Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29edb0b3-9a90-38ce-8113-21258ff86c62.roa
File:                     29edb0b3-9a90-38ce-8113-21258ff86c62.roa (raw, json)
Hash identifier:          syiyEyyxIHgq/WORnUYHznT1N0qjJ0tpKlAKL1kRF2g=
Subject key identifier:   7A:5A:A3:D5:0D:15:6C:7D:38:16:57:2E:B3:61:99:11:07:3A:30:0A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C08F30D8B363D1CB96DB140
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29edb0b3-9a90-38ce-8113-21258ff86c62.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        98.42.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:f3:0d:8b:36:3d:1c:b9:6d:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=62786214-c0a6-4ce1-a6f4-4472385fac7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a8:cf:a9:1b:0b:ca:8b:27:9b:09:5a:90:2e:
                    0e:07:4c:6b:c9:3b:62:55:53:d9:e4:b4:05:bc:36:
                    6b:3c:0e:ba:f3:33:be:56:66:51:91:84:44:34:ba:
                    6c:e3:ee:37:ea:ea:c7:aa:02:63:cb:0a:1c:01:ef:
                    03:e9:cb:f8:33:bc:fd:f2:0c:d4:92:da:10:d7:a7:
                    9a:fd:b8:2f:d7:f6:41:7d:0b:79:09:14:bb:62:5d:
                    b1:c8:6c:a6:48:b0:47:19:9c:c4:fb:52:f2:bd:b5:
                    fb:f3:96:47:f4:80:91:25:c7:ca:fb:db:9b:80:79:
                    ff:b9:a4:fb:d7:d2:89:9d:6e:df:99:43:2b:d0:f2:
                    3f:5b:a4:f6:1f:8f:b6:4e:d5:4d:d2:67:05:02:45:
                    1a:72:8c:6a:c6:37:85:59:51:a1:7f:f0:cf:0e:cd:
                    f5:e1:0a:a6:01:d6:6a:ca:05:33:91:e7:e2:dd:91:
                    c5:67:87:a2:a6:74:69:4e:59:47:68:e2:7b:d4:42:
                    d0:2a:c8:36:58:ba:3f:58:d2:a7:67:b1:41:50:c4:
                    4e:42:aa:44:91:0a:f7:30:e6:d3:4f:63:69:d8:06:
                    6f:ea:95:9c:d6:5c:7d:21:f9:39:14:0e:dc:de:5e:
                    7e:c4:99:be:0d:d3:5c:93:21:c7:e0:83:e1:61:fc:
                    e3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:5A:A3:D5:0D:15:6C:7D:38:16:57:2E:B3:61:99:11:07:3A:30:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29edb0b3-9a90-38ce-8113-21258ff86c62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.42.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:3a:c8:75:51:4d:99:0a:fa:8c:de:45:eb:35:f5:11:c8:bd:
         b7:9d:5b:23:2e:e5:a9:9a:b0:6c:45:c8:56:dd:c7:9b:51:95:
         b6:ac:5a:75:bd:96:0b:ba:09:51:24:6d:23:b3:f9:17:60:3c:
         13:e2:a2:5f:fa:23:d3:76:73:66:ec:fe:21:53:2d:93:a0:07:
         1f:ef:f4:1e:f5:95:65:e5:53:7c:02:6a:be:31:97:7d:1b:94:
         f2:12:0b:48:b0:96:36:d0:a7:4f:17:3b:0d:e6:05:68:c3:35:
         ce:c0:b0:95:27:0a:22:01:c2:fb:fd:e7:fd:75:ee:03:57:65:
         a8:98:5b:67:34:45:47:d0:f0:c7:07:b4:0b:0c:a7:4a:8c:1f:
         6f:97:3d:70:39:1f:95:15:56:18:ab:57:f2:11:ec:0c:3c:2e:
         16:58:ec:c1:35:2d:1c:58:45:a0:ca:a7:62:57:4a:0a:9b:27:
         09:6e:a1:fa:53:a7:10:08:6e:31:d3:be:0c:22:d6:c1:b9:72:
         e4:85:e5:54:16:78:f1:98:a3:d7:f9:f9:ff:14:df:d2:79:16:
         48:6e:ef:ed:c2:46:21:ba:71:3b:68:05:44:ff:63:f6:e6:da:
         cb:5a:91:db:9b:80:6d:46:57:c3:2d:c9:dc:0e:80:16:e7:53:
         b4:57:5a:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCPMNizY9HLltsUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
NjI3ODYyMTQtYzBhNi00Y2UxLWE2ZjQtNDQ3MjM4NWZhYzdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmajPqRsLyosnmwlakC4OB0xryTtiVVPZ5LQF
vDZrPA668zO+VmZRkYRENLps4+436urHqgJjywocAe8D6cv4M7z98gzUktoQ16ea
/bgv1/ZBfQt5CRS7Yl2xyGymSLBHGZzE+1LyvbX785ZH9ICRJcfK+9ubgHn/uaT7
19KJnW7fmUMr0PI/W6T2H4+2TtVN0mcFAkUacoxqxjeFWVGhf/DPDs314QqmAdZq
ygUzkefi3ZHFZ4eipnRpTllHaOJ71ELQKsg2WLo/WNKnZ7FBUMROQqpEkQr3MObT
T2Np2AZv6pWc1lx9Ifk5FA7c3l5+xJm+DdNckyHH4IPhYfzjLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHpao9UNFWx9OBZXLrNhmREHOjAKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjllZGIwYjMtOWE5MC0z
OGNlLTgxMTMtMjEyNThmZjg2YzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYiqwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALg6yHVRTZkK+ozeRes19RHIvbedWyMu5amasGxFyFbdx5tRlbasWnW9
lgu6CVEkbSOz+RdgPBPiol/6I9N2c2bs/iFTLZOgBx/v9B71lWXlU3wCar4xl30b
lPISC0iwljbQp08XOw3mBWjDNc7AsJUnCiIBwvv95/117gNXZaiYW2c0RUfQ8McH
tAsMp0qMH2+XPXA5H5UVVhirV/IR7Aw8LhZY7ME1LRxYRaDKp2JXSgqbJwluofpT
pxAIbjHTvgwi1sG5cuSF5VQWePGYo9f5+f8U39J5Fkhu7+3CRiG6cTtoBUT/Y/bm
2stakdubgG1GV8MtydwOgBbnU7RXWpU=
-----END CERTIFICATE-----
Generated at Tue Jun 3 06:59:24 2025 by rpki-client