Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5db049f-7569-38bf-aa81-a3fa61f3be50.roa
File:                     c5db049f-7569-38bf-aa81-a3fa61f3be50.roa (raw, json)
Hash identifier:          fGF6Y2zd7L79MKSFi/eEP1YIOYnku5fDZSpHKs542rg=
Subject key identifier:   FF:6A:0E:24:4E:80:ED:30:2C:E8:21:9D:96:E4:12:A0:8D:6D:C4:1C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF75D5AECF6DABE62E24E180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5db049f-7569-38bf-aa81-a3fa61f3be50.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        98.252.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:d5:ae:cf:6d:ab:e6:2e:24:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=f1903562-0ca8-41e8-a3fc-9c75701b1877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:40:2d:56:47:06:22:d5:98:62:04:ba:7c:96:
                    36:76:ae:df:8e:7b:05:c0:4a:4e:54:94:b4:26:58:
                    c6:27:4b:3e:85:53:7e:92:dc:97:bc:90:be:f2:d6:
                    d4:5e:96:3e:c6:d6:9d:72:ca:fe:d4:3d:5f:5f:bc:
                    d9:1d:03:7d:73:38:68:95:cf:dc:12:3f:f8:7b:ae:
                    aa:87:b5:b1:fa:37:59:e7:99:39:5c:cb:d8:71:a7:
                    7d:7f:e4:4e:1f:de:dd:78:b7:cd:6a:b6:74:7b:25:
                    2b:8a:5b:0c:ac:8e:27:87:94:68:47:e5:e2:2d:25:
                    70:5c:6f:77:09:7e:9a:cd:58:ea:80:ba:1f:4c:fd:
                    52:81:db:58:75:e8:e5:dc:98:73:bb:2a:d9:25:7f:
                    9e:c6:26:5d:1e:a6:9e:a6:e3:e2:f2:7a:2e:b3:3a:
                    a0:43:ca:f9:7d:f0:5d:56:5b:f8:25:65:2a:07:65:
                    e1:f6:ce:d0:63:fe:c2:71:d5:b9:27:43:99:c2:de:
                    6c:79:bb:c2:7e:f5:22:e3:00:a3:a6:44:06:3c:91:
                    d0:00:96:9c:73:7d:76:9d:15:3b:2a:3c:7d:e8:49:
                    0b:38:d9:47:01:92:db:a1:12:36:91:ca:04:ed:b1:
                    a0:4b:b9:3e:89:f1:bd:65:2e:7a:f0:72:4f:3e:7b:
                    bb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:6A:0E:24:4E:80:ED:30:2C:E8:21:9D:96:E4:12:A0:8D:6D:C4:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5db049f-7569-38bf-aa81-a3fa61f3be50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.252.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:d7:75:3e:2e:a6:d1:50:e3:fa:98:fb:1d:c6:1c:26:0e:84:
         85:fa:93:cb:89:3d:56:18:ee:07:9e:44:8e:3a:d2:4e:44:d5:
         e6:57:51:3c:6c:75:3b:ce:27:77:ac:29:70:b6:b2:91:5f:a4:
         e1:85:47:27:c7:3d:f1:8b:3d:49:df:6a:26:f3:38:68:40:4d:
         fc:dc:ab:77:4e:15:24:08:48:25:5f:11:a3:09:5f:1a:75:11:
         84:23:72:ef:34:b8:1d:d7:8a:af:e1:1b:31:21:88:12:3b:d5:
         96:e9:ff:25:f6:1a:42:2c:cb:6e:5f:ae:d1:fb:8b:2c:a3:45:
         87:ef:a7:54:28:52:3d:d9:77:3b:d7:00:84:fc:5c:ba:0c:5b:
         bb:e5:b5:07:6b:41:9e:4d:dc:53:81:fb:a9:e6:43:f0:4f:dc:
         c0:03:b5:8c:55:c2:9e:ad:0b:ff:9d:30:a3:e3:3c:e9:3a:a3:
         4e:29:b1:a4:9c:49:8e:2e:c3:0d:55:85:9e:59:16:74:1a:31:
         6d:24:c3:db:05:9f:13:6b:39:01:48:13:d9:6b:15:7a:4b:a9:
         21:b4:29:84:a7:e3:16:78:63:5e:94:62:d0:0f:02:da:ab:19:
         06:28:1c:17:8f:45:6c:a6:d5:24:d1:16:cf:dd:e2:26:61:7f:
         8a:45:88:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/ddWuz22r5i4k4YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk
ZjE5MDM1NjItMGNhOC00MWU4LWEzZmMtOWM3NTcwMWIxODc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEAtVkcGItWYYgS6fJY2dq7fjnsFwEpOVJS0
JljGJ0s+hVN+ktyXvJC+8tbUXpY+xtadcsr+1D1fX7zZHQN9czholc/cEj/4e66q
h7Wx+jdZ55k5XMvYcad9f+ROH97deLfNarZ0eyUrilsMrI4nh5RoR+XiLSVwXG93
CX6azVjqgLofTP1SgdtYdejl3JhzuyrZJX+exiZdHqaepuPi8nouszqgQ8r5ffBd
Vlv4JWUqB2Xh9s7QY/7CcdW5J0OZwt5sebvCfvUi4wCjpkQGPJHQAJacc312nRU7
Kjx96EkLONlHAZLboRI2kcoE7bGgS7k+ifG9ZS568HJPPnu70wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP9qDiROgO0wLOghnZbkEqCNbcQcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzVkYjA0OWYtNzU2OS0z
OGJmLWFhODEtYTNmYTYxZjNiZTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYvzSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL/XdT4uptFQ4/qY+x3GHCYOhIX6k8uJPVYY7geeRI460k5E1eZXUTxs
dTvOJ3esKXC2spFfpOGFRyfHPfGLPUnfaibzOGhATfzcq3dOFSQISCVfEaMJXxp1
EYQjcu80uB3Xiq/hGzEhiBI71Zbp/yX2GkIsy25frtH7iyyjRYfvp1QoUj3ZdzvX
AIT8XLoMW7vltQdrQZ5N3FOB+6nmQ/BP3MADtYxVwp6tC/+dMKPjPOk6o04psaSc
SY4uww1VhZ5ZFnQaMW0kw9sFnxNrOQFIE9lrFXpLqSG0KYSn4xZ4Y16UYtAPAtqr
GQYoHBePRWym1STRFs/d4iZhf4pFiPw=
-----END CERTIFICATE-----
Generated at Tue Jun 3 05:42:33 2025 by rpki-client