Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3818ef4c-b034-3ae1-9805-699e8e957762.roa
File:                     3818ef4c-b034-3ae1-9805-699e8e957762.roa (raw, json)
Hash identifier:          GM7aBk5MLiIGiiOXxtV4phqETCrhYpZAWcIv/xvPwQI=
Subject key identifier:   A3:D9:9F:7F:58:9F:74:B9:94:6C:AB:60:52:CD:EE:43:85:6F:19:DE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AAFB9AF2A33AE7A7D25000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3818ef4c-b034-3ae1-9805-699e8e957762.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        98.57.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:fb:9a:f2:a3:3a:e7:a7:d2:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=72754ff3-b701-4083-8cba-315988938f06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:30:1b:ce:11:77:84:8f:8d:cf:b4:23:9c:c3:
                    19:c4:30:50:fe:3b:d7:72:89:fc:6d:d3:59:08:8f:
                    e6:c9:43:a2:3f:21:29:e5:72:f2:c3:86:99:79:e4:
                    15:12:2c:c1:f2:b8:25:dc:d0:02:f6:f9:2d:1f:ca:
                    25:80:15:58:0e:2f:0e:98:37:98:44:2a:b5:4c:b0:
                    8e:57:31:75:97:7d:de:17:04:d2:a2:d4:be:ad:19:
                    4e:09:a4:77:d4:e9:2a:d2:99:c2:53:35:40:0b:1c:
                    d9:4a:1a:67:49:ad:57:af:e3:fe:dc:f1:48:bc:73:
                    6d:55:d0:65:84:3c:cd:2e:1f:a3:3d:1e:1e:4f:fd:
                    47:d9:07:03:9d:b6:55:ea:99:39:4f:0d:f2:32:ea:
                    b8:25:02:13:43:1c:c0:75:ef:3c:11:dc:5c:4e:68:
                    74:09:5c:22:2d:94:07:cf:e8:ff:6f:fe:c0:d6:c7:
                    70:9d:3f:ce:6d:13:7a:f0:69:f2:e1:55:2a:87:84:
                    7f:6f:85:d2:34:19:75:30:34:08:ce:74:3d:ed:91:
                    89:4e:97:da:59:46:d0:8f:8b:d4:fc:ca:97:38:6e:
                    f5:d6:f4:c2:b4:cc:f4:8b:82:04:35:bc:73:b2:5e:
                    98:ec:08:57:1e:72:0a:8c:9b:88:03:c3:a0:1e:1c:
                    ee:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D9:9F:7F:58:9F:74:B9:94:6C:AB:60:52:CD:EE:43:85:6F:19:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3818ef4c-b034-3ae1-9805-699e8e957762.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.57.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:28:ba:6b:c3:19:c0:be:86:ae:7c:75:39:47:6c:c4:4a:e4:
         32:4d:24:2c:78:49:e8:a3:be:b9:54:d3:13:1d:44:e4:13:f4:
         57:26:54:81:a6:dc:98:c4:dc:55:02:7f:04:6e:ec:0f:fa:5e:
         d4:93:fc:18:5e:61:5b:24:ab:87:6a:e5:12:e8:08:2c:7e:52:
         fa:55:da:df:86:ac:a7:9b:80:90:49:a5:3a:25:eb:d8:1e:55:
         6d:b1:82:7a:ee:04:12:ae:34:b3:9f:52:1f:bc:89:98:b3:56:
         b1:fc:94:e2:ca:da:4b:c9:fd:77:ad:fd:47:15:a4:12:8c:86:
         c5:10:af:4a:6d:73:94:76:94:d6:69:50:02:19:ea:4e:55:3a:
         7b:ee:35:8c:ec:91:c8:6a:e4:dd:52:ab:f7:2f:7e:c7:4d:6c:
         77:d6:6f:e6:b9:e1:f4:27:b2:7b:c1:dd:47:34:5f:15:1b:58:
         29:0a:3b:21:3b:d0:37:02:c1:86:8c:05:30:31:33:48:ac:50:
         37:df:e2:e7:82:cc:9e:c2:cb:18:6a:d2:e7:54:66:b9:b1:71:
         39:0e:05:88:02:67:29:f4:de:bd:91:6a:d1:7d:36:ee:f7:03:
         fd:8e:91:ce:d7:dd:4e:13:53:23:21:b2:55:21:db:43:f0:15:
         a8:c4:85:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqvua8qM656fSUAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk
NzI3NTRmZjMtYjcwMS00MDgzLThjYmEtMzE1OTg4OTM4ZjA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzAbzhF3hI+Nz7QjnMMZxDBQ/jvXcon8bdNZ
CI/myUOiPyEp5XLyw4aZeeQVEizB8rgl3NAC9vktH8olgBVYDi8OmDeYRCq1TLCO
VzF1l33eFwTSotS+rRlOCaR31Okq0pnCUzVACxzZShpnSa1Xr+P+3PFIvHNtVdBl
hDzNLh+jPR4eT/1H2QcDnbZV6pk5Tw3yMuq4JQITQxzAde88EdxcTmh0CVwiLZQH
z+j/b/7A1sdwnT/ObRN68Gny4VUqh4R/b4XSNBl1MDQIznQ97ZGJTpfaWUbQj4vU
/MqXOG711vTCtMz0i4IENbxzsl6Y7AhXHnIKjJuIA8OgHhzuqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKPZn39Yn3S5lGyrYFLN7kOFbxneMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzgxOGVmNGMtYjAzNC0z
YWUxLTk4MDUtNjk5ZThlOTU3NzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYjlwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMwoumvDGcC+hq58dTlHbMRK5DJNJCx4SeijvrlU0xMdROQT9FcmVIGm
3JjE3FUCfwRu7A/6XtST/BheYVskq4dq5RLoCCx+UvpV2t+GrKebgJBJpTol69ge
VW2xgnruBBKuNLOfUh+8iZizVrH8lOLK2kvJ/Xet/UcVpBKMhsUQr0ptc5R2lNZp
UAIZ6k5VOnvuNYzskchq5N1Sq/cvfsdNbHfWb+a54fQnsnvB3Uc0XxUbWCkKOyE7
0DcCwYaMBTAxM0isUDff4ueCzJ7Cyxhq0udUZrmxcTkOBYgCZyn03r2RatF9Nu73
A/2Okc7X3U4TUyMhslUh20PwFajEhbc=
-----END CERTIFICATE-----
Generated at Tue Oct 21 22:03:10 2025 by rpki-client