Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d76a572-e8d2-3598-b42a-286cd8add7b1.roa
File:                     4d76a572-e8d2-3598-b42a-286cd8add7b1.roa (raw, json)
Hash identifier:          nPwBljT5i81T9dsbXK7tbpf389r0+YDndLR1JWQs46U=
Subject key identifier:   B7:D2:D4:C0:E5:47:63:9F:65:90:96:C8:E2:E4:72:E2:CA:45:95:12
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C06B2AD3516BFDA129F9E30
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d76a572-e8d2-3598-b42a-286cd8add7b1.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        98.222.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:b2:ad:35:16:bf:da:12:9f:9e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=69fa7c90-6deb-4301-b8ef-1e380460ebfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:16:65:9d:7c:db:72:25:a1:85:d3:18:49:97:
                    6e:ef:ed:e3:69:91:4b:3f:99:57:c5:a9:8c:c3:b6:
                    5f:c9:7f:cf:80:f4:0d:37:bf:d1:83:61:e1:c6:fb:
                    f5:27:1a:24:15:17:a3:52:9a:07:f6:b0:c0:51:2c:
                    fc:04:20:19:31:7a:1e:97:f4:05:85:bf:c3:f8:f2:
                    06:8c:6b:af:89:c4:58:9d:ce:24:ab:a1:ed:96:e3:
                    4b:e0:ad:a3:43:32:c6:2b:9b:b1:8d:ea:51:81:5a:
                    d8:db:47:ec:c7:02:c5:b3:62:fb:54:b7:49:c0:c7:
                    51:fe:fd:59:7e:89:f4:99:89:fe:9b:54:cb:c6:b7:
                    b0:a0:7e:df:05:97:fa:de:ff:03:26:66:b4:d4:5e:
                    6c:17:df:b0:fd:e4:10:97:bb:3f:3a:ca:6c:4c:9e:
                    b7:37:3f:2c:6b:41:02:f3:28:0c:a2:45:d2:22:05:
                    c6:a9:10:33:f2:1b:02:d2:98:3d:ef:e2:62:5d:39:
                    9b:d7:37:de:ec:f0:f1:ff:9a:ae:2d:02:39:38:43:
                    9a:a2:6c:51:3a:bb:81:67:56:f8:86:13:c3:e7:1c:
                    2f:a8:00:4b:7d:20:e7:73:9e:69:da:8f:e0:32:45:
                    0f:72:24:3c:11:25:62:15:12:75:c5:ab:c8:f2:fc:
                    37:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D2:D4:C0:E5:47:63:9F:65:90:96:C8:E2:E4:72:E2:CA:45:95:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d76a572-e8d2-3598-b42a-286cd8add7b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.222.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:99:ca:7d:39:af:02:2f:6c:ab:4e:68:80:89:eb:5d:b7:0d:
         fc:b2:31:75:57:ff:6d:b7:8a:6d:77:96:6a:37:4b:4e:3a:27:
         65:29:f8:df:dc:fe:b5:37:2a:cc:21:1c:8a:86:3d:d2:e4:cb:
         2d:53:71:e2:00:cb:7b:62:ca:7e:7a:0f:c1:68:99:08:a2:32:
         bd:00:3f:91:1a:a1:f6:c6:02:3e:09:50:fd:95:64:4c:9e:18:
         34:60:d6:d6:f1:03:c3:10:69:3f:d2:f8:5e:c3:8c:23:72:d6:
         89:72:98:01:c4:56:52:4e:67:4e:1a:03:fa:be:c6:e9:33:c6:
         a5:08:d5:a6:21:54:9c:4d:41:06:67:1c:30:1e:cb:e6:e5:30:
         4c:7a:91:3e:8d:58:b2:8d:c4:73:df:1d:56:72:28:42:84:e5:
         0c:38:3f:1d:c3:db:d9:2c:d4:93:58:ea:88:00:64:b8:09:9c:
         a4:57:a4:cf:01:85:0f:9b:a7:c6:a0:06:35:cb:4b:9c:10:66:
         c2:b9:1c:05:06:49:9a:d0:98:42:b1:fe:99:46:2f:c4:d6:35:
         0e:3e:2e:ef:ac:c9:28:52:68:f1:72:6c:c9:a1:e8:fb:f7:f4:
         a6:cb:14:70:5d:de:cc:78:54:06:5f:01:ab:d5:81:81:e6:da:
         7b:4a:9b:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBrKtNRa/2hKfnjAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
NjlmYTdjOTAtNmRlYi00MzAxLWI4ZWYtMWUzODA0NjBlYmZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxZlnXzbciWhhdMYSZdu7+3jaZFLP5lXxamM
w7ZfyX/PgPQNN7/Rg2Hhxvv1JxokFRejUpoH9rDAUSz8BCAZMXoel/QFhb/D+PIG
jGuvicRYnc4kq6HtluNL4K2jQzLGK5uxjepRgVrY20fsxwLFs2L7VLdJwMdR/v1Z
fon0mYn+m1TLxrewoH7fBZf63v8DJma01F5sF9+w/eQQl7s/OspsTJ63Nz8sa0EC
8ygMokXSIgXGqRAz8hsC0pg97+JiXTmb1zfe7PDx/5quLQI5OEOaomxROruBZ1b4
hhPD5xwvqABLfSDnc55p2o/gMkUPciQ8ESViFRJ1xavI8vw3CwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLfS1MDlR2OfZZCWyOLkcuLKRZUSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGQ3NmE1NzItZThkMi0z
NTk4LWI0MmEtMjg2Y2Q4YWRkN2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYt60MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA+Zyn05rwIvbKtOaICJ6123DfyyMXVX/223im13lmo3S046J2Up+N/c
/rU3KswhHIqGPdLkyy1TceIAy3tiyn56D8FomQiiMr0AP5EaofbGAj4JUP2VZEye
GDRg1tbxA8MQaT/S+F7DjCNy1olymAHEVlJOZ04aA/q+xukzxqUI1aYhVJxNQQZn
HDAey+blMEx6kT6NWLKNxHPfHVZyKEKE5Qw4Px3D29ks1JNY6ogAZLgJnKRXpM8B
hQ+bp8agBjXLS5wQZsK5HAUGSZrQmEKx/plGL8TWNQ4+Lu+syShSaPFybMmh6Pv3
9KbLFHBd3sx4VAZfAavVgYHm2ntKm5Y=
-----END CERTIFICATE-----
Generated at Tue Jun 3 06:27:55 2025 by rpki-client