Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/51e50657-2bd8-3b25-a25b-bd87dd6891e8.roa
File:                     51e50657-2bd8-3b25-a25b-bd87dd6891e8.roa (raw, json)
Hash identifier:          UtvjZyRCk5ve5s5hyc+3KADy/rP1P6QPv+d3rbVOqz4=
Subject key identifier:   F9:3C:C0:3B:DC:DC:B2:83:8F:08:33:1D:62:26:73:AD:70:71:CF:D7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C06A97FBEBED13CC0018140
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/51e50657-2bd8-3b25-a25b-bd87dd6891e8.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        98.193.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:a9:7f:be:be:d1:3c:c0:01:81:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=75d94a0a-e4d0-47b2-a281-ea30bf662f28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4c:44:6c:b5:89:bd:dc:7f:d8:c7:9d:5e:df:
                    f7:4d:4d:83:39:bc:5d:17:23:ec:ff:e7:e6:23:d3:
                    95:bf:a1:66:24:6c:b2:63:cf:b7:2d:de:d2:9c:f7:
                    cf:c7:43:10:9f:a2:74:94:5e:70:a9:fb:b6:8d:2e:
                    ea:0f:f9:25:16:d5:4c:78:50:d6:34:ee:c3:1b:15:
                    0c:f8:b1:e9:fd:4f:47:26:da:f4:c2:87:34:d0:48:
                    81:79:c6:58:15:54:31:b9:0c:55:12:4c:ee:60:d0:
                    5d:e0:c1:71:ff:e5:80:af:64:ad:a6:79:ea:5f:08:
                    d6:e1:f4:64:4c:1d:59:3e:cf:e5:87:e7:17:2d:9e:
                    27:28:1c:34:d7:04:3f:e6:3f:8a:a5:57:55:90:ec:
                    25:36:f8:57:1a:5a:0a:31:6c:c9:87:49:fb:7e:74:
                    64:50:27:b7:e7:5b:40:ea:a4:77:ab:d0:bd:b0:19:
                    c4:67:f4:02:dc:58:45:ce:bb:d2:c1:a9:ba:0a:e3:
                    b9:31:4d:77:a4:32:02:b8:23:c4:b5:8e:d1:8b:19:
                    d9:d1:a3:05:ea:e7:c9:cb:61:31:3c:fe:59:12:32:
                    5c:6c:83:35:60:0b:75:db:de:c7:92:40:49:c6:00:
                    66:f2:7c:07:8d:05:e2:5e:42:89:3c:13:ab:01:86:
                    8d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3C:C0:3B:DC:DC:B2:83:8F:08:33:1D:62:26:73:AD:70:71:CF:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/51e50657-2bd8-3b25-a25b-bd87dd6891e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.193.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:76:d4:22:05:8d:7b:59:68:b5:83:55:41:ce:dc:91:0a:81:
         9a:cf:af:9a:a5:65:79:98:78:39:c7:43:46:07:d7:4d:44:e8:
         30:58:78:13:54:57:34:88:09:39:96:93:a8:24:d8:99:3d:06:
         08:d8:16:9a:c6:19:09:60:36:36:39:86:70:22:b3:cd:71:67:
         bf:71:b7:33:e6:6d:1e:f9:36:43:70:9d:f9:c5:6a:48:6f:bb:
         34:e4:79:1f:8f:ed:00:c1:86:8e:79:94:7a:86:4e:3e:ec:3f:
         55:86:c6:eb:86:1e:17:ea:a7:a5:33:98:dd:d4:72:2a:22:23:
         db:be:39:46:7d:63:41:b2:77:33:df:dd:20:16:70:fb:4e:62:
         aa:6e:96:c5:89:d4:96:14:2a:36:59:08:95:f1:4e:11:9e:15:
         bd:4d:46:cc:ec:84:02:ad:7c:c0:1b:41:a0:26:b7:15:7b:03:
         7f:2f:db:2d:de:2a:a1:8c:73:e3:c6:44:e7:95:5c:36:c5:2f:
         e3:cb:34:8e:30:2d:69:05:63:2b:d2:be:18:16:65:d3:f9:0d:
         f2:59:51:d8:52:bc:1b:27:15:56:d9:15:31:a1:28:a4:d2:bf:
         eb:3d:37:81:da:1b:6c:f1:93:9a:f5:83:44:c5:ca:a1:4a:8b:
         ec:89:8d:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBql/vr7RPMABgUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
NzVkOTRhMGEtZTRkMC00N2IyLWEyODEtZWEzMGJmNjYyZjI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUxEbLWJvdx/2MedXt/3TU2DObxdFyPs/+fm
I9OVv6FmJGyyY8+3Ld7SnPfPx0MQn6J0lF5wqfu2jS7qD/klFtVMeFDWNO7DGxUM
+LHp/U9HJtr0woc00EiBecZYFVQxuQxVEkzuYNBd4MFx/+WAr2StpnnqXwjW4fRk
TB1ZPs/lh+cXLZ4nKBw01wQ/5j+KpVdVkOwlNvhXGloKMWzJh0n7fnRkUCe351tA
6qR3q9C9sBnEZ/QC3FhFzrvSwam6CuO5MU13pDICuCPEtY7RixnZ0aMF6ufJy2Ex
PP5ZEjJcbIM1YAt1297HkkBJxgBm8nwHjQXiXkKJPBOrAYaNmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPk8wDvc3LKDjwgzHWImc61wcc/XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTFlNTA2NTctMmJkOC0z
YjI1LWEyNWItYmQ4N2RkNjg5MWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYsEcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADx21CIFjXtZaLWDVUHO3JEKgZrPr5qlZXmYeDnHQ0YH101E6DBYeBNU
VzSICTmWk6gk2Jk9BgjYFprGGQlgNjY5hnAis81xZ79xtzPmbR75NkNwnfnFakhv
uzTkeR+P7QDBho55lHqGTj7sP1WGxuuGHhfqp6UzmN3UcioiI9u+OUZ9Y0GydzPf
3SAWcPtOYqpulsWJ1JYUKjZZCJXxThGeFb1NRszshAKtfMAbQaAmtxV7A38v2y3e
KqGMc+PGROeVXDbFL+PLNI4wLWkFYyvSvhgWZdP5DfJZUdhSvBsnFVbZFTGhKKTS
v+s9N4HaG2zxk5r1g0TFyqFKi+yJjTQ=
-----END CERTIFICATE-----
Generated at Mon Jun 30 17:20:34 2025 by rpki-client