Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/2f6fb8ee-4b76-3e40-83e1-91ba75b74c01.roa
File:                     2f6fb8ee-4b76-3e40-83e1-91ba75b74c01.roa (raw, json)
Hash identifier:          GG5XdDEsKXQqQMowgpaE0s3PcMCqrUx+CZjhLM4zl0Q=
Subject key identifier:   1F:36:B3:60:09:80:EE:25:50:A8:59:95:09:B4:CF:9F:65:3E:7A:A1
Certificate issuer:       /CN=66ee137c-4201-4a21-a4f5-2f3161305281
Certificate serial:       010D0C9F4328584A480AE3B576C05EA3EA108D00
Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/2f6fb8ee-4b76-3e40-83e1-91ba75b74c01.roa
Signing time:             Mon 23 Jun 2025 01:00:49 +0000
ROA not before:           Mon 23 Jun 2025 01:00:49 +0000
ROA not after:            Sun 21 Sep 2025 01:00:49 +0000
asID:                     8796
IP address blocks:        98.158.28.0/24 maxlen: 24
                          98.158.29.0/24 maxlen: 24
                          98.158.30.0/24 maxlen: 24
                          98.158.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:48:0a:e3:b5:76:c0:5e:a3:ea:10:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281
        Validity
            Not Before: Jun 23 01:00:49 2025 GMT
            Not After : Sep 21 01:00:49 2025 GMT
        Subject: CN=9a66fa37-ea33-4cfe-97f3-7d4f945e8089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9f:3e:b3:a2:21:79:a2:78:73:a3:37:82:9d:
                    d3:38:1a:2b:60:1d:58:48:78:ad:33:29:e5:09:05:
                    2d:3e:bc:e4:55:91:05:d4:fb:e4:48:e4:ff:9c:80:
                    0c:f1:05:03:f2:90:74:c6:ee:96:8c:83:a9:a6:87:
                    a3:2e:86:f4:42:ab:dc:1a:79:93:e8:82:6e:90:9b:
                    69:40:0b:95:a9:dd:38:50:5c:d6:a5:d2:3f:9b:63:
                    ac:0d:b6:6b:04:89:cf:14:28:84:d7:93:c6:5a:10:
                    8c:de:41:fd:81:99:47:45:12:53:95:a2:d9:04:2f:
                    c7:55:ac:e0:5d:d8:e1:0c:48:c1:77:9b:af:59:b0:
                    d0:dd:38:00:a5:b2:2c:34:99:31:25:8d:00:24:d3:
                    c2:c6:9d:51:cc:02:43:9d:32:47:1d:b1:ce:aa:fc:
                    72:b9:95:78:74:ef:62:e1:2e:76:4c:f7:04:d9:e5:
                    28:ad:84:04:aa:73:9f:45:7a:b4:dc:bf:f9:4d:55:
                    33:c0:52:24:6c:c1:3e:79:3e:30:04:fc:e3:b4:3d:
                    52:02:8e:06:0e:e8:fe:a4:ed:a2:cb:3c:b9:2a:5a:
                    2d:31:08:a5:ef:74:5a:7c:e4:64:14:2c:e9:4a:3d:
                    05:30:6e:56:59:d7:3a:dc:f4:2d:8f:e1:13:f1:ce:
                    b3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:36:B3:60:09:80:EE:25:50:A8:59:95:09:B4:CF:9F:65:3E:7A:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/2f6fb8ee-4b76-3e40-83e1-91ba75b74c01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl

            X509v3 Authority Key Identifier:
                keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.158.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:cf:f0:a3:f5:52:6b:29:98:c9:52:c8:7f:39:3f:06:d1:6b:
         35:22:8a:0a:d1:28:14:34:76:ed:dd:ea:05:36:59:25:65:e0:
         51:40:66:dc:75:31:5f:c0:d7:73:61:f2:ad:c7:90:dd:e4:76:
         2c:a7:c2:4d:47:88:20:d2:30:46:0b:4c:0b:5e:e4:35:35:33:
         46:0e:78:5f:8e:cb:65:38:28:fd:f8:01:37:e3:3b:85:4c:a9:
         3a:07:bd:e4:af:84:72:78:91:36:09:a0:3d:be:9e:50:b8:38:
         a5:62:3e:d9:ae:70:71:17:09:6c:ce:d2:c0:ba:dc:3d:ae:79:
         ca:b3:49:0b:22:a5:46:d2:d7:30:f6:d6:f3:41:72:b5:40:7c:
         bb:88:d4:77:85:61:5c:63:79:e3:6b:80:64:50:4f:7a:bb:78:
         26:d5:7b:90:2c:e4:52:82:3c:aa:21:e1:e1:8c:f9:e8:1b:5a:
         04:b2:d4:c6:6a:5b:69:49:b7:d4:11:fc:a9:ed:c0:68:4c:e0:
         72:43:32:4a:21:c0:a1:90:0b:8c:c1:2e:a8:1d:2c:24:d7:0a:
         2e:75:0f:a5:7a:46:5f:59:76:97:70:d0:29:8e:87:b8:89:0c:
         fc:40:8e:1c:46:fb:1f:09:cc:a0:ba:7d:e3:d7:dc:67:6d:c5:
         ab:1b:59:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpICuO1dsBeo+oQjQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZlZTEzN2MtNDIwMS00YTIxLWE0ZjUtMmYzMTYxMzA1
MjgxMB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk
OWE2NmZhMzctZWEzMy00Y2ZlLTk3ZjMtN2Q0Zjk0NWU4MDg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJ8+s6IheaJ4c6M3gp3TOBorYB1YSHitMynl
CQUtPrzkVZEF1PvkSOT/nIAM8QUD8pB0xu6WjIOppoejLob0QqvcGnmT6IJukJtp
QAuVqd04UFzWpdI/m2OsDbZrBInPFCiE15PGWhCM3kH9gZlHRRJTlaLZBC/HVazg
XdjhDEjBd5uvWbDQ3TgApbIsNJkxJY0AJNPCxp1RzAJDnTJHHbHOqvxyuZV4dO9i
4S52TPcE2eUorYQEqnOfRXq03L/5TVUzwFIkbME+eT4wBPzjtD1SAo4GDuj+pO2i
yzy5KlotMQil73RafORkFCzpSj0FMG5WWdc63PQtj+ET8c6zOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB82s2AJgO4lUKhZlQm0z59lPnqhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NmVl
MTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMxNjEzMDUyODEvMmY2ZmI4ZWUtNGI3Ni0z
ZTQwLTgzZTEtOTFiYTc1Yjc0YzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjZlZTEzN2MtNDIwMS00YTIxLWE0
ZjUtMmYzMTYxMzA1MjgxLzY2ZWUxMzdjLTQyMDEtNGEyMS1hNGY1LTJmMzE2MTMw
NTI4MS5jcmwwHwYDVR0jBBgwFoAUk6u6W3jmddEaQuIZV9YetG4N28YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82NmVlMTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMx
NjEzMDUyODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYp4cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADDP8KP1UmspmMlSyH85PwbRazUiigrRKBQ0du3d6gU2WSVl4FFAZtx1
MV/A13Nh8q3HkN3kdiynwk1HiCDSMEYLTAte5DU1M0YOeF+Oy2U4KP34ATfjO4VM
qToHveSvhHJ4kTYJoD2+nlC4OKViPtmucHEXCWzO0sC63D2uecqzSQsipUbS1zD2
1vNBcrVAfLuI1HeFYVxjeeNrgGRQT3q7eCbVe5As5FKCPKoh4eGM+egbWgSy1MZq
W2lJt9QR/KntwGhM4HJDMkohwKGQC4zBLqgdLCTXCi51D6V6Rl9Zdpdw0CmOh7iJ
DPxAjhxG+x8JzKC6fePX3GdtxasbWXY=
-----END CERTIFICATE-----
Generated at Mon Jun 30 05:04:58 2025 by rpki-client