Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/9c14bd55-5125-3910-a0b2-c13956384c3d.roa
File:                     9c14bd55-5125-3910-a0b2-c13956384c3d.roa (raw, json)
Hash identifier:          pC/AT7qm6Y/WnOWDYO1rX0dDE7F61zsSQWobQJXx2TM=
Subject key identifier:   54:2E:AA:FB:43:29:F0:35:D2:89:BD:A2:20:67:14:9D:35:BA:28:67
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584B0A116DD8513798E38E04D780
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/9c14bd55-5125-3910-a0b2-c13956384c3d.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     21859
IP address blocks:        98.98.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:6d:d8:51:37:98:e3:8e:04:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=26d4d781-b853-4f49-8161-4bcae10133f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:19:1d:20:8c:26:97:57:c6:f4:38:1a:72:9b:
                    fd:59:a8:09:40:f3:31:e2:31:bd:fb:76:6d:7d:80:
                    28:c8:11:d5:31:c3:a2:8a:93:a9:05:fb:72:1b:54:
                    53:0a:01:7c:c0:df:e8:62:c4:db:84:53:02:4a:c8:
                    19:51:cd:9b:e7:4f:7c:dd:fc:e6:72:ec:a2:16:55:
                    96:06:b8:80:55:c6:f8:da:21:1a:ca:ec:87:4f:82:
                    e5:88:04:d6:8f:86:4a:8e:05:54:04:bd:1f:55:c5:
                    83:16:d1:d0:05:8a:7d:4b:11:ff:73:1c:a5:92:e2:
                    23:ad:6f:dc:bf:be:5f:f4:3d:75:02:7a:e0:f9:ce:
                    a7:bc:65:b2:f0:f7:c5:b6:a7:9b:c6:6b:81:d2:88:
                    ea:7f:6d:7c:db:05:8d:8e:ab:ab:a8:61:9a:85:38:
                    d8:e5:02:86:4d:c0:6c:b2:87:50:36:1e:3d:ce:ea:
                    ee:ee:0c:36:88:14:ee:b4:4d:50:f0:6a:f6:09:07:
                    fc:a6:9e:66:36:83:72:e8:0b:0b:ef:66:90:8b:8d:
                    86:51:d1:f2:ad:91:aa:ab:72:aa:e1:07:32:58:d0:
                    3a:21:b1:75:87:df:37:2a:2b:94:24:45:47:bd:a4:
                    f7:91:f2:3e:1b:00:af:0f:e3:34:14:9b:5e:f5:a8:
                    94:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:2E:AA:FB:43:29:F0:35:D2:89:BD:A2:20:67:14:9D:35:BA:28:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/9c14bd55-5125-3910-a0b2-c13956384c3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:fd:30:b7:1c:93:16:7a:4f:af:2a:28:9e:23:04:6d:24:8a:
         1e:72:4e:a6:b1:db:78:69:3a:57:f4:33:0d:e3:5f:41:62:11:
         e0:db:5c:ad:ad:bc:18:58:d9:d5:29:07:99:e0:87:c7:54:bf:
         60:8d:19:80:80:56:22:ea:1f:c2:1a:29:55:88:58:00:39:2c:
         52:91:f0:79:42:7f:dc:6a:92:8f:62:5d:f0:89:8f:43:80:c3:
         71:a0:ac:a3:fd:70:03:08:5b:88:85:a3:66:90:7a:b8:c3:cc:
         99:7c:b1:6f:aa:92:29:ee:b5:5f:7d:40:c1:d4:3e:06:f2:00:
         10:cd:94:93:dd:84:ae:ce:c6:b2:31:80:66:69:da:bd:ab:a5:
         7f:79:ee:83:3f:c6:ea:01:d4:c1:69:b3:b4:b7:8e:d6:6b:fc:
         86:ec:67:f7:1c:a4:a0:f6:42:4c:34:e5:60:0f:f7:32:8b:e0:
         5e:59:0a:b9:00:83:49:38:06:9e:d8:91:d4:b4:ea:cf:e4:78:
         76:a3:9f:01:b7:7e:f2:4c:4e:01:d0:71:6f:19:ef:f3:59:c2:
         6c:7e:3a:bb:61:1c:9b:5b:c8:d3:b7:c4:50:00:61:96:37:42:
         42:87:76:1c:a7:ef:7d:7e:c4:c8:d4:e1:65:21:fd:ab:8e:69:
         d2:d4:38:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEW3YUTeY444E14AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk
MjZkNGQ3ODEtYjg1My00ZjQ5LTgxNjEtNGJjYWUxMDEzM2YzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRkdIIwml1fG9Dgacpv9WagJQPMx4jG9+3Zt
fYAoyBHVMcOiipOpBftyG1RTCgF8wN/oYsTbhFMCSsgZUc2b50983fzmcuyiFlWW
BriAVcb42iEayuyHT4LliATWj4ZKjgVUBL0fVcWDFtHQBYp9SxH/cxylkuIjrW/c
v75f9D11Anrg+c6nvGWy8PfFtqebxmuB0ojqf2182wWNjqurqGGahTjY5QKGTcBs
sodQNh49zuru7gw2iBTutE1Q8Gr2CQf8pp5mNoNy6AsL72aQi42GUdHyrZGqq3Kq
4QcyWNA6IbF1h983KiuUJEVHvaT3kfI+GwCvD+M0FJte9aiU5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFQuqvtDKfA10om9oiBnFJ01uihnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvOWMxNGJkNTUtNTEyNS0z
OTEwLWEwYjItYzEzOTU2Mzg0YzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYmKtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABr9MLcckxZ6T68qKJ4jBG0kih5yTqax23hpOlf0Mw3jX0FiEeDbXK2t
vBhY2dUpB5ngh8dUv2CNGYCAViLqH8IaKVWIWAA5LFKR8HlCf9xqko9iXfCJj0OA
w3GgrKP9cAMIW4iFo2aQerjDzJl8sW+qkinutV99QMHUPgbyABDNlJPdhK7OxrIx
gGZp2r2rpX957oM/xuoB1MFps7S3jtZr/IbsZ/ccpKD2Qkw05WAP9zKL4F5ZCrkA
g0k4Bp7YkdS06s/keHajnwG3fvJMTgHQcW8Z7/NZwmx+OrthHJtbyNO3xFAAYZY3
QkKHdhyn731+xMjU4WUh/auOadLUOKY=
-----END CERTIFICATE-----
Generated at Fri Sep 19 02:51:30 2025 by rpki-client