Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/ad5431fd-a5dc-3ffc-9fd5-889eb7e37392.roa
File:                     ad5431fd-a5dc-3ffc-9fd5-889eb7e37392.roa (raw, json)
Hash identifier:          DGSWBSCqKLL2ogfYGi5IzcN/K2cow/YrsiQ4JOwagbo=
Subject key identifier:   47:5D:AA:14:47:48:E5:BB:21:6A:43:5F:4D:86:75:EC:3F:E5:EC:60
Certificate issuer:       /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial:       010D0C9F4328584B758C91102BB77C13EFD211C0
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/ad5431fd-a5dc-3ffc-9fd5-889eb7e37392.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     7489
IP address blocks:        208.87.98.0/23 maxlen: 24
                          208.87.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:91:10:2b:b7:7c:13:ef:d2:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=f26a3c2f-5d16-4602-a065-fa3c6a1657ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:57:b0:62:a1:00:73:13:0e:4d:e8:29:cd:35:
                    6b:df:64:f7:be:93:27:bb:13:dc:52:39:63:1b:2e:
                    be:71:91:a8:6a:1d:26:0b:4d:27:b3:69:52:6c:61:
                    72:82:f6:42:30:87:01:d6:29:22:09:fa:66:74:b3:
                    16:f8:50:f7:61:2b:5d:58:71:36:b4:3d:2c:24:09:
                    aa:33:7e:67:6c:a5:e7:c0:3d:f1:56:e0:de:d2:c8:
                    bf:ab:88:65:9a:6d:ef:83:70:5a:d1:ea:82:2e:08:
                    13:25:89:a5:f2:c1:bf:85:1f:b4:1c:15:2d:b2:b6:
                    18:4a:dc:bc:ea:52:11:ff:c6:56:a9:aa:d9:ec:19:
                    cd:21:4c:f6:e4:eb:67:60:e2:d9:57:ec:b4:43:b7:
                    ee:50:d5:a0:79:64:27:3c:eb:bc:f5:7f:a2:9e:37:
                    41:ab:20:63:88:c1:4c:80:3c:15:9b:7c:27:f8:84:
                    89:11:93:17:f2:fc:ca:bd:ad:c7:f8:8d:3d:26:93:
                    47:6c:b3:e3:12:a9:8d:af:98:67:d2:2b:43:0b:1f:
                    aa:47:2d:91:92:ab:ac:b2:0a:99:47:bb:75:c3:27:
                    a0:66:b7:8d:9c:e9:72:31:5b:8f:8e:70:68:3a:e4:
                    0b:4f:a0:f7:eb:db:98:5c:e1:70:88:15:a7:b4:4b:
                    87:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:5D:AA:14:47:48:E5:BB:21:6A:43:5F:4D:86:75:EC:3F:E5:EC:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/ad5431fd-a5dc-3ffc-9fd5-889eb7e37392.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl

            X509v3 Authority Key Identifier:
                keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.87.98.0/23
                  208.87.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:a8:48:a4:cf:ea:6c:6b:91:66:51:6f:e5:0d:e2:24:cc:32:
         2c:3b:e0:5b:10:1b:e0:cd:9c:46:ff:90:69:2f:69:33:d5:19:
         e7:09:56:e1:3e:44:8d:7d:f8:6a:70:28:6c:01:01:47:94:38:
         2d:9a:8f:b6:18:1a:7d:88:93:ac:4b:18:33:3e:5b:3b:24:03:
         e4:9b:90:6f:80:c7:31:39:13:cd:c7:fd:d2:fd:eb:21:23:74:
         68:73:81:1b:9a:64:63:d2:74:ee:61:2f:b1:6b:14:73:81:58:
         82:c5:83:e2:2d:da:b7:fe:e6:4c:23:76:ed:8a:eb:db:3a:2a:
         33:5e:79:09:97:6c:87:87:f4:ae:85:3a:bf:43:f7:6f:a8:c8:
         ad:63:b3:81:1e:ff:d2:a2:0a:b7:9c:77:b6:b1:4f:51:75:16:
         21:7c:68:5a:4f:15:c7:9f:80:84:e2:82:7c:0c:d7:e2:7a:59:
         59:fd:6e:0c:3f:36:08:30:2f:c5:e6:14:36:e8:86:58:12:76:
         c1:40:c1:52:28:f0:cb:9c:f1:b7:a2:3a:46:2e:c6:6d:cb:4c:
         d9:63:65:72:1a:6c:6d:07:74:65:20:d8:19:aa:4d:2d:f0:6c:
         3b:a4:cb:9c:18:80:ed:bf:41:aa:46:e2:1e:7e:48:21:7a:8f:
         44:77:4e:fd
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEt1jJEQK7d8E+/SEcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzY5NjQzZjQtYTg0OS00YTBjLWFmMmEtNjc3OTU3ZGU3
NGJjMB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk
ZjI2YTNjMmYtNWQxNi00NjAyLWEwNjUtZmEzYzZhMTY1N2FkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlewYqEAcxMOTegpzTVr32T3vpMnuxPcUjlj
Gy6+cZGoah0mC00ns2lSbGFygvZCMIcB1ikiCfpmdLMW+FD3YStdWHE2tD0sJAmq
M35nbKXnwD3xVuDe0si/q4hlmm3vg3Ba0eqCLggTJYml8sG/hR+0HBUtsrYYSty8
6lIR/8ZWqarZ7BnNIUz25OtnYOLZV+y0Q7fuUNWgeWQnPOu89X+injdBqyBjiMFM
gDwVm3wn+ISJEZMX8vzKva3H+I09JpNHbLPjEqmNr5hn0itDCx+qRy2RkqussgqZ
R7t1wyegZreNnOlyMVuPjnBoOuQLT6D369uYXOFwiBWntEuHRwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFEddqhRHSOW7IWpDX02Gdew/5exgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2
NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdkZTc0YmMvYWQ1NDMxZmQtYTVkYy0z
ZmZjLTlmZDUtODg5ZWI3ZTM3MzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY5NjQzZjQtYTg0OS00YTBjLWFm
MmEtNjc3OTU3ZGU3NGJjLzM2OTY0M2Y0LWE4NDktNGEwYy1hZjJhLTY3Nzk1N2Rl
NzRiYy5jcmwwHwYDVR0jBBgwFoAUeE6WxYfl6+Xkw5CXV0KgfPfdnKkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5
NTdkZTc0YmMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB0FdiAwQB
0FdmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBACKoSKTP6mxrkWZRb+UN4iTMMiw74FsQG+DNnEb/kGkvaTPV
GecJVuE+RI19+GpwKGwBAUeUOC2aj7YYGn2Ik6xLGDM+WzskA+SbkG+AxzE5E83H
/dL96yEjdGhzgRuaZGPSdO5hL7FrFHOBWILFg+It2rf+5kwjdu2K69s6KjNeeQmX
bIeH9K6FOr9D92+oyK1js4Ee/9KiCrecd7axT1F1FiF8aFpPFcefgITignwM1+J6
WVn9bgw/NggwL8XmFDbohlgSdsFAwVIo8Muc8beiOkYuxm3LTNljZXIabG0HdGUg
2BmqTS3wbDuky5wYgO2/QapG4h5+SCF6j0R3Tv0=
-----END CERTIFICATE-----
Generated at Thu Oct 16 15:37:13 2025 by rpki-client