Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/aa1f874e-095d-34c7-82c1-8c864143547d.roa
File:                     aa1f874e-095d-34c7-82c1-8c864143547d.roa (raw, json)
Hash identifier:          +LXXmjlXKafCjdmh+nptIgrZB0oLe4PBBnlUZpSM0q0=
Subject key identifier:   D9:29:60:77:7B:B3:34:55:B3:3E:49:A4:0A:C4:4D:C1:A4:62:28:20
Certificate issuer:       /CN=80a5a637-2442-4c3f-b791-5a2e260822af
Certificate serial:       010D0C9F4328584AF2567B375DB6AF4CDE260D00
Authority key identifier: 8A:39:90:B1:69:98:EF:64:F0:DF:06:55:9A:81:14:F5:E3:79:72:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/aa1f874e-095d-34c7-82c1-8c864143547d.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     394688
IP address blocks:        98.142.188.0/22 maxlen: 22
                          98.142.188.0/24 maxlen: 24
                          98.142.189.0/24 maxlen: 24
                          98.142.190.0/24 maxlen: 24
                          98.142.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/80a5a637-2442-4c3f-b791-5a2e260822af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/80a5a637-2442-4c3f-b791-5a2e260822af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:7b:37:5d:b6:af:4c:de:26:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80a5a637-2442-4c3f-b791-5a2e260822af
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=8e5a1e22-9507-4057-923e-66f5ce2a47d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8e:aa:39:2e:06:9e:b6:7a:52:7b:ee:8e:0a:
                    11:99:ce:46:75:ac:ad:b5:e3:84:31:e1:02:ed:86:
                    98:a7:e3:59:de:b4:85:1e:ca:8e:5e:70:c5:e4:99:
                    64:4d:b4:3a:b3:58:22:27:b2:0f:10:eb:2a:00:81:
                    8b:64:55:dc:41:52:30:36:24:27:9b:98:54:d0:c8:
                    a2:f1:59:c2:dd:78:0f:c1:77:0b:ce:c3:d3:68:2a:
                    97:e1:d6:b4:ee:76:2d:8b:65:e5:9e:10:39:4a:46:
                    38:b9:f6:45:38:26:e1:df:9b:bf:52:31:21:31:5f:
                    8a:d9:ff:68:5b:46:13:99:60:18:95:ba:f6:28:53:
                    56:65:09:76:e6:3f:6d:e8:08:52:99:fb:99:d9:aa:
                    cc:ce:e1:77:f4:02:45:48:0d:2c:90:f1:d6:ee:50:
                    cd:00:86:b3:84:22:17:0a:cc:4e:08:1c:cf:6f:8c:
                    0c:02:22:c8:3a:e5:7f:dc:50:d2:98:36:91:ca:5a:
                    76:c1:47:af:ab:e7:a3:38:63:80:24:12:9b:51:6a:
                    db:a6:25:1c:de:aa:10:52:46:b7:d3:69:d5:f4:40:
                    0c:4a:45:08:6b:89:9b:d2:99:f0:17:51:d2:de:69:
                    51:97:e4:e9:c3:c5:52:9a:68:96:a5:70:00:bc:ff:
                    d1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:29:60:77:7B:B3:34:55:B3:3E:49:A4:0A:C4:4D:C1:A4:62:28:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/aa1f874e-095d-34c7-82c1-8c864143547d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/80a5a637-2442-4c3f-b791-5a2e260822af.crl

