b0:d3:2b:49:03:
         cb:54:ab:17:0f:47:12:d9:b4:10:71:c7:b6:54:d4:36:a6:d1:
         eb:71:70:10:62:72:1c:1f:0f:10:b8:09:37:dc:ed:d0:0a:de:
         47:fc:cd:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkukvleF79uE3w5YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
N2I5ZTZjMTAtNmE5NC00MTExLWE3MDMtZWM5MzU0Mzk3ZjcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutI4fAFvnuDRFuYi0sRvptXZ7hrZwdkbDvae
0ZfCtSjMkd5hF+MwxA4ojTP2rmK3o1XYOrWRNDgTDiJXI8EoL3NU//vQKTP83To1
6953KQyWzQCWoQAACfK+HEvlOfcFtr4axM9cc/+65MCM0Dbmgc1XAqVaSD3ys8ph
WGpbygtBsop61CZ9o8Fg+7FG08sGv52ru66Jn14Nc9qci9PFkZj0xvd+wzKEkJQD
EBMa8iM5iE/Y8HykUOA542TEnAJ/48+JMQgSANAYi5H2jH6fMA2vSpFtiLZYhrRm
8x7+1MZEEGBjALDKYm91lu+EYUioZieYTKbL25AWBZV5PUY56QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH6WNV0bEgPWhvFY4Du7+ksYbduiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvOTIxYTljMDEtYWZjNi0z
NmFlLTgzOGQtODQ2N2I0MTJhZWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYmJNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFENV9d7lwckxi5lrQpWtLvjpafcL1kJxkxzclMEwxGZi+uwWsjBJpAx
BuMF03m8ddGw6C1ybTW22czDyhdUUvPSFvZfBwI12QJphGIjaK5M46OTUXXGl8bk
/gabUX+l7GuD9Se5duT43EVseRGGo60j+Mn2+4AG+hnwgyiLamqtE1XEk/DTGIVn
SBXSpkkDqEIWHhOOuntx61dIqzUrN/LkLj/WzND/Vm161tx37d0TJPY6ZksGQ5qP
haRD2iamThNzBJq5TzoXzO8pRU1VvQduAcKw0ytJA8tUqxcPRxLZtBBxx7ZU1Dam
0etxcBBichwfDxC4CTfc7dAK3kf8zSU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:55:59 2025 by rpki-client