Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/702e5b69-c467-3e6d-9501-83b3fe8c773d.roa
File:                     702e5b69-c467-3e6d-9501-83b3fe8c773d.roa (raw, json)
Hash identifier:          GuC3QpwmprdyF9MoqWQkW6KpX1lmHPR4SOzMl3ZViZs=
Subject key identifier:   6C:C8:40:63:0D:42:B3:AF:DC:04:C8:1B:DF:C9:01:08:5C:F9:DB:D8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC2C17686CB64ED2A486500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/702e5b69-c467-3e6d-9501-83b3fe8c773d.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        98.222.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:c1:76:86:cb:64:ed:2a:48:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=68129216-096f-4d13-92db-da2b59f23da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0c:1e:c4:d5:b3:d4:d1:0d:95:d8:8c:9d:26:
                    54:80:ce:56:de:26:93:f8:3e:3e:7d:25:4f:10:af:
                    d3:b7:b2:d4:ce:2d:da:b6:e2:c6:64:c2:4d:44:54:
                    f4:8b:0e:9f:52:b2:d6:b1:bb:ed:2a:ed:98:20:c7:
                    0d:91:d5:7c:0b:1e:5f:fe:da:71:bc:dd:63:98:b2:
                    58:4e:25:0e:7c:c4:f9:69:25:7e:c8:d9:7f:2a:9e:
                    41:a6:76:c4:93:84:68:a1:eb:ba:63:44:16:36:41:
                    c0:5a:cb:c4:0a:ed:45:92:c1:19:08:21:d9:99:45:
                    89:77:d9:16:82:a8:09:36:68:80:c4:d4:1e:15:e6:
                    76:8e:04:68:13:4b:ce:d3:a3:49:01:4f:65:f0:84:
                    92:a7:14:42:51:26:4b:3d:e7:de:7a:23:38:08:8b:
                    c1:a7:d5:0b:16:17:fa:62:21:b1:f5:88:33:0f:e1:
                    1a:a1:34:d5:d1:c0:47:a6:96:bc:95:87:b5:3c:fc:
                    e6:82:68:6f:f8:3b:49:53:af:05:cd:08:eb:86:a4:
                    5b:b3:6d:8d:0a:bd:f5:fd:15:cf:1c:f0:a3:d2:99:
                    57:7c:f3:99:e4:f6:30:50:89:84:a9:df:60:fb:89:
                    f7:b4:82:fc:26:34:05:88:39:39:68:a4:3c:66:b3:
                    bd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C8:40:63:0D:42:B3:AF:DC:04:C8:1B:DF:C9:01:08:5C:F9:DB:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/702e5b69-c467-3e6d-9501-83b3fe8c773d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.222.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:aa:a4:93:26:d2:b7:c6:45:d6:ac:1a:4b:e2:b4:05:57:7a:
         5e:1d:1c:63:fc:a1:8f:88:00:1f:a7:5f:bf:95:10:cb:68:94:
         b0:52:75:83:0b:39:66:f6:ab:cc:3c:ea:18:09:cd:1e:06:fe:
         2e:05:f4:d8:cf:28:50:6a:f6:f2:49:85:5c:19:9d:1b:64:b4:
         fc:44:8b:4c:a4:e5:22:09:7a:e6:b0:15:86:35:c5:c0:61:e9:
         a7:85:90:73:82:54:35:63:dc:47:a3:e1:4a:79:a0:17:21:c0:
         92:c2:9d:f8:0d:5c:cd:da:26:9a:ad:16:58:e9:24:06:37:bf:
         7d:d2:3c:a4:0d:ee:d1:4c:e4:5a:89:92:52:5e:49:cc:f5:92:
         96:07:dc:93:0f:06:aa:f6:55:f3:98:49:9c:1a:16:49:07:0e:
         08:8a:d2:67:75:45:33:2f:7d:90:2e:8f:3f:04:8f:b8:62:30:
         82:5c:1d:62:cf:fe:4d:94:7e:7b:16:86:80:9d:23:8f:37:82:
         28:41:06:6d:bf:cc:55:e9:e8:55:36:55:aa:8d:ec:d2:57:64:
         d6:a0:be:bd:6f:63:10:4c:fb:8f:b2:3e:01:77:25:8f:a0:d5:
         bd:10:4f:04:2c:7d:9c:39:07:c9:5c:62:23:d6:95:22:44:c3:
         ff:fb:0d:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswsF2hstk7SpIZQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk
NjgxMjkyMTYtMDk2Zi00ZDEzLTkyZGItZGEyYjU5ZjIzZGE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgwexNWz1NENldiMnSZUgM5W3iaT+D4+fSVP
EK/Tt7LUzi3atuLGZMJNRFT0iw6fUrLWsbvtKu2YIMcNkdV8Cx5f/tpxvN1jmLJY
TiUOfMT5aSV+yNl/Kp5BpnbEk4Rooeu6Y0QWNkHAWsvECu1FksEZCCHZmUWJd9kW
gqgJNmiAxNQeFeZ2jgRoE0vO06NJAU9l8ISSpxRCUSZLPefeeiM4CIvBp9ULFhf6
YiGx9YgzD+EaoTTV0cBHppa8lYe1PPzmgmhv+DtJU68FzQjrhqRbs22NCr31/RXP
HPCj0plXfPOZ5PYwUImEqd9g+4n3tIL8JjQFiDk5aKQ8ZrO9TwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGzIQGMNQrOv3ATIG9/JAQhc+dvYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzAyZTViNjktYzQ2Ny0z
ZTZkLTk1MDEtODNiM2ZlOGM3NzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYt6DMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAACqpJMm0rfGRdasGkvitAVXel4dHGP8oY+IAB+nX7+VEMtolLBSdYML
OWb2q8w86hgJzR4G/i4F9NjPKFBq9vJJhVwZnRtktPxEi0yk5SIJeuawFYY1xcBh
6aeFkHOCVDVj3Eej4Up5oBchwJLCnfgNXM3aJpqtFljpJAY3v33SPKQN7tFM5FqJ
klJeScz1kpYH3JMPBqr2VfOYSZwaFkkHDgiK0md1RTMvfZAujz8Ej7hiMIJcHWLP
/k2UfnsWhoCdI483gihBBm2/zFXp6FU2VaqN7NJXZNagvr1vYxBM+4+yPgF3JY+g
1b0QTwQsfZw5B8lcYiPWlSJEw//7DQU=
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:08:08 2025 by rpki-client