Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c195ed37-5e1e-3df8-877f-134d4625dc6a.roa
File:                     c195ed37-5e1e-3df8-877f-134d4625dc6a.roa (raw, json)
Hash identifier:          p2wx5/ay6m5+kUp6HXkDBYZ0dM9u53oNHaENnB7470k=
Subject key identifier:   DC:03:E6:0B:B5:06:4F:35:1A:9D:D7:C7:AF:7E:54:D4:E9:92:79:29
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A94F153275228CEBD0F1E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c195ed37-5e1e-3df8-877f-134d4625dc6a.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        98.44.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:4f:15:32:75:22:8c:eb:d0:f1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=5eee61b5-9d78-4e15-bad7-d22ab7e87930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9d:7b:27:02:f7:fa:ce:98:34:3e:1c:91:3f:
                    f5:66:d2:96:9e:4e:b7:76:28:8d:ed:fd:58:f2:f8:
                    60:1e:c6:62:7d:86:02:2b:02:eb:fa:c2:e0:e3:a7:
                    3a:b1:5c:9d:ad:b3:a0:c9:81:c0:1c:77:c6:38:35:
                    7a:6c:93:4b:93:f6:05:f6:eb:57:b1:81:3c:ea:3b:
                    7e:44:42:5c:c5:e7:e2:ee:00:c2:fe:d4:54:55:e1:
                    81:69:30:03:55:61:1d:c0:a9:95:fb:ab:00:97:b3:
                    b7:c0:90:da:37:3c:2c:01:0c:87:60:ef:66:75:09:
                    d3:48:a1:b5:87:f6:a3:ab:cb:84:0e:68:ce:46:33:
                    29:ac:68:f2:2b:ec:28:86:bc:d3:6e:9e:ad:f2:48:
                    fb:c6:b1:82:4f:4c:ca:8c:49:b3:29:25:72:25:b6:
                    35:43:3c:6e:50:16:49:c0:ae:49:93:6d:b7:3e:b9:
                    be:ed:95:d1:cb:78:64:3e:85:1c:fa:54:b6:f3:09:
                    86:58:27:ec:e7:21:1d:d9:6d:ae:c3:58:e0:eb:6c:
                    ad:d3:83:63:6d:fc:5e:d7:2e:44:2a:85:69:0a:0d:
                    8e:81:6b:0b:e4:76:b0:53:13:43:56:66:65:36:f6:
                    99:86:0e:f9:ad:b4:ac:d8:a4:51:2d:ac:85:da:e1:
                    a4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:03:E6:0B:B5:06:4F:35:1A:9D:D7:C7:AF:7E:54:D4:E9:92:79:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c195ed37-5e1e-3df8-877f-134d4625dc6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.44.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:3a:5d:1b:c6:b2:6b:db:b9:4b:cd:70:df:7c:02:e6:99:02:
         89:0c:a2:48:4f:f2:02:a5:63:6e:a4:10:8c:c9:cf:94:25:33:
         53:f8:9d:36:82:9c:f1:9a:81:e8:03:ac:98:a3:78:a7:3b:87:
         d2:58:8c:bb:5f:ba:b0:f7:78:77:01:a0:1a:18:2c:a9:62:5f:
         bb:65:53:b3:f8:1b:ec:e3:f5:fa:16:31:ae:39:4f:b2:5b:14:
         1d:c3:20:67:84:07:a2:2f:c0:47:01:03:1c:b3:34:84:2e:3c:
         d9:b5:1e:4d:ee:78:37:22:9a:a8:b4:25:c6:7a:24:52:fc:bf:
         12:9a:19:ad:b0:43:29:b9:26:b1:1e:f2:f3:16:22:65:56:5f:
         ab:65:4d:b0:8a:0c:af:09:fd:03:8b:4f:6c:34:bd:64:9f:2c:
         68:fe:e8:68:6e:45:53:95:23:86:6e:ad:d0:45:18:d9:f9:5e:
         18:96:82:14:4f:c3:77:85:a6:59:4d:d6:65:18:32:72:50:a8:
         e8:79:ca:b0:77:d5:b3:42:69:b6:d8:38:a1:0f:d4:1a:ac:c8:
         f2:19:7d:86:fa:ea:61:32:95:06:e8:89:60:ae:f9:af:45:3d:
         bb:e4:30:2b:87:27:62:8d:d8:06:22:6d:58:e7:ea:31:0e:ac:
         ab:ad:b9:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqU8VMnUijOvQ8eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk
NWVlZTYxYjUtOWQ3OC00ZTE1LWJhZDctZDIyYWI3ZTg3OTMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ17JwL3+s6YND4ckT/1ZtKWnk63diiN7f1Y
8vhgHsZifYYCKwLr+sLg46c6sVydrbOgyYHAHHfGODV6bJNLk/YF9utXsYE86jt+
REJcxefi7gDC/tRUVeGBaTADVWEdwKmV+6sAl7O3wJDaNzwsAQyHYO9mdQnTSKG1
h/ajq8uEDmjORjMprGjyK+wohrzTbp6t8kj7xrGCT0zKjEmzKSVyJbY1QzxuUBZJ
wK5Jk223Prm+7ZXRy3hkPoUc+lS28wmGWCfs5yEd2W2uw1jg62yt04Njbfxe1y5E
KoVpCg2OgWsL5HawUxNDVmZlNvaZhg75rbSs2KRRLayF2uGkQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNwD5gu1Bk81Gp3Xx69+VNTpknkpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzE5NWVkMzctNWUxZS0z
ZGY4LTg3N2YtMTM0ZDQ2MjVkYzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYiyFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANU6XRvGsmvbuUvNcN98AuaZAokMokhP8gKlY26kEIzJz5QlM1P4nTaC
nPGagegDrJijeKc7h9JYjLtfurD3eHcBoBoYLKliX7tlU7P4G+zj9foWMa45T7Jb
FB3DIGeEB6IvwEcBAxyzNIQuPNm1Hk3ueDcimqi0JcZ6JFL8vxKaGa2wQym5JrEe
8vMWImVWX6tlTbCKDK8J/QOLT2w0vWSfLGj+6GhuRVOVI4ZurdBFGNn5XhiWghRP
w3eFpllN1mUYMnJQqOh5yrB31bNCabbYOKEP1BqsyPIZfYb66mEylQboiWCu+a9F
PbvkMCuHJ2KN2AYibVjn6jEOrKutucs=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:23:37 2025 by rpki-client