Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/c7ec4227-6559-3408-a496-1a34e31c4fdb.roa
File:                     c7ec4227-6559-3408-a496-1a34e31c4fdb.roa (raw, json)
Hash identifier:          EtINeAvq5MUWi88pRKWoeHzZwJg+6/CUiZsEL0U1peA=
Subject key identifier:   03:CD:65:F7:E3:CB:04:0A:66:BF:3E:6B:00:BC:47:1C:CC:F9:B7:25
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584AA6F62A5253CDA486456DFB00
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/c7ec4227-6559-3408-a496-1a34e31c4fdb.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     198983
IP address blocks:        167.88.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:2a:52:53:cd:a4:86:45:6d:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=ff0c5845-a262-47ca-aa6a-cac28a7e0193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:89:7c:45:ab:ad:36:1f:79:3a:2e:2f:6c:41:
                    ec:0b:c9:b9:b2:a9:14:10:ad:49:a3:6c:6b:34:d5:
                    85:0a:bf:4f:df:e4:7b:dd:38:5e:51:50:65:33:48:
                    e7:29:e0:89:e7:7a:95:bb:76:05:f8:44:f8:a5:f3:
                    96:cb:79:c3:1e:e5:12:c3:f2:59:b1:8c:99:17:e3:
                    3d:77:66:cd:08:b4:11:83:e4:8c:3c:11:54:2f:7d:
                    14:50:6c:37:2d:90:c4:8b:ff:4c:06:08:2f:98:6f:
                    0a:e5:e9:7e:27:52:b0:57:bd:2b:35:02:a3:af:97:
                    1c:89:52:49:8a:1a:57:a0:d8:19:6a:55:04:62:59:
                    c0:bf:6f:7f:b6:16:a1:46:84:a8:47:49:66:8b:b1:
                    2e:c0:66:4d:37:c5:9a:79:fe:55:43:08:f0:4a:28:
                    c3:98:3f:cc:12:62:e8:4e:fe:27:55:e8:da:32:4e:
                    99:3e:fd:e1:1b:32:da:d2:2f:5d:cf:9a:96:d6:9f:
                    f9:61:18:d2:49:8f:99:3e:a9:fd:73:82:0a:7f:8b:
                    0c:59:e9:cf:a2:75:e2:4c:ad:fc:dd:83:57:52:dc:
                    dc:b9:f4:5e:9d:7a:98:08:1c:bc:7e:3d:17:50:7e:
                    c2:0a:fc:aa:7d:8a:b1:3a:95:cf:30:95:a8:9e:fc:
                    6d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:CD:65:F7:E3:CB:04:0A:66:BF:3E:6B:00:BC:47:1C:CC:F9:B7:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/c7ec4227-6559-3408-a496-1a34e31c4fdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.88.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:ad:a1:8c:dc:ab:d3:71:cb:f3:95:95:67:b5:50:b1:a8:c4:
         39:05:f7:8e:92:97:15:af:5e:3c:93:a9:62:6d:09:e1:04:b7:
         00:42:88:07:df:e1:05:e1:43:6d:c6:f1:5b:62:da:88:93:3c:
         cf:a9:a6:f2:47:ce:01:ce:5a:2f:f1:3c:1d:03:82:67:24:54:
         f2:5a:d3:c0:1a:a1:b6:98:43:49:7c:b8:6f:64:8f:bf:4f:33:
         0b:b2:22:a8:aa:cb:a8:92:7c:f5:1c:71:b7:3b:0f:61:45:a7:
         46:a3:28:42:3e:f1:bd:70:f2:53:51:72:25:d6:72:e0:8f:52:
         19:3a:8c:2b:3a:44:85:f9:0a:91:9d:ae:1f:2a:9c:84:7c:b2:
         ad:6d:09:24:fd:79:38:17:54:05:9d:84:44:4c:45:3d:66:92:
         e8:66:72:6a:f7:7f:80:7d:df:b0:59:6a:cb:39:b7:6d:4f:6a:
         e4:c3:90:28:1f:9b:d6:27:2c:76:8f:57:48:c9:e8:19:20:4a:
         4b:7b:f7:07:1d:16:8e:d6:9c:da:11:51:74:14:a4:d7:26:f6:
         67:80:2d:6e:8b:f9:a5:8e:4b:35:26:c2:e8:4a:b6:4f:fa:a3:
         bb:0e:df:4e:f1:05:46:93:d5:aa:e0:87:35:58:a0:02:ce:9f:
         e0:74:8e:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9ipSU82khkVt+wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOThjYjUwNTgtMDFhZC00NWJmLTljMTUtNDUzZjQxMGJi
OWQ3MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk
ZmYwYzU4NDUtYTI2Mi00N2NhLWFhNmEtY2FjMjhhN2UwMTkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIl8RautNh95Oi4vbEHsC8m5sqkUEK1Jo2xr
NNWFCr9P3+R73TheUVBlM0jnKeCJ53qVu3YF+ET4pfOWy3nDHuUSw/JZsYyZF+M9
d2bNCLQRg+SMPBFUL30UUGw3LZDEi/9MBggvmG8K5el+J1KwV70rNQKjr5cciVJJ
ihpXoNgZalUEYlnAv29/thahRoSoR0lmi7EuwGZNN8Waef5VQwjwSijDmD/MEmLo
Tv4nVejaMk6ZPv3hGzLa0i9dz5qW1p/5YRjSSY+ZPqn9c4IKf4sMWenPonXiTK38
3YNXUtzcufRenXqYCBy8fj0XUH7CCvyqfYqxOpXPMJWonvxtkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAPNZffjywQKZr8+awC8RxzM+bclMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OGNi
NTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNmNDEwYmI5ZDcvYzdlYzQyMjctNjU1OS0z
NDA4LWE0OTYtMWEzNGUzMWM0ZmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOThjYjUwNTgtMDFhZC00NWJmLTlj
MTUtNDUzZjQxMGJiOWQ3Lzk4Y2I1MDU4LTAxYWQtNDViZi05YzE1LTQ1M2Y0MTBi
YjlkNy5jcmwwHwYDVR0jBBgwFoAUgs6ENpgBbErCBlI/wMU9V+EIADkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85OGNiNTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNm
NDEwYmI5ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp1iiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF6toYzcq9Nxy/OVlWe1ULGoxDkF946SlxWvXjyTqWJtCeEEtwBCiAff
4QXhQ23G8Vti2oiTPM+ppvJHzgHOWi/xPB0DgmckVPJa08AaobaYQ0l8uG9kj79P
MwuyIqiqy6iSfPUccbc7D2FFp0ajKEI+8b1w8lNRciXWcuCPUhk6jCs6RIX5CpGd
rh8qnIR8sq1tCST9eTgXVAWdhERMRT1mkuhmcmr3f4B937BZass5t21PauTDkCgf
m9YnLHaPV0jJ6BkgSkt79wcdFo7WnNoRUXQUpNcm9meALW6L+aWOSzUmwuhKtk/6
o7sO307xBUaT1arghzVYoALOn+B0jvo=
-----END CERTIFICATE-----
Generated at Thu Aug 7 07:28:54 2025 by rpki-client