Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a94f1aa-ec01-3c25-b36e-e4b16a4e9a98.roa
File:                     8a94f1aa-ec01-3c25-b36e-e4b16a4e9a98.roa (raw, json)
Hash identifier:          S6o8KTt26lnklmwcu2Gz1ij2Jplv0aWpNtkEpSlzmc4=
Subject key identifier:   2B:C0:54:58:74:A0:EF:0F:1A:EB:CA:A2:64:00:E8:6C:51:D3:35:7C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A8F8F3CC4EAB7C10A14F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a94f1aa-ec01-3c25-b36e-e4b16a4e9a98.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33668
IP address blocks:        98.243.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a8:f8:f3:cc:4e:ab:7c:10:a1:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=679dd54b-dabf-471b-9763-76a873ed0609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:57:ba:c2:22:ec:ec:be:65:e3:67:0e:36:90:
                    29:ee:f2:c7:77:14:1a:d5:19:ff:8b:a2:99:da:c2:
                    65:a7:a2:33:b5:ac:3a:cd:78:a0:c3:38:e5:17:d2:
                    da:ed:8c:69:e7:7a:cf:36:d4:7b:5b:b7:59:ae:32:
                    71:74:24:91:50:ce:9a:4b:d3:73:73:7c:be:b8:9a:
                    61:32:23:6e:e8:d9:f5:f0:ab:04:6f:95:fb:e7:d9:
                    61:23:a6:54:d3:7b:e8:34:3a:ef:d3:5a:29:e6:6f:
                    7b:ba:36:c5:23:34:25:9c:0f:8d:1a:2d:de:c4:db:
                    9c:f8:4c:2c:7b:7d:db:50:e0:bf:67:78:9d:73:2f:
                    bd:3d:cd:b0:b0:dd:10:c9:75:54:4f:1a:de:59:21:
                    83:9f:47:36:02:6b:6f:6d:ed:d2:aa:8f:df:9c:41:
                    c4:a2:c7:8f:7d:ed:0b:ca:2a:56:47:bc:d3:d3:97:
                    61:97:c6:01:dc:d3:25:12:4f:51:af:84:be:2c:75:
                    24:71:f1:17:a4:93:42:23:b3:f3:21:a4:b0:6e:72:
                    c9:84:55:ba:b7:a3:f4:50:72:ba:8c:0d:9b:d5:e9:
                    f3:d7:db:4c:0f:9b:64:20:a3:7e:16:df:ad:5c:9e:
                    c3:ee:40:c0:aa:bb:3f:0d:02:47:2b:71:c0:4c:80:
                    ad:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C0:54:58:74:A0:EF:0F:1A:EB:CA:A2:64:00:E8:6C:51:D3:35:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a94f1aa-ec01-3c25-b36e-e4b16a4e9a98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.243.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:fc:e7:f0:40:fb:5c:08:ca:14:d8:fd:73:59:1a:11:5c:ff:
         b0:1b:31:11:e5:5a:18:04:15:97:1f:29:17:bf:bc:86:1f:6f:
         93:75:27:c3:4b:7d:d4:eb:67:95:c0:dc:5e:3e:af:fb:15:a6:
         16:8b:f2:be:e6:9b:10:2b:1d:5c:98:b3:d2:a2:29:f7:8a:c4:
         10:a2:b1:76:63:52:95:7f:bf:43:24:80:5a:03:dc:44:93:ad:
         75:84:9a:c6:40:7e:a4:f4:70:8e:5b:ed:72:7e:38:85:65:24:
         f5:21:88:c0:88:27:7c:d8:dd:fe:1f:21:04:d8:60:73:1c:b8:
         50:71:d1:e2:af:45:39:92:d8:de:b0:08:2c:5e:dc:e9:3f:f4:
         74:cc:da:92:11:5c:98:7a:68:40:d1:21:21:02:b8:24:6f:65:
         e1:aa:c7:1a:61:22:31:6d:fe:12:62:eb:c1:a0:e5:ee:45:8e:
         e0:55:a4:c2:60:39:44:d2:c3:c8:03:dd:80:14:a1:45:ec:9c:
         82:9a:ea:15:b2:ef:f2:0c:51:54:2b:1c:04:d6:a4:c1:d1:e0:
         f9:74:43:27:a6:87:1b:85:8e:75:db:4e:a6:c9:38:6f:06:0b:
         5d:5c:79:19:99:7f:24:45:a3:49:c9:07:36:71:fc:be:83:c4:
         ae:43:e6:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqPjzzE6rfBChTwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk
Njc5ZGQ1NGItZGFiZi00NzFiLTk3NjMtNzZhODczZWQwNjA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFe6wiLs7L5l42cONpAp7vLHdxQa1Rn/i6KZ
2sJlp6Iztaw6zXigwzjlF9La7Yxp53rPNtR7W7dZrjJxdCSRUM6aS9Nzc3y+uJph
MiNu6Nn18KsEb5X759lhI6ZU03voNDrv01op5m97ujbFIzQlnA+NGi3exNuc+Ews
e33bUOC/Z3idcy+9Pc2wsN0QyXVUTxreWSGDn0c2Amtvbe3Sqo/fnEHEosePfe0L
yipWR7zT05dhl8YB3NMlEk9Rr4S+LHUkcfEXpJNCI7PzIaSwbnLJhFW6t6P0UHK6
jA2b1enz19tMD5tkIKN+Ft+tXJ7D7kDAqrs/DQJHK3HATICtAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCvAVFh0oO8PGuvKomQA6GxR0zV8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGE5NGYxYWEtZWMwMS0z
YzI1LWIzNmUtZTRiMTZhNGU5YTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvNeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMf85/BA+1wIyhTY/XNZGhFc/7AbMRHlWhgEFZcfKRe/vIYfb5N1J8NL
fdTrZ5XA3F4+r/sVphaL8r7mmxArHVyYs9KiKfeKxBCisXZjUpV/v0MkgFoD3EST
rXWEmsZAfqT0cI5b7XJ+OIVlJPUhiMCIJ3zY3f4fIQTYYHMcuFBx0eKvRTmS2N6w
CCxe3Ok/9HTM2pIRXJh6aEDRISECuCRvZeGqxxphIjFt/hJi68Gg5e5FjuBVpMJg
OUTSw8gD3YAUoUXsnIKa6hWy7/IMUVQrHATWpMHR4Pl0QyemhxuFjnXbTqbJOG8G
C11ceRmZfyRFo0nJBzZx/L6DxK5D5qg=
-----END CERTIFICATE-----
Generated at Tue Oct 21 19:24:03 2025 by rpki-client