Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dcbaffd0-6941-39c4-b641-e06a8ce82f99.roa
File:                     dcbaffd0-6941-39c4-b641-e06a8ce82f99.roa (raw, json)
Hash identifier:          JtUn8Mmhn3ktZMev+vHI4cmQCnpVvtx3h8eJLIOhlAk=
Subject key identifier:   36:A4:A5:F0:88:CD:52:69:DE:FA:91:2B:75:69:03:CB:8E:BD:5A:42
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C0719B383296350A1DB26F0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dcbaffd0-6941-39c4-b641-e06a8ce82f99.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        98.37.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:19:b3:83:29:63:50:a1:db:26:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=f14eb62f-2933-43d5-9a81-a9c65adadffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1d:95:79:7f:fb:2c:d3:bc:fc:ea:2d:e4:c2:
                    e5:b5:20:8a:7d:71:10:62:5f:4f:63:76:cc:69:58:
                    4d:59:ad:39:52:d1:a9:3a:ef:44:c3:5b:73:ed:96:
                    75:0e:51:88:8b:30:99:51:e1:01:77:c6:d5:13:ca:
                    40:de:78:e7:d8:6c:b9:3b:b7:a6:2b:ff:1c:0b:89:
                    bf:24:d9:48:a3:ea:2f:5c:d5:d3:b8:35:70:64:c8:
                    0f:b1:00:e3:f7:70:04:24:b0:60:e6:f9:c1:e6:53:
                    3f:48:4e:9b:61:9f:b7:5f:7f:e6:57:f7:84:34:03:
                    ef:42:4b:d3:89:e3:cc:b6:29:00:86:c1:24:52:95:
                    e4:15:47:c2:e4:d3:86:b8:fa:1c:e2:4c:46:ae:ea:
                    9f:5c:75:a0:7b:c1:d2:ad:19:8c:81:c5:d2:90:28:
                    24:31:0a:6b:43:93:b8:4c:d1:37:93:e0:de:00:05:
                    03:9e:98:4f:23:fc:c2:8a:ce:4c:6d:5f:bf:0f:5b:
                    86:37:8e:fd:5f:b5:c0:52:28:24:24:fa:21:ea:e1:
                    db:15:e9:9c:d6:c7:43:71:88:08:cd:48:0e:e3:96:
                    46:d0:36:b7:44:4b:84:5f:0b:89:94:aa:ae:87:34:
                    cb:dc:39:49:9b:b4:b8:07:d1:71:d2:55:13:81:62:
                    f9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A4:A5:F0:88:CD:52:69:DE:FA:91:2B:75:69:03:CB:8E:BD:5A:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dcbaffd0-6941-39c4-b641-e06a8ce82f99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.37.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:d4:bc:9a:66:fe:40:16:47:2b:c1:2c:93:90:40:8d:a1:da:
         cf:c4:ff:14:0d:7d:3e:13:71:ad:1b:08:fa:2d:fb:86:7b:d5:
         7a:23:f9:04:80:82:3c:23:5f:ec:40:ca:62:04:0b:81:4b:f9:
         c4:b8:df:2b:83:8b:78:22:c7:8f:b1:bf:9d:6d:00:e9:b0:3a:
         da:32:97:36:63:04:ad:3e:e4:a2:9c:ae:59:a7:9a:76:ae:e8:
         db:35:38:11:a7:8a:88:a6:73:01:37:c0:53:b6:1b:cd:56:82:
         a4:db:17:76:04:d0:32:7f:aa:df:be:ec:fb:70:57:7c:23:46:
         a3:50:b2:92:5d:cf:44:cf:b3:40:3a:3e:4f:0d:44:79:6e:99:
         2d:42:d6:d1:d4:d2:97:65:53:97:72:a2:95:00:17:84:21:01:
         de:1a:45:35:37:db:cd:e9:9b:31:e5:83:ba:91:09:5e:53:85:
         65:ec:1b:0c:7a:19:0d:27:e2:11:ce:7b:7f:e9:c7:40:4c:a9:
         e5:2e:6f:e4:7c:58:5d:7f:66:97:82:2d:a4:3d:69:f4:27:19:
         58:c7:7d:f7:b0:33:b6:4d:3c:d2:d4:30:85:d6:0a:4f:e2:23:
         ef:40:d6:e6:5b:7f:06:cc:19:01:1a:d4:57:ea:09:33:6d:0b:
         ba:22:ec:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBxmzgyljUKHbJvAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
ZjE0ZWI2MmYtMjkzMy00M2Q1LTlhODEtYTljNjVhZGFkZmZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx2VeX/7LNO8/Oot5MLltSCKfXEQYl9PY3bM
aVhNWa05UtGpOu9Ew1tz7ZZ1DlGIizCZUeEBd8bVE8pA3njn2Gy5O7emK/8cC4m/
JNlIo+ovXNXTuDVwZMgPsQDj93AEJLBg5vnB5lM/SE6bYZ+3X3/mV/eENAPvQkvT
iePMtikAhsEkUpXkFUfC5NOGuPoc4kxGruqfXHWge8HSrRmMgcXSkCgkMQprQ5O4
TNE3k+DeAAUDnphPI/zCis5MbV+/D1uGN479X7XAUigkJPoh6uHbFemc1sdDcYgI
zUgO45ZG0Da3REuEXwuJlKquhzTL3DlJm7S4B9Fx0lUTgWL5kwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDakpfCIzVJp3vqRK3VpA8uOvVpCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGNiYWZmZDAtNjk0MS0z
OWM0LWI2NDEtZTA2YThjZTgyZjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYiWmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFrUvJpm/kAWRyvBLJOQQI2h2s/E/xQNfT4Tca0bCPot+4Z71Xoj+QSA
gjwjX+xAymIEC4FL+cS43yuDi3gix4+xv51tAOmwOtoylzZjBK0+5KKcrlmnmnau
6Ns1OBGnioimcwE3wFO2G81WgqTbF3YE0DJ/qt++7PtwV3wjRqNQspJdz0TPs0A6
Pk8NRHlumS1C1tHU0pdlU5dyopUAF4QhAd4aRTU3283pmzHlg7qRCV5ThWXsGwx6
GQ0n4hHOe3/px0BMqeUub+R8WF1/ZpeCLaQ9afQnGVjHffewM7ZNPNLUMIXWCk/i
I+9A1uZbfwbMGQEa1FfqCTNtC7oi7GI=
-----END CERTIFICATE-----
Generated at Tue Jun 3 05:44:15 2025 by rpki-client