Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72aeedf7-bd17-31e8-a54b-9132c9a8ef18.roa
File:                     72aeedf7-bd17-31e8-a54b-9132c9a8ef18.roa (raw, json)
Hash identifier:          TjUPgTqN5Qp+aTWMO8mZJzo3Bup5bV/ILmxuky67djk=
Subject key identifier:   55:15:63:0E:1C:B9:A9:A9:61:E1:C1:CF:00:00:7C:E4:32:C4:9C:C8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D43236224A7440681217EBD0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72aeedf7-bd17-31e8-a54b-9132c9a8ef18.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33668
IP address blocks:        98.250.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:36:22:4a:74:40:68:12:17:eb:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=90948304-e370-49f0-a69e-1507e11db774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:22:f1:92:0b:94:aa:0d:09:ac:7c:92:54:ac:
                    5e:07:74:33:fe:84:05:98:6c:9a:06:ea:8c:c9:59:
                    b2:a1:33:6d:8f:ff:04:a4:bb:be:3d:c3:1b:47:da:
                    b4:8a:34:3c:80:3e:8f:ba:f0:12:79:64:c0:c4:a5:
                    10:2e:26:93:38:13:13:c8:f4:9f:8d:bd:21:65:52:
                    ad:a3:e4:7c:11:7d:80:a3:85:a4:a5:57:2b:08:b7:
                    dd:54:b4:ff:1b:50:12:34:e7:aa:43:f7:f9:4a:24:
                    c0:7f:54:45:2b:5f:78:cb:97:13:e4:28:e4:0d:5f:
                    35:0c:df:47:fb:28:35:e0:df:51:36:d7:14:3d:f6:
                    f8:47:60:73:23:ca:52:1f:b8:f2:72:a1:1a:98:b7:
                    fd:6d:88:86:93:ed:95:d7:5c:e4:89:4b:14:0a:0d:
                    55:b4:9a:82:85:b5:51:42:45:f3:77:dc:f8:06:e5:
                    93:4d:71:2c:c1:24:3f:06:0e:e6:af:ed:32:8f:3f:
                    80:11:25:91:9b:40:cd:11:4a:d8:bd:d5:ff:eb:85:
                    8c:90:7b:a4:af:42:3c:3f:61:05:5d:47:d7:e6:42:
                    3d:e5:eb:12:13:a1:2f:34:0a:8c:2f:32:be:1a:44:
                    6a:8c:66:96:b9:ae:ee:c4:3d:6f:94:83:ed:74:0d:
                    5c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:15:63:0E:1C:B9:A9:A9:61:E1:C1:CF:00:00:7C:E4:32:C4:9C:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72aeedf7-bd17-31e8-a54b-9132c9a8ef18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.250.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:d7:f6:b3:58:e6:61:69:d4:f6:5a:29:82:b6:ae:06:56:b1:
         b3:bd:5c:37:39:9c:e5:56:ce:73:50:99:8e:a7:18:ab:36:18:
         30:8d:5b:75:82:e4:94:85:5a:1c:cf:5e:a6:01:8d:54:b5:a7:
         3f:40:a4:13:47:8a:16:e6:43:90:28:97:97:85:df:ac:1e:09:
         0c:9f:a7:ee:10:1a:a5:a4:21:e0:70:9a:46:82:93:e3:88:3e:
         3f:57:3c:73:cd:83:4d:58:17:40:e0:f8:97:4c:f4:d4:65:24:
         30:22:2d:b5:3d:99:7b:79:5c:dc:9f:be:e4:3b:cf:97:09:52:
         ed:a5:c0:92:37:5c:a2:4a:fa:3a:d3:56:ee:e7:ff:a7:99:67:
         65:d3:f9:8c:df:ba:70:e1:34:ed:2f:52:71:c9:fc:27:4d:19:
         c1:bc:36:b7:d9:a2:e0:a2:9b:cd:a0:cc:25:e8:02:dc:55:5f:
         ef:dd:d1:2f:af:bf:a5:d0:40:d3:0f:11:09:6e:cf:47:a6:d0:
         a3:a9:e2:88:99:9a:6f:2d:cd:47:af:a9:54:cc:1e:8a:b8:6b:
         b4:a5:5e:bd:5c:e5:03:c8:ef:e3:9e:c6:11:32:70:a4:80:81:
         ef:1b:71:fe:28:dd:06:0e:3f:c3:3b:ca:33:18:f3:9a:16:64:
         c1:78:e5:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMjYiSnRAaBIX69AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
OTA5NDgzMDQtZTM3MC00OWYwLWE2OWUtMTUwN2UxMWRiNzc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyLxkguUqg0JrHySVKxeB3Qz/oQFmGyaBuqM
yVmyoTNtj/8EpLu+PcMbR9q0ijQ8gD6PuvASeWTAxKUQLiaTOBMTyPSfjb0hZVKt
o+R8EX2Ao4WkpVcrCLfdVLT/G1ASNOeqQ/f5SiTAf1RFK194y5cT5CjkDV81DN9H
+yg14N9RNtcUPfb4R2BzI8pSH7jycqEamLf9bYiGk+2V11zkiUsUCg1VtJqChbVR
QkXzd9z4BuWTTXEswSQ/Bg7mr+0yjz+AESWRm0DNEUrYvdX/64WMkHukr0I8P2EF
XUfX5kI95esSE6EvNAqMLzK+GkRqjGaWua7uxD1vlIPtdA1chwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFUVYw4cuampYeHBzwAAfOQyxJzIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzJhZWVkZjctYmQxNy0z
MWU4LWE1NGItOTEzMmM5YThlZjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvoQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHbX9rNY5mFp1PZaKYK2rgZWsbO9XDc5nOVWznNQmY6nGKs2GDCNW3WC
5JSFWhzPXqYBjVS1pz9ApBNHihbmQ5Aol5eF36weCQyfp+4QGqWkIeBwmkaCk+OI
Pj9XPHPNg01YF0Dg+JdM9NRlJDAiLbU9mXt5XNyfvuQ7z5cJUu2lwJI3XKJK+jrT
Vu7n/6eZZ2XT+YzfunDhNO0vUnHJ/CdNGcG8NrfZouCim82gzCXoAtxVX+/d0S+v
v6XQQNMPEQluz0em0KOp4oiZmm8tzUevqVTMHoq4a7SlXr1c5QPI7+OexhEycKSA
ge8bcf4o3QYOP8M7yjMY85oWZMF45WY=
-----END CERTIFICATE-----
Generated at Tue Jun 3 04:55:40 2025 by rpki-client