Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/81898094-751d-312a-a1ce-de9855fd858a.roa
File:                     81898094-751d-312a-a1ce-de9855fd858a.roa (raw, json)
Hash identifier:          IhzX83zDk/wBYXzsxsFQ0QDfkT0zOPb55LGVRyUJMzA=
Subject key identifier:   8D:B4:75:85:E8:AD:AA:DE:F6:3B:1E:64:9A:C1:D7:FB:CC:1A:DF:5E
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F43285849E654F0DAE9F90A3416F45480
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/81898094-751d-312a-a1ce-de9855fd858a.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     18914
IP address blocks:        206.168.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:54:f0:da:e9:f9:0a:34:16:f4:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=8dcf5d19-137d-4cc9-8585-47c523f1087d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6a:7f:9e:eb:f0:9c:0e:d6:a8:72:59:1f:15:
                    74:1d:ae:01:98:ae:1f:ea:a5:c8:04:ce:05:09:68:
                    6f:1f:cc:4b:e9:d2:66:aa:50:95:49:c7:65:5b:06:
                    45:5f:06:0c:ac:53:2f:c8:e6:e2:84:bc:8f:bd:03:
                    57:2c:ff:da:02:df:b6:75:ae:e1:bc:45:c1:30:41:
                    35:56:9e:2c:5e:55:c6:76:69:69:0c:f6:fa:8b:f5:
                    fe:dd:6b:38:31:e2:bf:18:f7:08:87:cd:52:28:6f:
                    d0:c9:58:f2:6c:78:2c:f8:c5:78:8b:24:f8:1e:a4:
                    93:74:be:fc:f2:35:29:da:50:05:40:41:0c:26:d5:
                    99:4a:30:e0:f1:47:74:00:85:a3:f0:cb:b1:b3:18:
                    d4:ef:56:1c:bf:9f:0b:84:00:7a:2b:9c:85:2b:09:
                    5a:b4:30:10:0f:b8:23:d4:2e:3c:86:df:eb:c4:2a:
                    de:e5:a7:3e:d0:c1:78:86:3b:fd:7b:5b:62:f9:37:
                    f3:8b:93:77:06:48:a8:4f:60:06:f1:4e:f4:0c:93:
                    09:51:e6:87:f2:6c:c2:bf:df:51:7e:1e:9b:85:7d:
                    0e:60:a7:23:e7:81:38:ff:6e:91:69:8f:12:54:ee:
                    83:ba:79:96:f9:b3:b9:16:09:03:e6:4c:62:cc:a2:
                    e5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B4:75:85:E8:AD:AA:DE:F6:3B:1E:64:9A:C1:D7:FB:CC:1A:DF:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/81898094-751d-312a-a1ce-de9855fd858a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:08:b9:5a:47:96:39:0f:1b:ab:5d:6b:80:2c:19:db:34:ed:
         03:90:73:cf:96:e7:a6:d3:a5:57:9e:a1:e0:1f:4d:1a:d4:a6:
         cb:91:61:88:c0:55:ad:3b:12:f4:33:62:bf:f2:30:c2:05:08:
         dd:b1:68:6b:4e:71:07:66:d0:f3:78:3f:4b:28:f9:eb:2f:67:
         fc:9f:85:b7:9f:2f:13:8b:47:bc:9e:79:63:83:53:65:79:e3:
         88:9d:b3:76:29:f0:ce:6d:76:7d:36:cc:eb:50:82:f1:3a:bd:
         91:e0:7d:a1:52:2d:89:29:4c:f6:47:30:50:ed:94:44:a9:ac:
         99:a4:cc:fd:30:8e:2b:64:0c:af:78:f9:67:18:03:e1:34:bc:
         c2:86:7d:ca:7b:93:ff:9c:40:29:2f:39:aa:5c:42:cc:46:48:
         f9:59:cb:8d:71:cd:80:dc:91:2f:a4:dd:5c:22:3d:cd:e5:61:
         46:35:6a:6d:78:0f:ec:3e:1d:db:16:ae:04:74:c4:d2:be:cb:
         8c:52:82:76:bb:dd:e3:75:52:5b:6e:ed:ca:0f:19:50:16:d6:
         a9:62:8b:6c:09:69:58:e4:06:f7:ee:9f:db:2c:1e:9e:27:ef:
         89:bd:4a:85:bb:db:6d:bc:90:ed:ba:53:e9:3f:20:0a:7d:d7:
         e8:30:65:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVPDa6fkKNBb0VIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTM5Y2I5NjAtMjM5NC00YjIyLWI5ZjEtM2FjNTU2NmJj
NzJhMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk
OGRjZjVkMTktMTM3ZC00Y2M5LTg1ODUtNDdjNTIzZjEwODdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmp/nuvwnA7WqHJZHxV0Ha4BmK4f6qXIBM4F
CWhvH8xL6dJmqlCVScdlWwZFXwYMrFMvyObihLyPvQNXLP/aAt+2da7hvEXBMEE1
Vp4sXlXGdmlpDPb6i/X+3Ws4MeK/GPcIh81SKG/QyVjybHgs+MV4iyT4HqSTdL78
8jUp2lAFQEEMJtWZSjDg8Ud0AIWj8MuxsxjU71Ycv58LhAB6K5yFKwlatDAQD7gj
1C48ht/rxCre5ac+0MF4hjv9e1ti+Tfzi5N3BkioT2AG8U70DJMJUeaH8mzCv99R
fh6bhX0OYKcj54E4/26RaY8SVO6DunmW+bO5FgkD5kxizKLljwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI20dYXorare9jseZJrB1/vMGt9eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzlj
Yjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1NTY2YmM3MmEvODE4OTgwOTQtNzUxZC0z
MTJhLWExY2UtZGU5ODU1ZmQ4NThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTM5Y2I5NjAtMjM5NC00YjIyLWI5
ZjEtM2FjNTU2NmJjNzJhL2UzOWNiOTYwLTIzOTQtNGIyMi1iOWYxLTNhYzU1NjZi
YzcyYS5jcmwwHwYDVR0jBBgwFoAUx5iuk+5ta+2iXZtwBvHdRTnXH4kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lMzljYjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1
NTY2YmM3MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzqhiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHYIuVpHljkPG6tda4AsGds07QOQc8+W56bTpVeeoeAfTRrUpsuRYYjA
Va07EvQzYr/yMMIFCN2xaGtOcQdm0PN4P0so+esvZ/yfhbefLxOLR7yeeWODU2V5
44ids3Yp8M5tdn02zOtQgvE6vZHgfaFSLYkpTPZHMFDtlESprJmkzP0wjitkDK94
+WcYA+E0vMKGfcp7k/+cQCkvOapcQsxGSPlZy41xzYDckS+k3VwiPc3lYUY1am14
D+w+HdsWrgR0xNK+y4xSgna73eN1Ultu7coPGVAW1qlii2wJaVjkBvfun9ssHp4n
74m9SoW72228kO26U+k/IAp91+gwZX4=
-----END CERTIFICATE-----
Generated at Sat Jun 7 10:46:17 2025 by rpki-client