Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca926aad-7993-3c61-b304-7099033c5831.roa
File:                     ca926aad-7993-3c61-b304-7099033c5831.roa (raw, json)
Hash identifier:          872A0lIJlivfCGkfSLYrujrr2BwUgQQFSdl02JdVEAc=
Subject key identifier:   6C:F2:5F:9A:4A:4F:7E:C7:71:EC:48:AB:FA:51:0C:A0:C0:E5:5A:69
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A7E60B2C93C0EF9C91A100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca926aad-7993-3c61-b304-7099033c5831.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33490
IP address blocks:        98.246.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:e6:0b:2c:93:c0:ef:9c:91:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=8752dfb3-d87f-4d75-aaa9-fc1363c81442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:58:68:4e:1c:2b:7c:d9:85:3f:2f:f0:1d:28:
                    d5:11:68:9c:80:2e:3b:b2:49:d7:58:17:b8:81:8f:
                    b2:bd:31:20:ba:e2:2e:90:dc:f2:1a:a0:30:c6:d3:
                    92:02:9d:42:99:92:a3:20:78:de:61:77:ea:19:c0:
                    59:0d:ab:a4:a2:23:a9:4e:bb:62:1e:95:02:91:98:
                    8c:08:60:13:9a:f0:e2:36:6d:18:1c:16:d1:32:45:
                    13:9c:d2:96:cf:f4:72:49:4c:c6:91:7c:67:bd:e1:
                    fa:64:32:21:2b:68:16:39:7c:22:66:4c:0e:91:8a:
                    9c:dc:82:aa:c9:a9:56:5d:43:f9:d7:e1:32:e4:72:
                    cc:9b:1c:51:c2:af:18:8d:06:af:31:3f:82:60:d4:
                    51:ab:e6:62:83:4a:28:fd:e5:bb:36:03:24:52:61:
                    f2:a8:94:d8:50:7c:b1:1a:1c:6f:07:e7:b5:e4:09:
                    cd:03:bd:b4:2a:e3:88:6c:c5:60:ba:a0:34:9d:8d:
                    16:6a:4f:d4:37:73:6c:aa:b6:d7:04:16:0f:ce:58:
                    2e:54:72:52:ab:ab:c4:0b:63:01:8b:b7:ec:b7:1a:
                    fb:8f:e1:67:58:b6:cb:8c:02:36:c8:57:2a:3c:79:
                    87:51:7c:d5:af:bf:e8:8e:54:ae:7b:0a:65:3a:4f:
                    27:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F2:5F:9A:4A:4F:7E:C7:71:EC:48:AB:FA:51:0C:A0:C0:E5:5A:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca926aad-7993-3c61-b304-7099033c5831.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.246.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:42:64:1e:81:5e:39:b8:ca:48:51:c3:60:d7:a7:36:10:f4:
         a1:79:9b:61:8b:d7:10:a5:c0:a4:da:9f:35:73:75:c2:49:64:
         f5:ee:c2:86:50:d1:0b:93:4e:b1:62:8f:ef:9c:3a:e4:83:ae:
         7a:0d:bd:e8:91:11:69:53:f6:df:1b:74:3c:c1:70:ee:61:0e:
         11:41:ee:d3:1f:f1:4e:e4:9c:e5:b4:4b:ec:51:45:01:42:cf:
         2c:c2:8f:5f:ae:80:e0:db:d4:67:f6:99:38:ef:6e:d2:6b:89:
         6b:5f:2c:00:5a:b4:b3:4f:83:8f:24:21:2d:0b:f9:80:7f:de:
         eb:8a:e5:35:2e:30:d3:51:52:6d:55:c4:b2:52:20:0b:77:57:
         60:ed:da:e0:9b:50:37:5a:3d:be:27:fb:10:7c:37:78:64:f8:
         9f:63:b9:78:68:55:22:b6:af:08:19:08:38:06:5f:2c:fa:1b:
         c0:2e:d6:e4:76:6a:21:75:f5:4b:0e:80:ab:5d:48:05:4a:e3:
         62:f8:6a:d6:29:ed:a3:83:b8:97:d4:19:0f:ac:74:65:0f:e4:
         db:98:b3:f3:6a:52:10:ac:5e:b4:75:62:f9:99:19:14:6c:83:
         1b:78:d5:70:64:e7:30:a4:62:ec:d8:9d:85:c9:71:0a:a8:b1:
         81:54:bd:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp+YLLJPA75yRoQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk
ODc1MmRmYjMtZDg3Zi00ZDc1LWFhYTktZmMxMzYzYzgxNDQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFhoThwrfNmFPy/wHSjVEWicgC47sknXWBe4
gY+yvTEguuIukNzyGqAwxtOSAp1CmZKjIHjeYXfqGcBZDaukoiOpTrtiHpUCkZiM
CGATmvDiNm0YHBbRMkUTnNKWz/RySUzGkXxnveH6ZDIhK2gWOXwiZkwOkYqc3IKq
yalWXUP51+Ey5HLMmxxRwq8YjQavMT+CYNRRq+Zig0oo/eW7NgMkUmHyqJTYUHyx
GhxvB+e15AnNA720KuOIbMVguqA0nY0Wak/UN3NsqrbXBBYPzlguVHJSq6vEC2MB
i7fstxr7j+FnWLbLjAI2yFcqPHmHUXzVr7/ojlSuewplOk8nXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGzyX5pKT37HcexIq/pRDKDA5VppMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2E5MjZhYWQtNzk5My0z
YzYxLWIzMDQtNzA5OTAzM2M1ODMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvbAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANdCZB6BXjm4ykhRw2DXpzYQ9KF5m2GL1xClwKTanzVzdcJJZPXuwoZQ
0QuTTrFij++cOuSDrnoNveiREWlT9t8bdDzBcO5hDhFB7tMf8U7knOW0S+xRRQFC
zyzCj1+ugODb1Gf2mTjvbtJriWtfLABatLNPg48kIS0L+YB/3uuK5TUuMNNRUm1V
xLJSIAt3V2Dt2uCbUDdaPb4n+xB8N3hk+J9juXhoVSK2rwgZCDgGXyz6G8Au1uR2
aiF19UsOgKtdSAVK42L4atYp7aODuJfUGQ+sdGUP5NuYs/NqUhCsXrR1YvmZGRRs
gxt41XBk5zCkYuzYnYXJcQqosYFUve4=
-----END CERTIFICATE-----
Generated at Tue Oct 21 19:44:15 2025 by rpki-client