Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/50412106-d52f-3763-b66a-4bbf75f3b9a9.roa
File:                     50412106-d52f-3763-b66a-4bbf75f3b9a9.roa (raw, json)
Hash identifier:          OhvUjKtdHoNCbKTY7elPT8vFQC0+a9tj9PyuyqYCxjk=
Subject key identifier:   25:49:84:73:3B:1B:BE:9C:D6:6B:AB:24:E4:F6:B4:B7:F2:BA:A6:DB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC4E9A6EC83733DDFEC72EC
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/50412106-d52f-3763-b66a-4bbf75f3b9a9.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        98.46.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c4:e9:a6:ec:83:73:3d:df:ec:72:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=a81ca459-508f-4ea9-a55b-412258057e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c0:6f:6a:4f:6e:5f:f4:ae:71:76:6e:2d:7b:
                    7b:09:0a:06:8b:5e:81:8e:78:bf:22:ec:ba:55:c8:
                    5d:d7:92:67:e0:69:fa:21:43:cb:52:eb:01:b2:61:
                    af:e4:a6:88:f1:4d:9b:d1:25:1e:3a:d8:38:26:23:
                    4c:20:e6:ea:d7:ee:0d:27:47:fa:96:55:bb:2d:c0:
                    ed:ce:df:28:93:f4:d7:eb:b5:e7:75:c0:89:d2:d5:
                    75:29:86:8a:27:1a:20:7b:1f:8d:c5:69:5a:30:3b:
                    90:eb:82:15:da:95:6d:40:6b:2f:ec:d2:36:75:ec:
                    61:f9:60:d8:ee:12:d1:9c:3a:20:0f:f9:3b:42:2c:
                    de:e4:89:64:72:c0:35:db:49:bb:0a:2a:01:ce:5e:
                    dd:bc:61:fa:8c:66:ee:b2:7a:54:49:43:28:e9:40:
                    5a:4f:da:a7:7d:78:1f:b5:84:62:7c:54:db:3b:3b:
                    8c:a4:e3:0c:fe:af:be:04:dc:e7:0d:e6:5b:58:2a:
                    21:25:1a:bd:eb:51:cf:51:9d:fa:11:a4:17:e6:7f:
                    39:24:bc:d3:49:0d:e9:07:f2:20:d6:77:2e:d4:af:
                    a1:9d:00:59:8e:81:a8:fe:62:23:f2:e7:92:5c:f4:
                    3c:18:2b:eb:9b:9c:28:73:a7:cc:f9:98:aa:b4:b2:
                    2f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:49:84:73:3B:1B:BE:9C:D6:6B:AB:24:E4:F6:B4:B7:F2:BA:A6:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/50412106-d52f-3763-b66a-4bbf75f3b9a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.46.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:9b:d3:ea:99:d4:38:06:ed:90:bb:4e:a7:b9:ef:78:ee:9e:
         b8:12:29:84:fc:92:b6:6d:26:7a:27:58:e4:18:b9:fb:64:b5:
         01:fd:eb:28:61:1b:43:d9:7b:f4:90:54:eb:f6:6d:e6:e3:2f:
         7c:53:06:bd:5b:fe:db:f3:26:f1:a6:b9:87:f9:48:84:c5:c6:
         68:fd:ce:c9:0e:23:0e:c0:4f:2d:e9:41:8e:4b:2b:01:e2:bc:
         2e:ba:e4:7a:55:6f:bf:43:75:4b:7e:0a:fd:ec:bf:56:f9:f4:
         2c:11:a3:d1:a0:6b:cf:e3:1c:de:f9:40:25:09:2f:9a:8b:9c:
         a8:e0:57:f1:6f:c7:57:9e:77:ec:a4:95:2c:7e:c2:f3:37:96:
         7e:97:43:1f:6b:8b:e1:29:e1:8e:1a:23:0f:4a:ae:7d:75:c0:
         9e:da:f8:cb:1e:3c:63:8a:41:d9:f2:ce:40:be:45:27:9a:bd:
         0e:80:47:e9:42:38:2e:04:e4:a8:d6:a1:99:4d:cb:12:23:ee:
         4c:1c:33:d3:de:d1:02:44:62:06:26:0a:2c:a3:2c:06:61:c3:
         4f:83:b4:42:34:aa:37:6b:78:6d:55:22:38:93:4b:a9:14:ef:
         52:60:dc:94:55:84:a0:bb:ad:15:9c:f6:a1:1c:19:00:ba:2c:
         f6:0a:ee:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxOmm7INzPd/scuwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk
YTgxY2E0NTktNTA4Zi00ZWE5LWE1NWItNDEyMjU4MDU3ZTE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsBvak9uX/SucXZuLXt7CQoGi16Bjni/Iuy6
Vchd15Jn4Gn6IUPLUusBsmGv5KaI8U2b0SUeOtg4JiNMIObq1+4NJ0f6llW7LcDt
zt8ok/TX67XndcCJ0tV1KYaKJxogex+NxWlaMDuQ64IV2pVtQGsv7NI2dexh+WDY
7hLRnDogD/k7Qize5IlkcsA120m7CioBzl7dvGH6jGbusnpUSUMo6UBaT9qnfXgf
tYRifFTbOzuMpOMM/q++BNznDeZbWCohJRq961HPUZ36EaQX5n85JLzTSQ3pB/Ig
1ncu1K+hnQBZjoGo/mIj8ueSXPQ8GCvrm5woc6fM+ZiqtLIvJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCVJhHM7G76c1murJOT2tLfyuqbbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTA0MTIxMDYtZDUyZi0z
NzYzLWI2NmEtNGJiZjc1ZjNiOWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYi68MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACib0+qZ1DgG7ZC7Tqe573junrgSKYT8krZtJnonWOQYuftktQH96yhh
G0PZe/SQVOv2bebjL3xTBr1b/tvzJvGmuYf5SITFxmj9zskOIw7ATy3pQY5LKwHi
vC665HpVb79DdUt+Cv3sv1b59CwRo9Gga8/jHN75QCUJL5qLnKjgV/Fvx1eed+yk
lSx+wvM3ln6XQx9ri+Ep4Y4aIw9Krn11wJ7a+MsePGOKQdnyzkC+RSeavQ6AR+lC
OC4E5KjWoZlNyxIj7kwcM9Pe0QJEYgYmCiyjLAZhw0+DtEI0qjdreG1VIjiTS6kU
71Jg3JRVhKC7rRWc9qEcGQC6LPYK7u8=
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:24:10 2025 by rpki-client