Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f978c22-e9a5-3499-b795-cbb838778bfe.roa
File:                     1f978c22-e9a5-3499-b795-cbb838778bfe.roa (raw, json)
Hash identifier:          2PAdx5c74IGyQdTgHB1RUj69i4R0DPN3US4yWbdgAns=
Subject key identifier:   1A:14:70:A8:56:1F:72:D5:82:81:4F:DD:BD:99:68:BF:F8:DD:5B:EE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C06BBC13208786501698220
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f978c22-e9a5-3499-b795-cbb838778bfe.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        98.253.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:bb:c1:32:08:78:65:01:69:82:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=fda92110-bb6c-4f2f-97b4-8751bf6de8f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5d:0b:b8:45:68:0b:18:69:cb:fc:98:40:67:
                    90:00:33:2b:1b:ba:9f:14:a1:85:69:de:9e:d3:1d:
                    b9:2a:6e:4b:d8:e5:f1:b2:1b:1a:14:4b:6c:b9:05:
                    16:34:07:2e:a7:bd:6f:02:d6:a6:dd:82:6e:4e:7c:
                    01:21:f3:72:be:2b:de:b8:a4:15:2f:71:07:25:64:
                    aa:a7:83:a5:a5:c1:a7:32:be:00:6b:6f:79:9e:ae:
                    ee:80:b3:7b:38:ff:5d:14:94:31:55:00:96:1a:3a:
                    f4:78:e2:13:fe:5e:40:9c:8c:5e:89:82:c7:37:74:
                    fe:0a:9e:83:e3:4e:f9:b1:16:4f:4f:7f:c4:2b:08:
                    35:03:56:be:87:c9:d5:f8:27:63:4c:78:86:60:ae:
                    83:a2:b1:bc:f9:b5:be:42:5f:a2:0a:de:95:57:8b:
                    cd:42:ec:22:c1:3e:cf:d7:9e:82:95:e5:a2:c9:46:
                    20:55:00:15:d2:7d:19:49:e3:1b:38:ca:5e:cc:59:
                    cc:5a:a2:2f:7d:00:b6:91:81:9f:59:f9:e5:dc:42:
                    01:48:3c:bb:bb:19:a3:9a:07:a7:7b:4c:25:f1:88:
                    8c:ad:19:1b:c0:7d:70:7b:c2:d4:84:0d:22:30:0e:
                    d5:73:3d:c8:95:1a:10:d4:95:35:c8:8e:ae:b2:01:
                    27:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:14:70:A8:56:1F:72:D5:82:81:4F:DD:BD:99:68:BF:F8:DD:5B:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f978c22-e9a5-3499-b795-cbb838778bfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.253.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:49:08:ed:da:77:6d:6b:3d:ba:a4:9c:59:5f:2e:35:da:d1:
         36:f0:ac:58:11:44:82:ab:d2:97:3e:3d:f5:3e:ea:e7:31:f3:
         ba:90:c2:14:d0:fd:2f:fc:6b:ff:5b:9d:b4:5f:97:6c:b1:0d:
         4a:0c:ee:aa:5f:85:6b:02:d7:27:ce:7e:30:60:e3:75:d3:e6:
         19:77:9b:69:ab:8a:98:52:15:f7:18:4d:c0:8d:1f:05:d2:95:
         f6:88:9e:41:e2:20:90:b9:ac:d1:31:5f:79:39:5c:9d:ff:94:
         0e:4d:79:08:af:70:66:ef:18:9c:fd:54:2a:ef:47:c9:32:3a:
         ee:66:de:7e:30:88:03:b8:6c:ca:a8:58:47:74:25:64:93:dc:
         ee:d2:e7:16:df:71:d1:ca:4f:8f:e2:0d:23:81:f6:ed:0e:2a:
         c6:99:43:43:81:5e:2a:ac:eb:a0:48:bd:56:6e:d7:02:19:24:
         e5:9c:27:86:e7:95:b3:da:0d:33:68:80:14:50:d2:53:ab:82:
         24:16:bf:3e:a1:a7:99:f0:57:79:00:d8:19:12:0c:11:90:5c:
         a6:bf:d7:24:25:75:2c:05:38:ca:2f:91:b6:d8:fb:5e:5d:3d:
         26:bb:66:50:e5:37:73:b7:48:54:24:51:fd:b4:5e:24:57:ff:
         22:35:62:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBrvBMgh4ZQFpgiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
ZmRhOTIxMTAtYmI2Yy00ZjJmLTk3YjQtODc1MWJmNmRlOGYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV0LuEVoCxhpy/yYQGeQADMrG7qfFKGFad6e
0x25Km5L2OXxshsaFEtsuQUWNAcup71vAtam3YJuTnwBIfNyviveuKQVL3EHJWSq
p4OlpcGnMr4Aa295nq7ugLN7OP9dFJQxVQCWGjr0eOIT/l5AnIxeiYLHN3T+Cp6D
4075sRZPT3/EKwg1A1a+h8nV+CdjTHiGYK6DorG8+bW+Ql+iCt6VV4vNQuwiwT7P
156CleWiyUYgVQAV0n0ZSeMbOMpezFnMWqIvfQC2kYGfWfnl3EIBSDy7uxmjmgen
e0wl8YiMrRkbwH1we8LUhA0iMA7Vcz3IlRoQ1JU1yI6usgEn7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBoUcKhWH3LVgoFP3b2ZaL/43VvuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWY5NzhjMjItZTlhNS0z
NDk5LWI3OTUtY2JiODM4Nzc4YmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYv3yMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJhJCO3ad21rPbqknFlfLjXa0TbwrFgRRIKr0pc+PfU+6ucx87qQwhTQ
/S/8a/9bnbRfl2yxDUoM7qpfhWsC1yfOfjBg43XT5hl3m2mriphSFfcYTcCNHwXS
lfaInkHiIJC5rNExX3k5XJ3/lA5NeQivcGbvGJz9VCrvR8kyOu5m3n4wiAO4bMqo
WEd0JWST3O7S5xbfcdHKT4/iDSOB9u0OKsaZQ0OBXiqs66BIvVZu1wIZJOWcJ4bn
lbPaDTNogBRQ0lOrgiQWvz6hp5nwV3kA2BkSDBGQXKa/1yQldSwFOMovkbbY+15d
PSa7ZlDlN3O3SFQkUf20XiRX/yI1Yto=
-----END CERTIFICATE-----
Generated at Tue Jun 3 06:17:27 2025 by rpki-client