Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ce8a2e95-6a45-399b-95b7-fcacea72fc7f.roa
File:                     ce8a2e95-6a45-399b-95b7-fcacea72fc7f.roa (raw, json)
Hash identifier:          g//50438KRQHum7xnk1Hd+3SMrVVQbWwJJP7ofJJCKk=
Subject key identifier:   59:BC:B3:F5:C0:0D:AF:0A:05:D2:AD:4B:B2:67:17:8E:25:F6:D6:25
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4312275FA408F4BC8ECC300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ce8a2e95-6a45-399b-95b7-fcacea72fc7f.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        98.39.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:22:75:fa:40:8f:4b:c8:ec:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=f485e36e-08f3-4498-b1c1-231aac7fdd0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:13:cd:a5:6f:77:7e:40:f5:10:22:fa:ad:45:
                    ad:d5:2f:02:d0:73:93:3b:6c:6d:d2:16:6d:4e:11:
                    d1:4d:10:32:69:8c:f5:f1:23:fa:67:28:3f:cb:44:
                    03:0d:6d:3c:0f:4a:da:e6:e8:c6:47:ab:83:9f:ee:
                    68:f8:76:e2:3e:d7:e8:fa:1d:2b:86:33:53:dc:92:
                    3d:f7:76:73:47:8e:2e:e7:19:61:98:fe:56:e6:c2:
                    94:c4:97:bb:3e:0e:0b:af:7c:d1:b3:c0:3b:11:42:
                    1f:49:b1:50:7a:6c:ab:03:07:26:f3:bf:ff:62:cc:
                    33:11:58:67:01:eb:29:fb:4c:53:5f:4b:63:43:75:
                    23:1e:9c:4e:f5:44:5d:42:21:72:4f:1f:2d:94:d6:
                    fe:b6:db:89:13:fd:a1:9e:ec:78:11:4c:30:3b:d4:
                    b0:cc:e9:0d:9c:34:c1:27:59:ec:ef:fd:7f:02:9d:
                    f2:3b:64:ba:8e:de:8c:0c:62:8b:89:13:27:cb:85:
                    7f:0e:52:34:a0:cf:19:cc:bb:67:b6:e8:5a:63:9c:
                    dd:28:bf:15:f2:ae:6a:45:c9:1c:30:42:d6:51:92:
                    9f:0f:04:b3:b9:fe:6d:ea:76:d3:b4:13:60:b8:a2:
                    71:4d:a1:92:72:70:90:40:6d:62:e5:d2:31:8c:94:
                    09:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BC:B3:F5:C0:0D:AF:0A:05:D2:AD:4B:B2:67:17:8E:25:F6:D6:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ce8a2e95-6a45-399b-95b7-fcacea72fc7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.39.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:74:9d:86:7e:e7:a4:7d:a2:6a:3c:c2:f6:c9:85:96:1f:39:
         ff:67:bd:6c:2b:a6:fe:b8:45:dc:b2:21:c5:73:c0:0e:34:45:
         f8:37:07:5d:3e:e0:e7:f7:86:96:2b:c0:67:33:c1:7d:46:cd:
         22:f9:ea:91:b1:1a:1f:74:96:25:58:6d:5c:ca:42:9a:5c:cc:
         7a:ef:e0:8c:a3:f3:dc:93:e3:e5:91:19:9c:ef:ba:06:90:cb:
         ab:d4:7d:ce:56:a5:a8:6a:4d:d9:a3:e3:c8:4d:62:49:49:2c:
         cc:cf:49:09:78:4c:89:e0:b2:99:e1:26:9c:58:33:76:22:8f:
         99:0d:c3:8d:12:27:18:cf:8b:a1:4e:ff:fd:8e:82:57:0b:3a:
         45:66:60:b5:d9:f9:11:ec:09:d9:5c:94:09:f6:45:4b:14:28:
         c1:f0:99:e3:0f:7b:43:ed:f8:49:66:2a:b7:e8:bb:74:34:6e:
         9a:0c:f8:5d:9f:f9:ee:d6:f4:62:e2:c8:ea:04:2e:7e:b9:e9:
         24:19:2f:2b:5b:c9:25:71:10:ef:97:28:94:e3:62:38:45:e6:
         ef:74:7a:ee:6c:ec:58:ff:fe:f8:da:2c:6f:29:8f:6a:c9:46:
         bf:cb:01:d5:55:8c:c3:ac:b4:f2:76:56:95:ed:b8:a9:2e:b4:
         71:af:cd:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMSJ1+kCPS8jswwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
ZjQ4NWUzNmUtMDhmMy00NDk4LWIxYzEtMjMxYWFjN2ZkZDBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRPNpW93fkD1ECL6rUWt1S8C0HOTO2xt0hZt
ThHRTRAyaYz18SP6Zyg/y0QDDW08D0ra5ujGR6uDn+5o+HbiPtfo+h0rhjNT3JI9
93ZzR44u5xlhmP5W5sKUxJe7Pg4Lr3zRs8A7EUIfSbFQemyrAwcm87//YswzEVhn
Aesp+0xTX0tjQ3UjHpxO9URdQiFyTx8tlNb+ttuJE/2hnux4EUwwO9SwzOkNnDTB
J1ns7/1/Ap3yO2S6jt6MDGKLiRMny4V/DlI0oM8ZzLtntuhaY5zdKL8V8q5qRckc
MELWUZKfDwSzuf5t6nbTtBNguKJxTaGScnCQQG1i5dIxjJQJ4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFm8s/XADa8KBdKtS7JnF44l9tYlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2U4YTJlOTUtNmE0NS0z
OTliLTk1YjctZmNhY2VhNzJmYzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYicRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADZ0nYZ+56R9omo8wvbJhZYfOf9nvWwrpv64RdyyIcVzwA40Rfg3B10+
4Of3hpYrwGczwX1GzSL56pGxGh90liVYbVzKQppczHrv4Iyj89yT4+WRGZzvugaQ
y6vUfc5WpahqTdmj48hNYklJLMzPSQl4TIngspnhJpxYM3Yij5kNw40SJxjPi6FO
//2OglcLOkVmYLXZ+RHsCdlclAn2RUsUKMHwmeMPe0Pt+ElmKrfou3Q0bpoM+F2f
+e7W9GLiyOoELn656SQZLytbySVxEO+XKJTjYjhF5u90eu5s7Fj//vjaLG8pj2rJ
Rr/LAdVVjMOstPJ2VpXtuKkutHGvzQk=
-----END CERTIFICATE-----
Generated at Tue Jun 3 06:04:42 2025 by rpki-client