Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab4a4c02-70ea-3a95-81fb-c12a11f2014f.roa
File:                     ab4a4c02-70ea-3a95-81fb-c12a11f2014f.roa (raw, json)
Hash identifier:          ubWGsLQUfwcIufWz3Hy0nwFgYhzDhhxi9Wb+BGj8bPU=
Subject key identifier:   3C:D1:2D:DC:60:2A:DE:6A:61:BE:B1:B7:32:6E:54:6C:1D:F9:1F:26
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC2D77B3EF967E03811A2F0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab4a4c02-70ea-3a95-81fb-c12a11f2014f.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        98.63.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:d7:7b:3e:f9:67:e0:38:11:a2:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=9b003ec8-77fd-4941-8b92-3f90d9ad7325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d9:e5:3a:50:dc:58:c6:27:ef:9e:dc:b8:aa:
                    16:2e:53:74:0b:ee:95:b8:4c:76:70:2d:b6:13:f4:
                    c5:6c:51:0e:2b:77:90:f3:e1:f3:7e:b2:02:73:ee:
                    0e:2b:f9:53:c8:4e:a2:e6:e9:55:26:04:9c:86:6e:
                    9f:16:ce:d8:d5:ea:0c:d9:1a:0b:7d:57:aa:7f:05:
                    6c:05:2e:45:46:7e:87:c7:c6:f5:02:b7:49:ce:68:
                    ef:e5:9f:85:5d:16:ea:be:88:70:4b:51:e1:fa:9f:
                    63:57:13:be:b4:83:70:c9:b2:42:a0:69:8d:8b:57:
                    aa:a7:82:f1:cb:25:04:91:c0:bb:38:66:f4:5f:2c:
                    5c:e8:65:ef:eb:a7:c6:f3:74:bd:5f:58:64:a0:a8:
                    33:5e:89:89:0b:ce:ce:6c:d1:95:d0:b3:fe:bb:ca:
                    3a:0e:fe:a4:10:9d:c6:8e:31:94:ec:cb:c8:59:b0:
                    7f:26:23:c2:86:23:77:b1:84:1d:2f:9e:b7:13:1c:
                    c3:b6:8e:51:8b:ca:6c:51:10:69:05:45:a5:6f:2a:
                    f3:96:77:f5:7d:6d:3f:c1:e1:33:6d:6a:49:49:f0:
                    f6:25:56:c7:06:16:51:3d:fd:7d:e6:b3:86:81:e4:
                    9d:54:7f:d6:c8:b8:15:18:ee:f4:32:3e:81:0a:9a:
                    14:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D1:2D:DC:60:2A:DE:6A:61:BE:B1:B7:32:6E:54:6C:1D:F9:1F:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab4a4c02-70ea-3a95-81fb-c12a11f2014f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.63.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:3d:f8:0e:ab:0f:e7:c9:4b:19:99:b9:5f:d3:22:03:d2:be:
         61:2d:1f:41:fe:fe:d0:90:6b:6d:9c:33:6b:e5:03:34:61:94:
         e4:c1:c3:e8:14:46:79:5a:60:8c:24:7a:12:bb:db:00:10:e9:
         bf:f3:ac:dc:bd:63:f8:00:da:dc:f0:ab:ed:56:b2:4a:23:bf:
         77:ce:98:56:53:5e:c0:d7:ad:31:1c:57:be:a1:b0:aa:32:70:
         bc:a7:70:0f:10:e1:55:78:e3:7c:05:ef:63:ab:93:3f:6d:63:
         ce:7b:c9:18:b7:07:2f:2b:2e:b6:b3:86:89:51:07:eb:09:f9:
         37:af:ad:13:ee:4f:4f:4a:54:7a:fa:cd:51:2e:10:4c:14:12:
         c3:c7:ba:18:88:e0:c8:e5:a9:8f:1d:a0:a1:83:35:69:98:99:
         70:ed:a2:49:a3:7a:8f:d0:19:ee:6c:3c:b3:cc:ab:99:9c:8d:
         79:00:d6:21:2d:d9:d1:39:28:17:78:a9:b0:30:cc:f8:bf:ed:
         eb:5b:4d:be:ff:cc:f2:be:c3:f6:95:d7:c7:5f:5c:78:bd:73:
         b9:ae:e6:9d:ac:bc:a2:4d:ec:77:52:ab:02:00:5a:dd:77:c8:
         29:df:00:f1:b8:1c:a0:b7:2d:47:be:90:86:37:68:26:37:fd:
         cc:f9:4b:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswtd7Pvln4DgRovAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk
OWIwMDNlYzgtNzdmZC00OTQxLThiOTItM2Y5MGQ5YWQ3MzI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNnlOlDcWMYn757cuKoWLlN0C+6VuEx2cC22
E/TFbFEOK3eQ8+HzfrICc+4OK/lTyE6i5ulVJgSchm6fFs7Y1eoM2RoLfVeqfwVs
BS5FRn6Hx8b1ArdJzmjv5Z+FXRbqvohwS1Hh+p9jVxO+tINwybJCoGmNi1eqp4Lx
yyUEkcC7OGb0Xyxc6GXv66fG83S9X1hkoKgzXomJC87ObNGV0LP+u8o6Dv6kEJ3G
jjGU7MvIWbB/JiPChiN3sYQdL563ExzDto5Ri8psURBpBUWlbyrzlnf1fW0/weEz
bWpJSfD2JVbHBhZRPf195rOGgeSdVH/WyLgVGO70Mj6BCpoUgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDzRLdxgKt5qYb6xtzJuVGwd+R8mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWI0YTRjMDItNzBlYS0z
YTk1LTgxZmItYzEyYTExZjIwMTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYj9AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB09+A6rD+fJSxmZuV/TIgPSvmEtH0H+/tCQa22cM2vlAzRhlOTBw+gU
RnlaYIwkehK72wAQ6b/zrNy9Y/gA2tzwq+1Wskojv3fOmFZTXsDXrTEcV76hsKoy
cLyncA8Q4VV443wF72Orkz9tY857yRi3By8rLrazholRB+sJ+TevrRPuT09KVHr6
zVEuEEwUEsPHuhiI4MjlqY8doKGDNWmYmXDtokmjeo/QGe5sPLPMq5mcjXkA1iEt
2dE5KBd4qbAwzPi/7etbTb7/zPK+w/aV18dfXHi9c7mu5p2svKJN7HdSqwIAWt13
yCnfAPG4HKC3LUe+kIY3aCY3/cz5S3U=
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:57:14 2025 by rpki-client