Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ffac0b79-af39-3c75-9d80-b5834cb500c5.roa
File:                     ffac0b79-af39-3c75-9d80-b5834cb500c5.roa (raw, json)
Hash identifier:          NSAB9ASlioQNe63PTdfDEoVl6wDQKyPHa+n4O1SOQEo=
Subject key identifier:   DC:6A:2D:41:A5:E4:33:84:80:2D:57:D7:D8:01:18:72:EA:3A:24:C8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AA941DF2F3DC12C94E6500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ffac0b79-af39-3c75-9d80-b5834cb500c5.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33668
IP address blocks:        98.243.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:94:1d:f2:f3:dc:12:c9:4e:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=f0ba19d3-cbc0-43e2-932a-ef40b1a48e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:47:1d:54:c9:94:70:4d:d5:f2:e9:7a:1c:0e:
                    f7:fb:82:4a:eb:22:e1:71:10:70:d4:90:18:9e:e9:
                    c7:8b:52:e8:77:a9:48:07:29:a5:02:4a:d0:50:0c:
                    ce:1b:38:5e:f0:6b:b4:24:90:03:5a:37:cc:7a:95:
                    27:ed:aa:b5:4e:72:d6:7c:24:2e:c9:f1:bb:fe:a7:
                    f1:7d:04:81:a4:fa:b8:18:27:bc:7e:62:07:dd:04:
                    37:02:ca:dd:0f:b6:b8:c7:34:ad:b5:a1:20:ee:99:
                    bd:9b:55:d8:57:56:ab:74:2a:d2:da:0f:18:14:f6:
                    de:e8:36:f5:99:28:cb:0c:4b:43:2b:ff:a3:b7:66:
                    bc:2d:8d:04:62:75:b2:2a:d8:53:83:14:43:55:23:
                    4d:33:24:03:52:bb:6d:36:47:ac:32:c7:8b:0c:92:
                    26:20:90:c8:de:ff:a6:c8:83:50:e0:58:05:67:c6:
                    0c:40:96:64:14:db:83:fe:16:38:ba:2a:93:fa:5f:
                    92:ea:7a:87:bb:72:c4:ec:95:fc:cf:7a:e2:b2:3d:
                    6f:cf:eb:96:29:ff:4e:c8:89:ee:0d:dd:8f:2c:b1:
                    dc:89:b3:c3:08:4a:a8:da:f3:57:79:d9:9d:d9:22:
                    09:4e:13:42:93:0e:34:15:8c:c7:ba:50:88:a5:bf:
                    c7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:6A:2D:41:A5:E4:33:84:80:2D:57:D7:D8:01:18:72:EA:3A:24:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ffac0b79-af39-3c75-9d80-b5834cb500c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.243.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:fc:f7:01:f1:47:00:59:f0:ca:6c:2e:71:fc:99:3d:60:e5:
         ce:f4:5c:7c:a1:84:bd:cc:22:79:b2:97:a0:ef:3e:47:96:bb:
         27:2c:68:31:25:33:64:db:31:51:e2:27:a3:61:ab:c2:c9:aa:
         97:5c:fd:03:34:80:9a:6d:f5:d4:c2:59:e8:cc:e6:4e:91:6d:
         25:b0:f9:9c:9e:50:17:f3:7d:d7:55:3d:10:16:10:b4:f3:1b:
         82:f8:41:51:d8:68:cd:0c:e7:cc:87:e6:8b:85:ce:91:8c:ed:
         1f:4d:81:e1:3f:a0:24:fa:e4:41:67:f0:3e:f2:9c:e8:72:70:
         b4:c9:b6:02:76:f8:b1:d9:e4:66:9a:97:59:f6:84:a2:d1:57:
         31:e3:b5:33:db:86:72:5c:75:57:fd:f9:57:fc:da:45:f2:59:
         51:92:b7:c3:7c:10:be:75:d6:e9:23:cc:97:8e:bc:84:e4:77:
         be:0f:8f:03:a5:63:a8:22:7e:ad:f1:4c:0a:01:c7:27:ce:98:
         c5:31:da:a8:8e:c4:84:8b:68:3b:d8:7a:f8:20:9c:2c:d3:64:
         0b:3a:44:05:d0:7a:52:32:5b:d3:15:48:79:11:e6:7e:85:c5:
         83:c2:c9:80:dc:8b:b0:29:f7:5f:8a:9f:fb:f7:7c:18:26:74:
         a8:f9:d7:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqpQd8vPcEslOZQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk
ZjBiYTE5ZDMtY2JjMC00M2UyLTkzMmEtZWY0MGIxYTQ4ZTgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkcdVMmUcE3V8ul6HA73+4JK6yLhcRBw1JAY
nunHi1Lod6lIBymlAkrQUAzOGzhe8Gu0JJADWjfMepUn7aq1TnLWfCQuyfG7/qfx
fQSBpPq4GCe8fmIH3QQ3AsrdD7a4xzSttaEg7pm9m1XYV1ardCrS2g8YFPbe6Db1
mSjLDEtDK/+jt2a8LY0EYnWyKthTgxRDVSNNMyQDUrttNkesMseLDJImIJDI3v+m
yINQ4FgFZ8YMQJZkFNuD/hY4uiqT+l+S6nqHu3LE7JX8z3risj1vz+uWKf9OyInu
Dd2PLLHcibPDCEqo2vNXedmd2SIJThNCkw40FYzHulCIpb/HpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNxqLUGl5DOEgC1X19gBGHLqOiTIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmZhYzBiNzktYWYzOS0z
Yzc1LTlkODAtYjU4MzRjYjUwMGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvNKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEP89wHxRwBZ8MpsLnH8mT1g5c70XHyhhL3MInmyl6DvPkeWuycsaDEl
M2TbMVHiJ6Nhq8LJqpdc/QM0gJpt9dTCWejM5k6RbSWw+ZyeUBfzfddVPRAWELTz
G4L4QVHYaM0M58yH5ouFzpGM7R9NgeE/oCT65EFn8D7ynOhycLTJtgJ2+LHZ5Gaa
l1n2hKLRVzHjtTPbhnJcdVf9+Vf82kXyWVGSt8N8EL511ukjzJeOvITkd74PjwOl
Y6gifq3xTAoBxyfOmMUx2qiOxISLaDvYevggnCzTZAs6RAXQelIyW9MVSHkR5n6F
xYPCyYDci7Ap91+Kn/v3fBgmdKj515E=
-----END CERTIFICATE-----
Generated at Tue Oct 21 21:47:33 2025 by rpki-client