Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/9e439f19-09ab-3a16-a8e7-dbfda4837a23.roa
File:                     9e439f19-09ab-3a16-a8e7-dbfda4837a23.roa (raw, json)
Hash identifier:          H5tvlw/HQFoAcFzcu3AfXUTRAjVNxzhMAYYa6sH7rmA=
Subject key identifier:   E5:F9:59:0D:81:79:12:7C:29:DD:CF:68:C7:79:EC:B5:B5:FE:BD:5C
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584BAEC7C1B86C0C50BC7CC60E80
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/9e439f19-09ab-3a16-a8e7-dbfda4837a23.roa
Signing time:             Wed 29 Oct 2025 13:00:39 +0000
ROA not before:           Wed 29 Oct 2025 13:00:39 +0000
ROA not after:            Tue 27 Jan 2026 14:00:39 +0000
asID:                     14956
IP address blocks:        144.172.122.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ae:c7:c1:b8:6c:0c:50:bc:7c:c6:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Oct 29 13:00:39 2025 GMT
            Not After : Jan 27 14:00:39 2026 GMT
        Subject: CN=028432b6-5fb5-46b7-b710-0dd73b1c96bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d0:4a:32:95:57:05:1e:4d:9c:df:f7:8b:da:
                    b9:4e:a6:1c:16:b4:77:d0:49:45:7a:76:e3:81:6e:
                    38:09:8e:e5:f0:a1:84:a6:39:b8:33:53:81:14:fa:
                    2d:8f:a5:ca:e2:9f:86:d4:67:7e:50:23:b2:56:98:
                    8f:8d:2d:50:d4:b8:25:6c:31:50:af:19:fc:b2:7f:
                    35:ea:4a:2e:30:fa:e4:50:a4:72:de:f9:84:d4:fa:
                    57:6c:62:c7:fe:cc:45:05:0c:96:58:b7:8d:d0:5b:
                    af:96:26:3d:58:da:97:48:09:56:37:8d:dc:b8:76:
                    47:20:9e:4e:e5:22:71:31:d2:65:13:44:e1:b6:f3:
                    f3:e4:61:29:4a:9b:aa:4e:04:ab:0c:25:92:d1:37:
                    c9:6d:35:6f:bb:ea:10:fe:cd:d7:65:97:09:90:52:
                    55:1c:2b:0b:bb:1f:a6:6c:09:32:0b:7a:d2:2c:a1:
                    43:94:05:12:e8:1e:21:e1:ac:c6:07:6e:3e:42:d7:
                    36:ea:fb:2d:74:59:b6:45:c2:95:43:02:7e:f4:7b:
                    e7:06:a8:a3:b7:93:d8:fb:5c:41:92:99:42:6d:4a:
                    53:7a:13:c3:bd:a7:ee:61:71:ba:af:f5:5f:21:38:
                    e8:73:e6:f1:10:a0:84:cb:4b:65:c7:3e:c1:84:a9:
                    14:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F9:59:0D:81:79:12:7C:29:DD:CF:68:C7:79:EC:B5:B5:FE:BD:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/9e439f19-09ab-3a16-a8e7-dbfda4837a23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.172.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:cd:d2:33:65:fe:39:1d:d7:36:aa:d5:d8:20:65:cd:ce:23:
         ce:f1:65:44:cf:2e:0c:b4:8e:fa:02:38:4c:70:61:52:95:99:
         f8:97:a9:6f:bf:fe:f3:94:de:61:26:85:58:d2:9b:c3:d1:79:
         43:c8:44:19:77:b4:31:b6:24:19:ca:03:1c:8d:b4:67:8a:0c:
         02:71:50:e8:69:1e:f1:ab:a9:f8:7d:fc:1f:18:11:0f:b7:9a:
         31:93:2f:9e:41:0b:a8:50:87:4e:89:f9:8f:09:3f:83:b6:8f:
         bd:13:21:82:b4:d1:61:3d:7b:0e:4a:2a:61:db:72:b5:e0:2d:
         8b:72:0b:0f:57:ae:7b:46:f7:ef:f1:16:24:bf:c0:98:ec:db:
         8e:76:d8:0d:4b:06:35:b6:88:d3:3c:83:f2:80:76:36:ab:1f:
         6b:7d:2d:1a:98:bc:64:e5:a1:dc:b0:ac:0f:ec:9b:00:bf:12:
         82:c3:21:d7:23:3e:bf:2b:67:3b:de:07:a6:c3:f0:d5:90:3b:
         f1:2f:bf:42:13:9d:47:0c:0a:67:30:77:70:38:43:75:35:dc:
         9c:30:6f:19:00:51:09:88:33:5e:f2:01:50:7b:b8:9c:75:19:
         5a:fa:c5:e4:98:1b:c2:4e:b1:3d:61:2a:bb:3a:c0:15:ed:91:
         e9:de:84:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux8G4bAxQvHzGDoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOThjYjUwNTgtMDFhZC00NWJmLTljMTUtNDUzZjQxMGJi
OWQ3MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk
MDI4NDMyYjYtNWZiNS00NmI3LWI3MTAtMGRkNzNiMWM5NmJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNBKMpVXBR5NnN/3i9q5TqYcFrR30ElFenbj
gW44CY7l8KGEpjm4M1OBFPotj6XK4p+G1Gd+UCOyVpiPjS1Q1LglbDFQrxn8sn81
6kouMPrkUKRy3vmE1PpXbGLH/sxFBQyWWLeN0FuvliY9WNqXSAlWN43cuHZHIJ5O
5SJxMdJlE0ThtvPz5GEpSpuqTgSrDCWS0TfJbTVvu+oQ/s3XZZcJkFJVHCsLux+m
bAkyC3rSLKFDlAUS6B4h4azGB24+Qtc26vstdFm2RcKVQwJ+9HvnBqijt5PY+1xB
kplCbUpTehPDvafuYXG6r/VfITjoc+bxEKCEy0tlxz7BhKkUtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOX5WQ2BeRJ8Kd3PaMd57LW1/r1cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OGNi
NTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNmNDEwYmI5ZDcvOWU0MzlmMTktMDlhYi0z
YTE2LWE4ZTctZGJmZGE0ODM3YTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOThjYjUwNTgtMDFhZC00NWJmLTlj
MTUtNDUzZjQxMGJiOWQ3Lzk4Y2I1MDU4LTAxYWQtNDViZi05YzE1LTQ1M2Y0MTBi
YjlkNy5jcmwwHwYDVR0jBBgwFoAUgs6ENpgBbErCBlI/wMU9V+EIADkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85OGNiNTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNm
NDEwYmI5ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkKx6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG7N0jNl/jkd1zaq1dggZc3OI87xZUTPLgy0jvoCOExwYVKVmfiXqW+/
/vOU3mEmhVjSm8PReUPIRBl3tDG2JBnKAxyNtGeKDAJxUOhpHvGrqfh9/B8YEQ+3
mjGTL55BC6hQh06J+Y8JP4O2j70TIYK00WE9ew5KKmHbcrXgLYtyCw9XrntG9+/x
FiS/wJjs24522A1LBjW2iNM8g/KAdjarH2t9LRqYvGTlodywrA/smwC/EoLDIdcj
Pr8rZzveB6bD8NWQO/Evv0ITnUcMCmcwd3A4Q3U13JwwbxkAUQmIM17yAVB7uJx1
GVr6xeSYG8JOsT1hKrs6wBXtkenehGQ=
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:43:40 2025 by rpki-client