            X509v3 Authority Key Identifier:
                keyid:8A:39:90:B1:69:98:EF:64:F0:DF:06:55:9A:81:14:F5:E3:79:72:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:28:3c:e9:60:b0:e7:57:77:e1:28:53:a0:9c:eb:eb:8d:91:
         c8:dc:f1:a7:f9:55:38:0e:e1:7e:06:ff:a3:8e:7c:3e:04:c3:
         8e:b3:db:e3:d1:fe:19:88:2a:93:79:5c:33:0c:85:9b:c3:6a:
         6e:48:8a:0d:65:3d:38:55:e7:d3:1e:a2:6e:3c:c5:a9:32:20:
         a2:17:17:95:8a:49:be:43:af:73:49:e9:2a:69:cb:93:84:d9:
         34:59:6c:c7:77:f5:f5:42:04:14:c1:10:56:be:5e:f1:74:8b:
         c8:b2:6b:c3:dc:f8:d4:3e:da:1b:47:a3:c6:3f:88:a4:b2:c5:
         d4:f1:45:cc:1e:ea:1e:70:f0:93:9e:04:f5:8c:7e:9a:c9:16:
         c8:a5:49:0e:ad:a9:87:f1:e7:4f:16:6c:74:6a:96:99:af:cf:
         e3:fe:a4:af:91:88:53:f1:f1:fa:bd:1a:f2:06:e9:b8:d5:ac:
         f8:01:38:c3:c6:74:a6:4d:de:4f:3c:80:98:29:71:7f:0b:0c:
         17:9d:f6:ea:79:64:f9:3e:45:f2:94:43:3e:8a:37:25:76:c6:
         98:b5:f3:d0:63:b4:a7:b5:4a:d5:37:fa:ce:0e:4a:a0:53:ad:
         11:8a:e7:38:bd:80:21:d0:c2:b3:25:93:f9:86:e1:99:59:e2:
         fa:91:69:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVns3XbavTN4mDQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODBhNWE2MzctMjQ0Mi00YzNmLWI3OTEtNWEyZTI2MDgy
MmFmMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk
OGU1YTFlMjItOTUwNy00MDU3LTkyM2UtNjZmNWNlMmE0N2QxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY6qOS4GnrZ6UnvujgoRmc5GdaytteOEMeEC
7YaYp+NZ3rSFHsqOXnDF5JlkTbQ6s1giJ7IPEOsqAIGLZFXcQVIwNiQnm5hU0Mii
8VnC3XgPwXcLzsPTaCqX4da07nYti2XlnhA5SkY4ufZFOCbh35u/UjEhMV+K2f9o
W0YTmWAYlbr2KFNWZQl25j9t6AhSmfuZ2arMzuF39AJFSA0skPHW7lDNAIazhCIX
CsxOCBzPb4wMAiLIOuV/3FDSmDaRylp2wUevq+ejOGOAJBKbUWrbpiUc3qoQUka3
02nV9EAMSkUIa4mb0pnwF1HS3mlRl+Tpw8VSmmiWpXAAvP/RiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNkpYHd7szRVsz5JpArETcGkYiggMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MGE1
YTYzNy0yNDQyLTRjM2YtYjc5MS01YTJlMjYwODIyYWYvYWExZjg3NGUtMDk1ZC0z
NGM3LTgyYzEtOGM4NjQxNDM1NDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODBhNWE2MzctMjQ0Mi00YzNmLWI3
OTEtNWEyZTI2MDgyMmFmLzgwYTVhNjM3LTI0NDItNGMzZi1iNzkxLTVhMmUyNjA4
MjJhZi5jcmwwHwYDVR0jBBgwFoAUijmQsWmY72Tw3wZVmoEU9eN5cvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84MGE1YTYzNy0yNDQyLTRjM2YtYjc5MS01YTJl
MjYwODIyYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYo68MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK0oPOlgsOdXd+EoU6Cc6+uNkcjc8af5VTgO4X4G/6OOfD4Ew46z2+PR
/hmIKpN5XDMMhZvDam5Iig1lPThV59Meom48xakyIKIXF5WKSb5Dr3NJ6Sppy5OE
2TRZbMd39fVCBBTBEFa+XvF0i8iya8Pc+NQ+2htHo8Y/iKSyxdTxRcwe6h5w8JOe
BPWMfprJFsilSQ6tqYfx508WbHRqlpmvz+P+pK+RiFPx8fq9GvIG6bjVrPgBOMPG
dKZN3k88gJgpcX8LDBed9up5ZPk+RfKUQz6KNyV2xpi189BjtKe1StU3+s4OSqBT
rRGK5zi9gCHQwrMlk/mG4ZlZ4vqRaXQ=
-----END CERTIFICATE-----
Generated at Sun Aug 24 06:43:39 2025 by rpki-client