Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/83cc06d3-58b7-3e28-a6c8-c1798e19af2b.roa
File:                     83cc06d3-58b7-3e28-a6c8-c1798e19af2b.roa (raw, json)
Hash identifier:          dOp9VW+mHCE3rflbHOwWMZd38kvt03yyAsEyuk9rsJ4=
Subject key identifier:   A3:31:B0:8D:7E:C8:31:0E:BA:18:44:8A:28:1E:A1:34:97:B9:2D:10
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE0317DE99637277A24BE2600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/83cc06d3-58b7-3e28-a6c8-c1798e19af2b.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        98.230.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:7d:e9:96:37:27:7a:24:be:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=be0ef52b-bb53-42d4-8363-776d71d71aac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:16:70:4e:be:f3:ea:96:43:91:38:7d:7e:65:
                    ec:14:cd:46:f9:48:6f:37:e5:cd:21:e3:71:84:1a:
                    fc:8f:f4:8d:fb:ed:f0:df:fe:f7:c8:3e:51:af:69:
                    10:86:bb:42:99:4b:98:7b:ca:01:7e:7e:83:9c:28:
                    23:bc:29:74:25:95:52:07:a8:86:1a:a4:76:ff:45:
                    df:67:74:dc:33:fa:2a:fb:7d:d2:f7:d1:56:34:74:
                    31:fa:f3:db:7a:e7:15:37:4b:e9:0e:f7:10:ad:82:
                    7d:7e:75:04:c1:a2:42:df:50:90:97:e7:9e:2f:22:
                    32:a1:c9:33:67:eb:dc:79:9f:21:29:62:83:0e:c8:
                    56:8b:cc:e9:a5:7e:bf:cd:49:2f:35:0d:b9:0a:ec:
                    2b:69:96:cf:0b:ee:07:27:0e:7c:3a:19:da:15:66:
                    dc:e8:f0:1f:6e:e3:22:e0:58:a0:7a:de:17:81:e8:
                    71:e5:f9:45:4f:05:75:65:fa:f1:d6:0a:58:90:9a:
                    9b:4c:1c:16:35:04:ef:82:b3:11:6d:30:cc:85:39:
                    07:29:6e:08:ba:29:81:e8:3e:3a:01:dc:b3:a6:20:
                    b3:4d:b0:f1:0d:f2:77:36:48:2e:10:66:ca:1e:ad:
                    84:43:d1:16:8e:84:7a:43:4b:4e:c9:dd:50:ff:24:
                    42:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:31:B0:8D:7E:C8:31:0E:BA:18:44:8A:28:1E:A1:34:97:B9:2D:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/83cc06d3-58b7-3e28-a6c8-c1798e19af2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.230.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:ed:4a:ee:47:85:39:0c:66:78:be:b9:e1:66:c4:54:d3:89:
         81:c5:da:03:fa:16:24:ad:c9:1d:fa:c5:e0:e5:76:ad:4d:67:
         05:34:ff:e8:fa:66:cc:1f:ea:4d:00:a1:55:24:1a:1f:d0:ee:
         10:05:30:4b:5d:3e:26:13:e2:f1:c1:24:96:0a:4c:4d:b6:30:
         d8:b1:f0:33:83:47:d6:d4:93:88:28:a1:51:77:a3:72:16:13:
         44:80:bb:c7:c8:44:cc:fd:b5:22:be:da:80:0e:5f:1f:06:bb:
         48:cb:63:41:46:90:cc:89:32:a1:8d:93:06:c4:f0:de:4c:f1:
         c8:13:b1:c6:55:ff:10:4c:e3:b6:9e:1a:4c:61:6a:98:a5:c0:
         b1:88:77:68:e5:8d:d0:8e:b2:13:90:22:2b:45:d6:0a:54:22:
         06:22:3a:13:b0:37:c4:92:b3:17:42:14:6b:99:d1:08:c0:b1:
         e0:41:6b:7b:ad:97:e8:4d:20:85:15:c8:3c:d1:3f:b2:54:f9:
         31:4f:ea:c0:55:1f:47:cf:37:42:6a:d3:23:75:a1:26:ea:32:
         eb:5f:cc:b9:d2:16:79:b6:bc:3f:8b:56:83:be:52:0b:a2:dc:
         5f:09:dc:6b:81:41:65:da:5b:64:56:0e:4a:38:e8:a8:67:b1:
         20:41:9b:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMX3pljcneiS+JgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk
YmUwZWY1MmItYmI1My00MmQ0LTgzNjMtNzc2ZDcxZDcxYWFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBZwTr7z6pZDkTh9fmXsFM1G+UhvN+XNIeNx
hBr8j/SN++3w3/73yD5Rr2kQhrtCmUuYe8oBfn6DnCgjvCl0JZVSB6iGGqR2/0Xf
Z3TcM/oq+33S99FWNHQx+vPbeucVN0vpDvcQrYJ9fnUEwaJC31CQl+eeLyIyockz
Z+vceZ8hKWKDDshWi8zppX6/zUkvNQ25CuwraZbPC+4HJw58OhnaFWbc6PAfbuMi
4Figet4Xgehx5flFTwV1Zfrx1gpYkJqbTBwWNQTvgrMRbTDMhTkHKW4IuimB6D46
AdyzpiCzTbDxDfJ3NkguEGbKHq2EQ9EWjoR6Q0tOyd1Q/yRCBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKMxsI1+yDEOuhhEiigeoTSXuS0QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODNjYzA2ZDMtNThiNy0z
ZTI4LWE2YzgtYzE3OThlMTlhZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYuaqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKHtSu5HhTkMZni+ueFmxFTTiYHF2gP6FiStyR36xeDldq1NZwU0/+j6
Zswf6k0AoVUkGh/Q7hAFMEtdPiYT4vHBJJYKTE22MNix8DODR9bUk4gooVF3o3IW
E0SAu8fIRMz9tSK+2oAOXx8Gu0jLY0FGkMyJMqGNkwbE8N5M8cgTscZV/xBM47ae
GkxhapilwLGId2jljdCOshOQIitF1gpUIgYiOhOwN8SSsxdCFGuZ0QjAseBBa3ut
l+hNIIUVyDzRP7JU+TFP6sBVH0fPN0Jq0yN1oSbqMutfzLnSFnm2vD+LVoO+Ugui
3F8J3GuBQWXaW2RWDko46KhnsSBBmxw=
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:07:49 2025 by rpki-client