Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98acbb67-1922-3894-9535-7b433f9c2627.roa
File:                     98acbb67-1922-3894-9535-7b433f9c2627.roa (raw, json)
Hash identifier:          uR01em2m5C+aKpGy+6RrijbDSobF7M7Bw28ZfVSzHLo=
Subject key identifier:   A6:8E:54:EE:8F:C8:DA:62:2D:4C:52:2E:24:57:B5:D7:5B:06:77:23
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A8874EE2924912BE70D800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98acbb67-1922-3894-9535-7b433f9c2627.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        76.152.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a8:87:4e:e2:92:49:12:be:70:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=54e0bd78-e3e9-4914-8157-f5a60e0ed9fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cf:13:2e:37:f8:72:59:c2:d5:3a:d6:f5:f0:
                    d8:23:1a:ef:46:f4:aa:af:6c:45:21:6e:d2:72:9b:
                    07:50:a0:07:70:de:ff:26:8b:7e:bf:fc:ac:a1:40:
                    d7:55:cb:81:a2:01:d8:72:d3:d7:a1:a0:d1:a7:70:
                    68:71:40:05:19:e3:68:fb:59:c9:fe:45:14:b1:d6:
                    55:2a:1f:69:8d:ff:76:6d:ae:7d:a8:e7:5b:30:bd:
                    95:c8:ff:2e:4a:b4:8c:0f:7c:1c:1b:13:99:a4:6c:
                    09:4c:21:27:5d:7c:a9:bb:75:b2:a0:05:de:ff:18:
                    d6:1f:d1:e6:fe:a5:8a:bd:9b:23:c9:99:d7:80:ea:
                    b4:e8:5d:de:60:fa:52:9e:99:76:4c:d6:75:48:39:
                    da:e7:84:ad:d5:5a:cb:0a:ed:79:f8:ab:c3:84:ed:
                    3c:12:13:d1:42:d8:c6:5a:02:f8:9c:76:1e:78:7d:
                    94:01:7c:9f:67:2e:bd:e9:8d:10:75:8e:ea:39:66:
                    e9:d5:6a:cc:f6:df:45:99:9c:1d:7b:eb:18:56:5b:
                    cf:3f:5b:15:28:bc:ab:9f:86:4f:f9:ca:2d:ad:b9:
                    23:d0:3b:29:08:35:fa:a7:c7:cf:3f:af:8c:a7:47:
                    9e:f7:68:5b:92:99:b2:d1:ad:2c:6b:ba:ec:ad:5a:
                    0b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:8E:54:EE:8F:C8:DA:62:2D:4C:52:2E:24:57:B5:D7:5B:06:77:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98acbb67-1922-3894-9535-7b433f9c2627.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.152.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:da:90:2c:78:79:bf:fd:c7:f6:de:29:42:cb:15:27:c2:f4:
         9a:42:57:75:9e:f9:e1:44:47:75:ed:14:7b:ba:72:0a:91:fb:
         83:d3:dc:40:d9:55:a0:c0:b9:49:fa:be:26:27:fe:d5:76:06:
         fe:48:ee:23:b0:c3:d0:2c:7b:f4:9a:5d:47:01:8e:a2:bd:dc:
         b7:bd:b2:ba:42:ca:73:9d:d6:d0:47:48:3f:d0:0a:7f:04:95:
         d1:1a:c6:b3:ba:6f:4a:59:04:ae:49:1a:52:02:24:d0:ed:03:
         67:0e:99:b0:43:c8:ad:fd:2f:93:d7:e9:21:fa:7e:2c:2f:b5:
         6a:68:18:a8:dc:9d:b8:0b:45:c0:2d:74:00:19:40:6e:4e:17:
         bb:28:98:27:d9:e5:84:28:1e:6b:ae:0e:50:72:3e:47:08:3a:
         da:bf:75:60:ce:fc:45:bc:30:03:4d:95:7e:05:df:02:06:cc:
         f0:2e:ac:36:a0:8e:58:b2:ad:2f:3d:ab:2d:71:02:98:1c:0d:
         68:cb:56:bb:bf:e3:80:f6:ca:de:9b:a9:08:e9:25:84:fd:ec:
         99:2e:cb:52:3e:e0:9e:71:23:68:53:4d:c1:59:a4:4a:37:a3:
         4f:a8:5d:41:3f:ea:4e:2f:54:0d:73:a5:23:ce:b7:3c:14:b0:
         6b:d7:b7:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqIdO4pJJEr5w2AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk
NTRlMGJkNzgtZTNlOS00OTE0LTgxNTctZjVhNjBlMGVkOWZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc8TLjf4clnC1TrW9fDYIxrvRvSqr2xFIW7S
cpsHUKAHcN7/Jot+v/ysoUDXVcuBogHYctPXoaDRp3BocUAFGeNo+1nJ/kUUsdZV
Kh9pjf92ba59qOdbML2VyP8uSrSMD3wcGxOZpGwJTCEnXXypu3WyoAXe/xjWH9Hm
/qWKvZsjyZnXgOq06F3eYPpSnpl2TNZ1SDna54St1VrLCu15+KvDhO08EhPRQtjG
WgL4nHYeeH2UAXyfZy696Y0QdY7qOWbp1WrM9t9FmZwde+sYVlvPP1sVKLyrn4ZP
+cotrbkj0DspCDX6p8fPP6+Mp0ee92hbkpmy0a0sa7rsrVoLHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKaOVO6PyNpiLUxSLiRXtddbBncjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOThhY2JiNjctMTkyMi0z
ODk0LTk1MzUtN2I0MzNmOWMyNjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTJiYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJHakCx4eb/9x/beKULLFSfC9JpCV3We+eFER3XtFHu6cgqR+4PT3EDZ
VaDAuUn6viYn/tV2Bv5I7iOww9Ase/SaXUcBjqK93Le9srpCynOd1tBHSD/QCn8E
ldEaxrO6b0pZBK5JGlICJNDtA2cOmbBDyK39L5PX6SH6fiwvtWpoGKjcnbgLRcAt
dAAZQG5OF7somCfZ5YQoHmuuDlByPkcIOtq/dWDO/EW8MANNlX4F3wIGzPAurDag
jliyrS89qy1xApgcDWjLVru/44D2yt6bqQjpJYT97Jkuy1I+4J5xI2hTTcFZpEo3
o0+oXUE/6k4vVA1zpSPOtzwUsGvXt/4=
-----END CERTIFICATE-----
Generated at Tue Oct 21 19:45:19 2025 by rpki-client