Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab13dc24-6a16-3f22-a096-b57145f57efb.roa
File:                     ab13dc24-6a16-3f22-a096-b57145f57efb.roa (raw, json)
Hash identifier:          To/CBfmpTuA3jTXuwHrDNcG2pMqzhd9JfiTUdvQ8+lA=
Subject key identifier:   65:62:30:C7:33:64:50:A6:6D:47:A9:65:1B:D6:C8:50:0A:5A:6E:A1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC452A0D2404C41CFB63C50
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab13dc24-6a16-3f22-a096-b57145f57efb.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        71.201.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c4:52:a0:d2:40:4c:41:cf:b6:3c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=2c31dd3e-a14b-4e0f-8e16-90e9c6a345ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1d:a5:42:31:74:42:53:d3:00:b6:84:d6:d3:
                    78:20:7a:b9:0e:e9:74:48:50:76:58:ca:32:be:1a:
                    78:36:15:25:79:16:a2:cc:c5:36:13:7c:dc:40:28:
                    44:82:10:99:e2:51:be:84:e3:94:18:4d:d1:66:98:
                    ac:24:74:34:23:84:81:64:a2:97:de:d8:bc:dc:e4:
                    ff:5d:8e:bf:32:8f:04:35:5e:b3:f2:13:7f:a4:94:
                    e4:6e:43:8a:9b:1b:3d:5c:d3:81:db:90:91:78:e3:
                    24:da:21:c4:ca:04:0e:8b:5a:1b:ba:59:12:a8:80:
                    21:07:ba:5f:61:74:d9:7d:dd:d4:53:9e:41:fe:51:
                    1b:fc:e9:a1:71:0b:72:11:25:33:88:4f:f1:05:ac:
                    64:77:f2:8d:c9:b6:ff:08:95:9d:84:da:8b:0f:6b:
                    0a:04:01:4a:cc:39:5b:6b:3d:49:16:1a:aa:44:7c:
                    d9:9d:51:36:04:93:f5:ae:f5:78:88:7b:47:df:d7:
                    0c:45:4a:12:97:ef:3c:8c:0f:e2:6f:1d:77:33:df:
                    61:e7:df:50:2a:ad:08:3b:97:01:53:a9:ac:21:20:
                    d1:3a:72:65:cd:cd:40:bc:7a:c0:62:ff:04:e8:2b:
                    dd:84:58:c0:9a:83:c9:40:8e:76:30:1e:6a:79:e7:
                    58:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:62:30:C7:33:64:50:A6:6D:47:A9:65:1B:D6:C8:50:0A:5A:6E:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab13dc24-6a16-3f22-a096-b57145f57efb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.201.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:3c:ca:8d:5a:72:79:15:7b:36:10:0d:93:d5:a0:e8:87:2d:
         45:85:ed:40:1a:dc:b1:56:58:94:e7:c0:11:3a:ec:f0:5a:e2:
         06:c0:1c:7c:38:46:3f:dc:0e:ea:89:85:aa:02:a3:19:f6:93:
         40:d0:30:00:c7:03:9f:97:02:27:66:ce:ff:49:df:5c:88:e5:
         cb:ac:90:d1:fa:09:6c:7c:67:09:bd:26:44:e0:66:5e:ac:20:
         af:6b:01:21:ba:c0:03:43:e4:d4:33:37:ae:48:d4:27:de:00:
         6f:82:bb:ba:d3:cd:5c:4c:46:ab:91:ab:ed:e9:7e:2a:3b:bf:
         4b:95:d5:a1:81:10:8f:ce:ce:d9:ac:6e:ef:4b:ae:7b:7f:c9:
         10:16:c4:81:bc:49:c9:f5:81:66:0a:61:a3:f0:15:a0:9f:72:
         bb:f6:42:7d:58:1f:eb:0c:a0:15:ff:ca:5d:0e:72:da:64:4c:
         f1:61:ae:81:5f:c3:4a:ed:5e:a1:68:be:2e:14:d3:03:ab:59:
         b6:f9:d4:8c:83:c2:b5:6a:88:4b:79:9d:3a:f2:b4:f8:17:d8:
         dc:35:df:9a:18:ee:60:d4:eb:e9:83:78:53:90:95:6c:63:62:
         40:25:61:72:55:46:1e:20:55:25:ca:2d:dd:24:63:62:5f:81:
         7b:14:bc:5d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxFKg0kBMQc+2PFAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk
MmMzMWRkM2UtYTE0Yi00ZTBmLThlMTYtOTBlOWM2YTM0NWFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR2lQjF0QlPTALaE1tN4IHq5Dul0SFB2WMoy
vhp4NhUleRaizMU2E3zcQChEghCZ4lG+hOOUGE3RZpisJHQ0I4SBZKKX3ti83OT/
XY6/Mo8ENV6z8hN/pJTkbkOKmxs9XNOB25CReOMk2iHEygQOi1obulkSqIAhB7pf
YXTZfd3UU55B/lEb/OmhcQtyESUziE/xBaxkd/KNybb/CJWdhNqLD2sKBAFKzDlb
az1JFhqqRHzZnVE2BJP1rvV4iHtH39cMRUoSl+88jA/ibx13M99h599QKq0IO5cB
U6msISDROnJlzc1AvHrAYv8E6CvdhFjAmoPJQI52MB5qeedYswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGViMMczZFCmbUepZRvWyFAKWm6hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWIxM2RjMjQtNmExNi0z
ZjIyLWEwOTYtYjU3MTQ1ZjU3ZWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8nGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIY8yo1acnkVezYQDZPVoOiHLUWF7UAa3LFWWJTnwBE67PBa4gbAHHw4
Rj/cDuqJhaoCoxn2k0DQMADHA5+XAidmzv9J31yI5cuskNH6CWx8Zwm9JkTgZl6s
IK9rASG6wAND5NQzN65I1CfeAG+Cu7rTzVxMRquRq+3pfio7v0uV1aGBEI/Oztms
bu9Lrnt/yRAWxIG8Scn1gWYKYaPwFaCfcrv2Qn1YH+sMoBX/yl0OctpkTPFhroFf
w0rtXqFovi4U0wOrWbb51IyDwrVqiEt5nTrytPgX2Nw135oY7mDU6+mDeFOQlWxj
YkAlYXJVRh4gVSXKLd0kY2JfgXsUvF0=
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:03:08 2025 by rpki-client