Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f001286d-5557-3e6e-8b00-aa5c1b581587.roa
File:                     f001286d-5557-3e6e-8b00-aa5c1b581587.roa (raw, json)
Hash identifier:          IadXIazgb8yun0X0Dfu5k6t+tRoqv8MlcGLJq6mREdg=
Subject key identifier:   2B:BE:8B:11:56:AF:9F:A0:CC:13:26:A0:6E:30:9E:56:FC:6A:D8:14
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F80C99661D17118532B480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f001286d-5557-3e6e-8b00-aa5c1b581587.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33662
IP address blocks:        98.198.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:0c:99:66:1d:17:11:85:32:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=5e98a7c7-e4bb-4a93-86f3-c343caf11eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:bd:ee:65:ab:21:14:b3:dc:4e:7d:81:21:f6:
                    c4:08:c1:63:cf:63:0e:3f:09:47:ca:94:76:7d:81:
                    ef:38:c6:7d:44:5d:33:02:b9:37:dd:7c:9d:a3:12:
                    50:87:09:c0:ca:0b:08:e5:bb:02:ec:27:cd:fb:30:
                    0f:91:56:c2:04:62:0b:86:2c:bb:0f:02:73:07:8b:
                    26:50:e9:97:6b:c9:94:c2:7c:73:71:bd:7e:e1:5a:
                    88:95:cf:4f:9a:c1:28:05:eb:9b:35:54:61:7f:cf:
                    2b:3b:77:bd:14:20:29:1d:b8:51:93:fd:1b:c8:9a:
                    d0:1a:15:30:29:c0:5e:d3:c5:6f:92:e4:c9:0d:20:
                    75:37:b5:03:13:61:7e:86:40:54:f6:81:64:fd:1e:
                    aa:01:f3:24:43:09:59:39:2a:7f:ef:47:7a:2b:f4:
                    62:92:a1:69:3d:02:c7:c9:b6:35:07:2f:78:3b:01:
                    02:69:1f:d2:f7:36:77:13:32:31:db:35:ae:62:32:
                    01:13:0b:6c:4d:8b:76:01:f4:ec:21:a5:09:38:ce:
                    2e:d8:71:e8:1f:cb:75:0e:55:9e:14:b3:3c:97:ab:
                    2b:b1:5d:97:06:45:6b:fb:99:1b:59:b0:92:32:4d:
                    fc:7d:a9:7b:ef:f0:cd:2d:58:18:19:df:33:bb:f9:
                    d3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:BE:8B:11:56:AF:9F:A0:CC:13:26:A0:6E:30:9E:56:FC:6A:D8:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f001286d-5557-3e6e-8b00-aa5c1b581587.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.198.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:f1:9c:04:bd:3f:9a:80:1e:05:fa:8f:4e:20:2d:01:c2:46:
         ec:f6:19:2f:93:62:cc:8b:55:da:3e:d4:c9:b2:34:e1:f8:42:
         d7:d1:80:a2:3f:fb:b5:86:dd:7b:a8:91:f5:75:50:e4:ef:5c:
         0a:78:7f:58:a9:ae:43:1b:9f:d9:3b:9b:86:0a:db:b8:ef:83:
         15:7c:de:9a:2c:eb:02:52:58:f0:af:4b:d2:18:7a:6f:f3:07:
         db:51:8d:b6:fb:e8:9e:ec:c4:3e:43:88:21:03:e3:8b:05:bc:
         be:48:3b:d3:5f:91:3b:ec:d3:b3:de:b5:1a:f2:c5:7e:b9:28:
         42:8b:be:f3:c2:c9:91:da:98:30:ff:bd:86:4d:a7:3d:ae:43:
         91:0f:1e:a4:b6:ee:5b:98:d5:c0:7e:44:7f:cd:83:5a:e3:05:
         20:77:ea:00:3b:a1:f0:e7:d1:64:64:5d:fa:06:81:2c:2f:7b:
         0d:b1:fa:54:66:36:e8:f4:26:73:c9:9c:8d:66:d8:e5:d9:06:
         79:d6:be:a9:53:88:fb:56:58:ee:28:cb:b1:65:b0:2f:46:99:
         c1:85:2a:67:a6:1d:76:86:05:81:5d:4e:4c:db:3d:de:83:3f:
         cd:33:80:e7:36:bc:c6:b6:0f:f8:42:a2:06:92:0e:d8:4b:c1:
         8f:93:d7:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+AyZZh0XEYUytIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
NWU5OGE3YzctZTRiYi00YTkzLTg2ZjMtYzM0M2NhZjExZWFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgr3uZashFLPcTn2BIfbECMFjz2MOPwlHypR2
fYHvOMZ9RF0zArk33XydoxJQhwnAygsI5bsC7CfN+zAPkVbCBGILhiy7DwJzB4sm
UOmXa8mUwnxzcb1+4VqIlc9PmsEoBeubNVRhf88rO3e9FCApHbhRk/0byJrQGhUw
KcBe08VvkuTJDSB1N7UDE2F+hkBU9oFk/R6qAfMkQwlZOSp/70d6K/RikqFpPQLH
ybY1By94OwECaR/S9zZ3EzIx2zWuYjIBEwtsTYt2AfTsIaUJOM4u2HHoH8t1DlWe
FLM8l6srsV2XBkVr+5kbWbCSMk38fal77/DNLVgYGd8zu/nTIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCu+ixFWr5+gzBMmoG4wnlb8atgUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjAwMTI4NmQtNTU1Ny0z
ZTZlLThiMDAtYWE1YzFiNTgxNTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYsbNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGzxnAS9P5qAHgX6j04gLQHCRuz2GS+TYsyLVdo+1MmyNOH4QtfRgKI/
+7WG3XuokfV1UOTvXAp4f1iprkMbn9k7m4YK27jvgxV83pos6wJSWPCvS9IYem/z
B9tRjbb76J7sxD5DiCED44sFvL5IO9NfkTvs07PetRryxX65KEKLvvPCyZHamDD/
vYZNpz2uQ5EPHqS27luY1cB+RH/Ng1rjBSB36gA7ofDn0WRkXfoGgSwvew2x+lRm
Nuj0JnPJnI1m2OXZBnnWvqlTiPtWWO4oy7FlsC9GmcGFKmemHXaGBYFdTkzbPd6D
P80zgOc2vMa2D/hCogaSDthLwY+T1wI=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:27:30 2025 by rpki-client