Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4311ace1-52e0-336a-9e3c-5a6c1af30d6e.roa
File:                     4311ace1-52e0-336a-9e3c-5a6c1af30d6e.roa (raw, json)
Hash identifier:          swQ0JAqtNeYp/1MxDDc+Fbm27dIs+HSASpP0Lz4sy5w=
Subject key identifier:   0F:3F:9F:0A:91:6E:8A:1C:F4:41:C1:32:92:1D:D8:E2:F1:A4:6F:20
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF75D12629CBCF7086602000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4311ace1-52e0-336a-9e3c-5a6c1af30d6e.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        98.192.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:d1:26:29:cb:cf:70:86:60:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=a1ce9616-c149-4f31-b9c5-63e22b694c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9c:99:9e:0d:62:05:1a:64:5a:cb:0e:c0:60:
                    74:e1:cc:28:77:bd:97:c6:86:d1:55:5e:35:c1:b7:
                    d2:98:07:8f:72:cc:a9:73:32:55:4d:b8:63:90:3f:
                    d9:2d:4c:cd:6a:97:61:56:f7:37:26:4d:02:81:67:
                    84:f2:c3:35:a8:66:37:16:cb:2c:92:15:90:d0:35:
                    36:ac:6f:ed:4c:69:fa:86:db:f6:e0:ed:dd:8d:4a:
                    4e:32:10:77:5f:0f:48:e1:fb:20:9d:31:f7:4e:19:
                    5d:2d:5e:4f:16:2e:f8:71:42:a5:85:ea:f5:a7:c6:
                    d4:bb:65:c3:d5:84:c4:d5:59:7e:f9:86:da:48:97:
                    64:93:07:90:7c:21:d7:1f:dd:5b:74:e0:cf:1f:1f:
                    df:6a:44:20:ab:18:c0:3f:d9:ec:3c:8d:e6:60:ce:
                    60:12:f5:f5:4b:20:92:66:41:c2:91:fd:f0:f8:16:
                    40:d2:e2:21:6b:98:7c:eb:08:79:b9:8d:cb:be:27:
                    71:34:5e:6a:e3:ae:95:e8:d5:55:29:86:82:aa:d8:
                    76:f5:2b:41:2f:8c:b6:23:b7:c7:c3:65:b6:21:b4:
                    a7:65:0b:ef:a6:5f:9b:b1:f1:40:88:b2:e5:0d:95:
                    a8:10:04:c5:bb:b9:5a:88:3c:89:7a:56:1c:75:c3:
                    23:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3F:9F:0A:91:6E:8A:1C:F4:41:C1:32:92:1D:D8:E2:F1:A4:6F:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4311ace1-52e0-336a-9e3c-5a6c1af30d6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.192.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:96:eb:26:b9:d1:1a:32:33:fd:c8:13:41:bc:bc:9a:bc:95:
         97:38:d6:7b:1d:56:e7:96:5f:44:44:df:f1:1b:2e:0e:aa:c9:
         f3:bf:cd:52:7a:87:10:37:02:40:f9:9a:c2:98:c6:12:d0:b2:
         1c:8b:10:d1:96:34:92:76:a4:c6:dd:e2:01:86:e2:9f:4f:cc:
         c3:67:bb:21:4a:a6:14:44:90:c9:40:0d:31:df:d9:94:b6:96:
         c8:42:16:16:d1:98:8e:3d:e0:7b:8f:2e:c5:da:36:d8:04:2d:
         7b:82:38:45:cc:88:ba:6f:57:fb:b8:01:1b:98:81:f1:c2:33:
         99:ea:6f:8d:60:f6:18:0f:9a:e2:20:35:f9:25:e1:4c:d1:ea:
         76:ae:92:6f:ea:fa:3f:73:32:8e:43:08:87:07:2c:91:14:e0:
         29:b5:4b:01:42:f0:26:31:dd:b7:5e:53:48:ba:28:7e:3c:43:
         e2:fa:84:71:3c:c4:64:c1:6f:a3:76:df:ee:a7:0b:b1:88:59:
         94:6c:37:4f:11:0d:90:a7:bd:57:fa:5e:82:4e:75:a5:78:ea:
         95:e4:81:d2:cd:a8:66:1b:f0:60:93:de:fa:4b:1d:43:40:96:
         c6:1f:af:83:43:de:1f:c2:56:16:cd:6b:28:8c:88:e3:7b:d0:
         51:b2:7d:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/ddEmKcvPcIZgIAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk
YTFjZTk2MTYtYzE0OS00ZjMxLWI5YzUtNjNlMjJiNjk0YzFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJyZng1iBRpkWssOwGB04cwod72XxobRVV41
wbfSmAePcsypczJVTbhjkD/ZLUzNapdhVvc3Jk0CgWeE8sM1qGY3FssskhWQ0DU2
rG/tTGn6htv24O3djUpOMhB3Xw9I4fsgnTH3ThldLV5PFi74cUKlher1p8bUu2XD
1YTE1Vl++YbaSJdkkweQfCHXH91bdODPHx/fakQgqxjAP9nsPI3mYM5gEvX1SyCS
ZkHCkf3w+BZA0uIha5h86wh5uY3LvidxNF5q466V6NVVKYaCqth29StBL4y2I7fH
w2W2IbSnZQvvpl+bsfFAiLLlDZWoEATFu7laiDyJelYcdcMj1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA8/nwqRbooc9EHBMpId2OLxpG8gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDMxMWFjZTEtNTJlMC0z
MzZhLTllM2MtNWE2YzFhZjMwZDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYsAwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL+W6ya50RoyM/3IE0G8vJq8lZc41nsdVueWX0RE3/EbLg6qyfO/zVJ6
hxA3AkD5msKYxhLQshyLENGWNJJ2pMbd4gGG4p9PzMNnuyFKphREkMlADTHf2ZS2
lshCFhbRmI494HuPLsXaNtgELXuCOEXMiLpvV/u4ARuYgfHCM5nqb41g9hgPmuIg
Nfkl4UzR6naukm/q+j9zMo5DCIcHLJEU4Cm1SwFC8CYx3bdeU0i6KH48Q+L6hHE8
xGTBb6N23+6nC7GIWZRsN08RDZCnvVf6XoJOdaV46pXkgdLNqGYb8GCT3vpLHUNA
lsYfr4ND3h/CVhbNayiMiON70FGyfdA=
-----END CERTIFICATE-----
Generated at Tue Jun 3 05:54:16 2025 by rpki-client