Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e1dfb2e-63d1-3c08-a08e-bf28f3d14e23.roa
File:                     8e1dfb2e-63d1-3c08-a08e-bf28f3d14e23.roa (raw, json)
Hash identifier:          lsViFfCe8WoQ+/EHGrvQK92GB1uAPTzV2Vv3eOSm7JU=
Subject key identifier:   4D:8A:48:83:6C:F7:79:8D:94:03:94:1A:1C:14:CB:CD:36:F7:E4:F6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D43157F851BF11DFC9D1BC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e1dfb2e-63d1-3c08-a08e-bf28f3d14e23.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33490
IP address blocks:        98.232.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:57:f8:51:bf:11:df:c9:d1:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=3799df7a-6012-4d93-b251-3e3f074ec86b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:70:aa:92:e4:2b:67:6b:ae:dc:6d:0e:73:38:
                    c2:bc:df:b9:9d:5e:f5:04:3d:44:1f:2a:ae:ef:fa:
                    87:1f:cc:d9:3d:1e:81:14:9f:89:2e:93:56:a6:1f:
                    fc:ff:63:88:93:84:8c:23:0f:f1:45:f4:e5:6a:3e:
                    74:4a:e3:36:59:66:75:15:a0:7f:24:b0:4f:32:76:
                    b6:8c:c7:bf:a6:87:2e:35:32:43:2b:26:51:7d:54:
                    65:0d:ad:25:a6:49:43:6c:09:21:41:91:23:43:82:
                    4f:23:48:27:d9:9c:c3:ed:cc:96:02:97:7c:f9:48:
                    42:9c:0f:68:87:9d:c3:c9:14:28:0a:8d:b3:0b:b6:
                    5a:21:b5:16:bd:77:cc:6b:96:50:e2:21:7e:09:a2:
                    43:86:d5:03:aa:b6:28:5b:0e:a2:aa:9b:bc:de:a9:
                    9b:1b:ae:c3:09:8e:54:81:10:33:66:fc:24:0f:db:
                    2e:0d:b5:9c:55:45:54:28:ff:46:2c:7c:73:c4:51:
                    f4:07:07:a5:bc:5f:b1:84:2f:ed:02:73:00:c2:c6:
                    57:af:cc:1a:18:31:b3:0e:ef:b6:33:09:f5:bb:8a:
                    e5:f3:00:8f:d5:e5:7b:e1:d1:c1:40:b4:d6:53:af:
                    24:f6:d4:97:ce:2a:68:8e:71:1c:18:61:17:fb:ff:
                    02:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:8A:48:83:6C:F7:79:8D:94:03:94:1A:1C:14:CB:CD:36:F7:E4:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e1dfb2e-63d1-3c08-a08e-bf28f3d14e23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.232.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:bf:68:3c:3f:a1:27:0f:9d:1b:ca:80:60:50:23:1b:95:00:
         60:3b:5c:d1:e7:f3:90:c5:6c:75:3d:cd:c8:e4:48:a2:56:8c:
         c5:83:46:d3:9d:8d:87:b2:ce:81:05:f5:82:55:99:aa:09:94:
         54:af:64:65:de:6c:a0:12:77:69:b0:0f:4e:88:51:3b:8d:b3:
         f7:15:32:88:fb:b0:a0:c3:b7:b0:68:98:06:d8:7d:4d:12:f3:
         03:9a:65:8d:90:75:52:f9:bf:43:9c:b2:03:a3:e7:12:c6:82:
         81:dc:a3:e4:4e:da:db:12:b4:8c:ea:e7:30:cf:4e:9f:6a:f9:
         c3:2f:68:dd:af:d4:17:b7:94:e3:c4:fa:70:48:f8:7f:97:81:
         30:2c:e1:ac:54:c4:d7:b4:12:34:92:d1:01:6b:69:94:5a:b4:
         19:99:42:cb:5b:73:db:5e:7d:fa:3b:4f:d3:d3:d4:bf:8c:22:
         cb:63:73:4e:3d:a1:be:94:a7:c5:87:05:16:bc:92:3d:a8:10:
         85:31:6c:7e:d3:69:42:3e:e9:9f:24:44:80:5b:81:fa:bb:5b:
         ac:bd:f2:21:05:0e:f6:2c:55:78:b0:c1:b7:31:60:8a:50:b6:
         d4:d7:c4:7e:63:33:be:7d:d2:bf:c6:49:14:2e:67:75:0f:10:
         80:ec:29:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMVf4Ub8R38nRvAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
Mzc5OWRmN2EtNjAxMi00ZDkzLWIyNTEtM2UzZjA3NGVjODZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHCqkuQrZ2uu3G0OczjCvN+5nV71BD1EHyqu
7/qHH8zZPR6BFJ+JLpNWph/8/2OIk4SMIw/xRfTlaj50SuM2WWZ1FaB/JLBPMna2
jMe/pocuNTJDKyZRfVRlDa0lpklDbAkhQZEjQ4JPI0gn2ZzD7cyWApd8+UhCnA9o
h53DyRQoCo2zC7ZaIbUWvXfMa5ZQ4iF+CaJDhtUDqrYoWw6iqpu83qmbG67DCY5U
gRAzZvwkD9suDbWcVUVUKP9GLHxzxFH0BwelvF+xhC/tAnMAwsZXr8waGDGzDu+2
Mwn1u4rl8wCP1eV74dHBQLTWU68k9tSXzipojnEcGGEX+/8CWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE2KSINs93mNlAOUGhwUy8029+T2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGUxZGZiMmUtNjNkMS0z
YzA4LWEwOGUtYmYyOGYzZDE0ZTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYujoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADS/aDw/oScPnRvKgGBQIxuVAGA7XNHn85DFbHU9zcjkSKJWjMWDRtOd
jYeyzoEF9YJVmaoJlFSvZGXebKASd2mwD06IUTuNs/cVMoj7sKDDt7BomAbYfU0S
8wOaZY2QdVL5v0OcsgOj5xLGgoHco+RO2tsStIzq5zDPTp9q+cMvaN2v1Be3lOPE
+nBI+H+XgTAs4axUxNe0EjSS0QFraZRatBmZQstbc9teffo7T9PT1L+MIstjc049
ob6Up8WHBRa8kj2oEIUxbH7TaUI+6Z8kRIBbgfq7W6y98iEFDvYsVXiwwbcxYIpQ
ttTXxH5jM7590r/GSRQuZ3UPEIDsKQU=
-----END CERTIFICATE-----
Generated at Tue Jun 3 04:48:35 2025 by rpki-client