Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0189c3c-d3d6-30db-a8fc-f21a5ccd650f.roa
File:                     c0189c3c-d3d6-30db-a8fc-f21a5ccd650f.roa (raw, json)
Hash identifier:          fCS04d6Ih4D/J79B8hBMgrMTV/FFQJGjVHzzLKGLWSk=
Subject key identifier:   A3:1C:A2:A9:00:10:CE:28:8C:F2:56:F1:09:D2:82:79:08:22:E7:D0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AADBA2D9CBB50EBB8CD5A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0189c3c-d3d6-30db-a8fc-f21a5ccd650f.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        98.196.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:db:a2:d9:cb:b5:0e:bb:8c:d5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=d84fe33f-fd27-4d77-853b-14bf2b0d3e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:29:15:9e:6f:ae:3d:8d:e2:a5:ba:50:9b:5b:
                    ce:01:7d:28:37:6b:36:26:6e:2b:81:2d:85:34:22:
                    5b:6f:3f:5a:11:3e:28:1a:de:d3:23:76:e1:63:f0:
                    2a:ac:31:86:65:f7:6a:66:d3:3d:91:5f:f1:e5:c6:
                    14:90:81:fe:ab:1f:a6:b0:6d:94:e8:2f:5e:2e:3c:
                    38:a3:db:bd:6d:5f:ac:3c:76:3c:e6:d2:d2:ac:0e:
                    99:c9:cd:86:7d:74:d7:97:74:03:f8:c0:5c:0f:f3:
                    97:46:87:74:a3:59:fe:56:bf:f0:d3:e8:23:22:a5:
                    7f:e4:b5:b9:ee:72:e3:3e:75:13:c3:79:6b:aa:12:
                    51:c5:8e:e6:1d:e2:54:e0:fd:12:36:58:05:ff:9d:
                    a2:e1:00:6c:55:65:7b:5c:80:97:b6:1d:79:63:05:
                    0a:fc:07:8d:0a:4c:59:a5:7a:63:2e:a5:32:d9:1a:
                    45:e9:78:cd:4f:e6:76:10:df:6c:0c:38:80:ee:f1:
                    5d:94:f9:a9:55:6f:f1:4a:c8:02:16:ee:14:34:83:
                    73:ac:fe:c9:ef:fc:ba:b1:d5:bd:60:1c:cb:3f:25:
                    12:d6:b4:39:ba:60:44:23:b5:2f:31:fd:f7:ff:84:
                    b8:da:74:3c:54:53:eb:b8:ff:32:15:ad:d5:e4:47:
                    76:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1C:A2:A9:00:10:CE:28:8C:F2:56:F1:09:D2:82:79:08:22:E7:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0189c3c-d3d6-30db-a8fc-f21a5ccd650f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.196.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:eb:50:f1:04:e1:53:44:32:95:73:ef:cb:a4:b6:e2:26:66:
         e7:8d:f1:62:13:27:2e:18:a8:b9:58:e1:95:1b:2f:4a:a5:d4:
         56:de:31:09:5b:b0:1a:d6:be:b0:55:7c:3d:ae:67:4e:ef:c0:
         ba:40:23:48:b6:27:ee:b7:b2:38:ed:72:e8:6c:a8:73:f3:98:
         6b:e9:75:20:46:2e:fa:68:c6:fa:74:d5:d2:6d:26:5a:53:f9:
         4a:af:ca:5c:f5:e5:7d:71:6c:4a:83:32:2d:bf:dd:f4:9d:1a:
         40:37:86:06:45:23:d3:01:87:21:d5:dc:d3:e7:8e:e0:0d:52:
         f0:50:d4:5a:e3:85:93:3c:67:bc:a1:90:51:37:74:40:8e:c4:
         2b:43:a1:96:a8:30:7e:fd:f8:7e:52:8c:6e:14:77:e3:d5:48:
         6b:06:f0:e4:ca:8a:e1:a2:58:80:b8:10:80:50:75:d5:3a:7e:
         2d:98:f5:9d:aa:32:fe:e5:73:bd:17:80:a9:fa:90:0a:38:15:
         36:e4:a0:ba:34:3c:13:fd:f1:96:f5:60:52:84:f9:98:26:08:
         c1:3f:db:f3:10:0a:1e:4e:1c:37:c4:fc:43:df:e4:ca:16:4b:
         c0:f0:d5:f9:cc:1d:da:cf:6f:a8:e2:95:5f:87:58:de:54:a7:
         58:99:e2:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqtui2cu1DruM1aAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk
ZDg0ZmUzM2YtZmQyNy00ZDc3LTg1M2ItMTRiZjJiMGQzZTI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnikVnm+uPY3ipbpQm1vOAX0oN2s2Jm4rgS2F
NCJbbz9aET4oGt7TI3bhY/AqrDGGZfdqZtM9kV/x5cYUkIH+qx+msG2U6C9eLjw4
o9u9bV+sPHY85tLSrA6Zyc2GfXTXl3QD+MBcD/OXRod0o1n+Vr/w0+gjIqV/5LW5
7nLjPnUTw3lrqhJRxY7mHeJU4P0SNlgF/52i4QBsVWV7XICXth15YwUK/AeNCkxZ
pXpjLqUy2RpF6XjNT+Z2EN9sDDiA7vFdlPmpVW/xSsgCFu4UNINzrP7J7/y6sdW9
YBzLPyUS1rQ5umBEI7UvMf33/4S42nQ8VFPruP8yFa3V5Ed2gQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKMcoqkAEM4ojPJW8QnSgnkIIufQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzAxODljM2MtZDNkNi0z
MGRiLWE4ZmMtZjIxYTVjY2Q2NTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYsRrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANrrUPEE4VNEMpVz78uktuImZueN8WITJy4YqLlY4ZUbL0ql1FbeMQlb
sBrWvrBVfD2uZ07vwLpAI0i2J+63sjjtcuhsqHPzmGvpdSBGLvpoxvp01dJtJlpT
+Uqvylz15X1xbEqDMi2/3fSdGkA3hgZFI9MBhyHV3NPnjuANUvBQ1FrjhZM8Z7yh
kFE3dECOxCtDoZaoMH79+H5SjG4Ud+PVSGsG8OTKiuGiWIC4EIBQddU6fi2Y9Z2q
Mv7lc70XgKn6kAo4FTbkoLo0PBP98Zb1YFKE+ZgmCME/2/MQCh5OHDfE/EPf5MoW
S8Dw1fnMHdrPb6jilV+HWN5Up1iZ4q8=
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:35:53 2025 by rpki-client