Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/08c0a285-dd7d-36ce-938b-8e2f7c4d158d.roa
File:                     08c0a285-dd7d-36ce-938b-8e2f7c4d158d.roa (raw, json)
Hash identifier:          dNI9GbzP2ENgUjh0G1zsUGF30lCV9XuBFRnnwSr53s0=
Subject key identifier:   E8:C5:FA:02:3F:5F:32:79:29:C7:4B:CE:09:A9:30:8D:23:27:5F:CE
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584A5A3075EDF2AB58D356528280
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/08c0a285-dd7d-36ce-938b-8e2f7c4d158d.roa
Signing time:             Sun 29 Jun 2025 13:01:03 +0000
ROA not before:           Sun 29 Jun 2025 13:01:03 +0000
ROA not after:            Sat 27 Sep 2025 13:01:03 +0000
asID:                     21859
IP address blocks:        98.98.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5a:30:75:ed:f2:ab:58:d3:56:52:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jun 29 13:01:03 2025 GMT
            Not After : Sep 27 13:01:03 2025 GMT
        Subject: CN=b9018539-27bf-47e9-8fb7-317471543450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:40:af:6a:18:a8:a1:48:40:1d:a8:b4:bc:c1:
                    60:04:5a:9e:6a:fb:c5:7b:9c:4d:ce:76:34:93:1a:
                    cf:63:37:63:c7:de:fd:ea:eb:c9:1c:1b:af:49:d4:
                    7d:ba:71:9e:50:bb:75:02:97:81:cb:3a:78:8f:0c:
                    bc:54:d2:57:17:71:d3:23:11:de:45:15:46:dd:e2:
                    2f:ec:e6:fc:bf:fc:9d:75:0c:38:71:f8:a4:74:22:
                    fb:2e:19:aa:a6:26:79:a6:7a:c4:80:21:c8:15:83:
                    ba:72:d7:e4:a5:3c:4d:29:75:ec:36:15:08:33:55:
                    6b:14:cb:f7:12:52:58:28:51:5d:0a:b0:99:71:68:
                    0c:46:6e:23:0d:b6:43:4d:38:b0:39:c5:c9:1a:3d:
                    1b:c3:74:64:e8:ff:e1:7e:a7:10:ed:94:a3:20:06:
                    d2:af:99:43:83:2e:e3:a5:c1:24:05:14:72:d7:67:
                    c0:ab:34:43:f1:51:c2:14:24:38:b7:16:7c:0b:c0:
                    08:cb:1c:df:a0:1c:fb:84:9b:b6:f3:81:a9:d4:4f:
                    b2:d4:d9:26:9c:61:8d:e4:03:63:08:d5:16:56:40:
                    0f:4e:40:6f:fb:68:27:a1:4c:18:6e:3c:e5:c0:7b:
                    8a:d4:ed:9d:75:85:c6:4d:d9:67:a3:dd:04:b2:40:
                    71:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C5:FA:02:3F:5F:32:79:29:C7:4B:CE:09:A9:30:8D:23:27:5F:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/08c0a285-dd7d-36ce-938b-8e2f7c4d158d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:8b:42:db:83:7c:34:bb:d7:bd:20:c7:2e:11:93:5c:d2:db:
         fa:33:4f:46:f9:de:f1:d1:86:5c:a1:c3:18:79:a4:ff:bf:6c:
         48:72:1f:06:e4:ae:06:d7:de:5e:ca:9d:33:a0:e1:1f:16:5a:
         9f:eb:6d:5a:2a:6e:3a:7f:eb:0e:86:61:e2:de:12:50:7a:b0:
         49:4e:e2:a3:16:e9:10:46:51:57:1b:dc:35:67:30:40:a7:1d:
         7c:86:e6:3e:4e:37:aa:66:45:dc:1a:1a:f9:4e:9a:4e:bb:87:
         07:80:c1:bc:06:ba:ec:98:83:9f:5d:ca:a4:f2:29:fb:46:fb:
         37:41:c8:6b:99:10:11:5f:85:23:f1:1e:74:c0:48:0a:03:c0:
         4c:f0:12:14:3e:aa:a7:6e:4c:96:4f:99:24:ae:5c:42:c8:86:
         9f:58:fd:40:27:68:d7:08:76:13:27:d5:58:48:18:99:59:90:
         e0:f5:74:bf:c2:8d:bb:e0:8b:b6:3e:71:25:f4:27:f8:a9:b7:
         22:12:78:93:77:db:2a:85:88:78:d5:21:2b:03:bc:07:c7:6b:
         b0:1d:6f:bf:ee:2c:11:85:32:5a:b7:06:b4:80:45:85:5e:28:
         14:75:7d:41:e9:01:66:10:8b:35:00:10:d9:51:01:eb:45:b4:
         22:e8:c3:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpaMHXt8qtY01ZSgoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI1MDYyOTEzMDEwM1oXDTI1MDkyNzEzMDEwM1owLzEtMCsGA1UEAxMk
YjkwMTg1MzktMjdiZi00N2U5LThmYjctMzE3NDcxNTQzNDUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkCvahiooUhAHai0vMFgBFqeavvFe5xNznY0
kxrPYzdjx9796uvJHBuvSdR9unGeULt1ApeByzp4jwy8VNJXF3HTIxHeRRVG3eIv
7Ob8v/yddQw4cfikdCL7LhmqpiZ5pnrEgCHIFYO6ctfkpTxNKXXsNhUIM1VrFMv3
ElJYKFFdCrCZcWgMRm4jDbZDTTiwOcXJGj0bw3Rk6P/hfqcQ7ZSjIAbSr5lDgy7j
pcEkBRRy12fAqzRD8VHCFCQ4txZ8C8AIyxzfoBz7hJu284Gp1E+y1NkmnGGN5ANj
CNUWVkAPTkBv+2gnoUwYbjzlwHuK1O2ddYXGTdlno90EskBxjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOjF+gI/XzJ5KcdLzgmpMI0jJ1/OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvMDhjMGEyODUtZGQ3ZC0z
NmNlLTkzOGItOGUyZjdjNGQxNThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYmIiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGCLQtuDfDS7170gxy4Rk1zS2/ozT0b53vHRhlyhwxh5pP+/bEhyHwbk
rgbX3l7KnTOg4R8WWp/rbVoqbjp/6w6GYeLeElB6sElO4qMW6RBGUVcb3DVnMECn
HXyG5j5ON6pmRdwaGvlOmk67hweAwbwGuuyYg59dyqTyKftG+zdByGuZEBFfhSPx
HnTASAoDwEzwEhQ+qqduTJZPmSSuXELIhp9Y/UAnaNcIdhMn1VhIGJlZkOD1dL/C
jbvgi7Y+cSX0J/iptyISeJN32yqFiHjVISsDvAfHa7Adb7/uLBGFMlq3BrSARYVe
KBR1fUHpAWYQizUAENlRAetFtCLowyo=
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:23:28 2025 by rpki-client