Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00b248e7-3e7d-385d-b6b5-4af18046e225.roa
File:                     00b248e7-3e7d-385d-b6b5-4af18046e225.roa (raw, json)
Hash identifier:          gJkowHwckpSEVH9jHmXViloRYqPdGYuJxK9afwJ8yJQ=
Subject key identifier:   18:E5:72:89:DE:88:7F:B4:82:14:1B:98:66:F6:F8:64:E5:F0:AE:2C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A944F08C39FBB70F6F0F40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00b248e7-3e7d-385d-b6b5-4af18046e225.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        98.199.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:44:f0:8c:39:fb:b7:0f:6f:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=9bc79251-3ad3-4a2c-8bb0-ddf59fb8730c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:92:b7:88:2a:c4:93:71:70:61:42:e2:aa:88:
                    f3:b2:64:95:f0:0c:73:9f:9d:39:39:c2:97:60:8e:
                    9f:de:13:ed:6d:80:3d:e9:3b:3d:ab:0f:be:c8:49:
                    75:6c:47:ee:7c:7f:c3:8e:e5:0d:c4:bf:cf:92:5d:
                    17:f1:e9:0e:9c:78:73:67:75:f1:9f:ec:fe:82:40:
                    a0:63:1f:2f:73:73:ac:73:2c:aa:3a:9e:f1:ea:a8:
                    13:67:4f:74:63:3a:50:c3:5c:4e:3b:53:ff:4d:dd:
                    51:0c:08:3a:d2:32:b5:02:14:22:82:e3:d1:08:59:
                    5b:8b:22:88:26:9d:ab:cb:02:79:69:a1:c4:04:1e:
                    85:2d:0d:6e:38:a8:13:43:d8:38:61:df:53:ea:0d:
                    18:b4:88:05:8d:68:a5:f9:ac:98:48:96:e8:aa:83:
                    65:52:b6:c5:36:f2:0a:c2:c2:7f:93:43:97:15:e3:
                    bc:78:f7:e5:a3:8f:75:91:72:bb:b6:d3:9d:fd:5f:
                    37:ff:24:11:eb:c7:a6:fa:45:95:57:4e:30:62:e5:
                    70:03:5b:74:46:75:e3:34:17:74:b6:d4:10:d4:07:
                    26:23:d0:30:20:cb:dc:58:54:8a:a1:a1:12:04:6a:
                    ed:6c:3f:56:ca:63:b7:20:dc:d8:a4:0e:b9:60:4a:
                    94:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E5:72:89:DE:88:7F:B4:82:14:1B:98:66:F6:F8:64:E5:F0:AE:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00b248e7-3e7d-385d-b6b5-4af18046e225.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.199.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:a3:30:da:df:d8:ca:be:a5:03:fa:ab:0b:d0:cb:4b:35:a8:
         57:42:7b:3f:37:b6:2d:ea:56:8d:b1:a9:b7:22:c5:3b:37:e0:
         3f:48:a5:80:2f:3d:c4:b4:0a:fd:2e:0e:5c:42:64:f9:71:b4:
         29:10:75:6a:01:ab:97:41:f4:fd:44:d3:05:b0:7e:ba:10:48:
         ad:e1:23:9b:ba:c8:a1:32:00:87:17:7e:79:ce:f7:64:54:60:
         c0:37:00:27:76:4d:ef:99:e8:cc:50:fb:d3:c0:96:24:00:70:
         60:fc:c4:8c:49:c5:3d:76:06:29:dc:f4:f2:ef:b8:b6:01:7c:
         1c:43:b9:eb:f3:2f:34:6d:b4:5c:4f:0e:88:10:41:55:84:7d:
         71:54:fe:6f:14:e6:a8:66:87:1e:66:15:21:50:4f:e8:21:f9:
         a8:36:a4:a6:95:30:c3:98:61:1f:44:d9:c1:4c:17:8d:8c:c1:
         b1:32:e6:5e:a9:ee:66:72:e9:96:85:3e:6a:01:3f:d1:a7:3f:
         e4:7d:29:1d:e6:1c:cd:4d:f8:0f:76:1f:2a:67:fe:e6:fd:fd:
         da:ca:b3:be:58:ad:a7:1c:9e:b3:4d:6b:c6:b4:5f:35:4f:86:
         f6:6b:d6:d2:51:80:5b:95:fc:be:41:b5:92:72:ff:c8:dc:27:
         68:18:41:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqUTwjDn7tw9vD0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk
OWJjNzkyNTEtM2FkMy00YTJjLThiYjAtZGRmNTlmYjg3MzBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9pK3iCrEk3FwYULiqojzsmSV8Axzn505OcKX
YI6f3hPtbYA96Ts9qw++yEl1bEfufH/DjuUNxL/Pkl0X8ekOnHhzZ3Xxn+z+gkCg
Yx8vc3OscyyqOp7x6qgTZ090YzpQw1xOO1P/Td1RDAg60jK1AhQiguPRCFlbiyKI
Jp2rywJ5aaHEBB6FLQ1uOKgTQ9g4Yd9T6g0YtIgFjWil+ayYSJboqoNlUrbFNvIK
wsJ/k0OXFeO8ePflo491kXK7ttOd/V83/yQR68em+kWVV04wYuVwA1t0RnXjNBd0
ttQQ1AcmI9AwIMvcWFSKoaESBGrtbD9WymO3INzYpA65YEqUUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBjlconeiH+0ghQbmGb2+GTl8K4sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDBiMjQ4ZTctM2U3ZC0z
ODVkLWI2YjUtNGFmMTgwNDZlMjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsc8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIKjMNrf2Mq+pQP6qwvQy0s1qFdCez83ti3qVo2xqbcixTs34D9IpYAv
PcS0Cv0uDlxCZPlxtCkQdWoBq5dB9P1E0wWwfroQSK3hI5u6yKEyAIcXfnnO92RU
YMA3ACd2Te+Z6MxQ+9PAliQAcGD8xIxJxT12Binc9PLvuLYBfBxDuevzLzRttFxP
DogQQVWEfXFU/m8U5qhmhx5mFSFQT+gh+ag2pKaVMMOYYR9E2cFMF42MwbEy5l6p
7mZy6ZaFPmoBP9GnP+R9KR3mHM1N+A92Hypn/ub9/drKs75YraccnrNNa8a0XzVP
hvZr1tJRgFuV/L5BtZJy/8jcJ2gYQf4=
-----END CERTIFICATE-----
Generated at Tue Oct 21 21:39:49 2025 by rpki-client