Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39308ae1-69fd-31cd-89ee-f14af5bb5be1.roa
File:                     39308ae1-69fd-31cd-89ee-f14af5bb5be1.roa (raw, json)
Hash identifier:          8i0vBeOS4G3MVIBuhR8vePm5ywarjSOus2dCRVBnrL8=
Subject key identifier:   A1:E3:B5:3F:BC:5D:4A:E8:1A:F7:C6:23:4B:B4:AA:8E:43:F6:75:67
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AAE8A2455A0E4A9D217CC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39308ae1-69fd-31cd-89ee-f14af5bb5be1.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        98.199.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:e8:a2:45:5a:0e:4a:9d:21:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=7974334f-35aa-4b2d-a7d9-aa2747bb4234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:00:b0:92:14:aa:57:60:71:c4:bd:d0:4e:3c:
                    46:23:fb:f6:c5:33:ec:51:82:cb:3d:7d:a3:9f:09:
                    29:96:ee:5d:5f:b0:8a:3c:5c:86:46:37:a0:93:db:
                    dc:f6:e7:ca:f4:3f:8c:11:2a:7d:a0:e9:b6:2c:49:
                    01:dd:8b:df:eb:90:35:c5:24:70:76:0c:18:a0:7d:
                    4f:8f:6a:01:5a:7a:a1:ba:17:21:de:d3:c0:77:e4:
                    17:45:33:2b:db:9f:92:0a:9e:e2:44:27:40:ef:7e:
                    bc:43:f7:a5:a8:e8:08:1a:d6:de:a6:0e:d4:06:71:
                    11:6f:05:c7:9a:22:7b:d2:d6:00:7a:3d:a4:71:ba:
                    6f:df:44:42:dd:35:16:4f:2c:14:57:e4:ce:9b:7c:
                    ea:00:d3:94:92:d3:a6:56:97:06:22:42:ab:4f:6b:
                    b3:4f:49:01:cd:f8:f9:6f:f6:4a:61:8a:47:f7:38:
                    06:54:6f:3e:1c:55:f8:db:26:1c:f2:1a:47:01:aa:
                    82:07:42:85:af:5c:e1:f7:a4:84:e4:62:e0:20:75:
                    d6:2a:f2:58:70:53:ca:43:26:64:3c:82:bd:b8:d2:
                    53:b1:d3:1c:df:3e:85:c9:9d:50:0b:f0:36:87:30:
                    44:95:0a:78:bb:60:a6:9b:dd:73:1d:b6:37:b9:98:
                    f3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E3:B5:3F:BC:5D:4A:E8:1A:F7:C6:23:4B:B4:AA:8E:43:F6:75:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39308ae1-69fd-31cd-89ee-f14af5bb5be1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.199.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:7f:d0:63:5f:dc:55:04:50:63:a0:47:e4:5d:48:e3:c7:bf:
         8f:18:0d:0a:f5:c0:b6:85:be:ad:18:56:ea:f2:32:4f:39:87:
         66:c5:8f:54:d8:8a:e7:3f:2b:ef:a2:4a:14:c9:fe:a4:6d:05:
         34:a4:4a:22:98:85:0d:e0:1f:7f:92:19:18:28:1a:95:26:a1:
         72:87:cd:82:17:13:02:71:4d:c4:8b:ef:48:9f:ff:3c:88:1a:
         54:60:be:1e:d9:24:83:d7:ff:07:6b:56:a3:57:fe:fe:3d:7d:
         9b:34:ae:15:c9:fe:c1:08:7b:df:42:a2:ae:7c:c0:b7:40:dc:
         f7:f7:85:cd:5f:56:08:89:fb:68:b2:86:df:54:97:85:54:98:
         76:22:3e:b8:dc:84:05:ae:b4:37:22:fa:21:d3:d4:b0:a9:23:
         9f:b0:f7:a2:1c:17:6e:3f:d3:69:bb:1b:0a:60:b9:ef:8e:6e:
         ba:06:13:55:e6:f8:86:c1:1d:30:78:aa:8d:55:89:ee:71:91:
         b0:d4:b0:53:d5:bd:d9:ea:65:0b:65:76:d5:e6:31:81:22:27:
         d3:bc:f7:49:d7:f1:73:03:47:53:e2:fe:30:2e:a3:11:b7:d1:
         d7:92:c0:26:74:a7:64:73:21:64:df:b5:3f:c3:1e:7c:ae:0d:
         b5:14:7b:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVquiiRVoOSp0hfMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk
Nzk3NDMzNGYtMzVhYS00YjJkLWE3ZDktYWEyNzQ3YmI0MjM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgCwkhSqV2BxxL3QTjxGI/v2xTPsUYLLPX2j
nwkplu5dX7CKPFyGRjegk9vc9ufK9D+MESp9oOm2LEkB3Yvf65A1xSRwdgwYoH1P
j2oBWnqhuhch3tPAd+QXRTMr25+SCp7iRCdA7368Q/elqOgIGtbepg7UBnERbwXH
miJ70tYAej2kcbpv30RC3TUWTywUV+TOm3zqANOUktOmVpcGIkKrT2uzT0kBzfj5
b/ZKYYpH9zgGVG8+HFX42yYc8hpHAaqCB0KFr1zh96SE5GLgIHXWKvJYcFPKQyZk
PIK9uNJTsdMc3z6FyZ1QC/A2hzBElQp4u2Cmm91zHbY3uZjzmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKHjtT+8XUroGvfGI0u0qo5D9nVnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzkzMDhhZTEtNjlmZC0z
MWNkLTg5ZWUtZjE0YWY1YmI1YmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYscEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACx/0GNf3FUEUGOgR+RdSOPHv48YDQr1wLaFvq0YVuryMk85h2bFj1TY
iuc/K++iShTJ/qRtBTSkSiKYhQ3gH3+SGRgoGpUmoXKHzYIXEwJxTcSL70if/zyI
GlRgvh7ZJIPX/wdrVqNX/v49fZs0rhXJ/sEIe99Coq58wLdA3Pf3hc1fVgiJ+2iy
ht9Ul4VUmHYiPrjchAWutDci+iHT1LCpI5+w96IcF24/02m7Gwpgue+ObroGE1Xm
+IbBHTB4qo1Vie5xkbDUsFPVvdnqZQtldtXmMYEiJ9O890nX8XMDR1Pi/jAuoxG3
0deSwCZ0p2RzIWTftT/DHnyuDbUUe64=
-----END CERTIFICATE-----
Generated at Wed Oct 22 03:08:14 2025 by rpki-client