Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/da636073-8693-3554-9dac-9a99a0593989.roa
File:                     da636073-8693-3554-9dac-9a99a0593989.roa (raw, json)
Hash identifier:          maaFirGCK/k+gFTkBeJKV+jh/IUr2MTZ8tQ4LA2adaA=
Subject key identifier:   A1:7E:E3:33:46:59:84:3A:AF:73:D6:5A:B0:E8:8C:44:1A:D2:D1:AA
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584B663201C217170E8860556D00
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/da636073-8693-3554-9dac-9a99a0593989.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     25961
IP address blocks:        98.142.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:32:01:c2:17:17:0e:88:60:55:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=6cd31887-cce7-46e9-937e-6f69a10bd447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f7:31:53:ed:77:8a:2f:b8:50:63:91:ab:dc:
                    4f:7e:af:ef:f5:82:33:b0:63:53:61:b7:73:1f:72:
                    6f:c2:0c:54:e4:49:7a:3e:92:b3:d6:e4:ed:de:d0:
                    91:6b:a5:94:d4:92:74:08:89:75:9e:f4:96:c8:05:
                    64:e8:52:4d:a7:6d:d9:68:f1:a4:bf:95:1e:07:a1:
                    d3:a5:44:ad:91:9e:63:c5:64:d0:a5:0c:72:2a:4c:
                    f5:dc:24:5a:c5:3a:bb:2e:ef:6d:72:97:5f:f7:7e:
                    23:7d:1e:f2:2d:ca:dc:c2:2c:60:7f:4e:bb:d6:ef:
                    2f:d8:91:62:6a:b6:0b:b5:52:56:79:72:cc:e4:d5:
                    e3:91:75:43:73:88:b5:6c:87:bc:07:4b:23:ce:e0:
                    b4:0c:3a:64:f0:6c:3b:cf:6a:15:0a:f1:ec:fd:79:
                    42:dc:de:ae:fb:95:71:c7:5f:c1:1b:55:af:35:d3:
                    07:40:41:68:14:6e:ff:c1:c7:bc:1f:78:c5:c3:97:
                    9e:1f:d2:84:74:b8:dd:42:d3:b2:55:8c:1f:95:6c:
                    f0:67:00:c7:4a:cc:bb:59:d7:b3:ec:25:4d:e8:fd:
                    c0:15:16:c5:65:7c:ea:08:a3:8e:68:da:71:c4:0d:
                    01:d1:6a:81:e0:50:48:94:64:5d:72:e3:45:c8:2b:
                    3a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7E:E3:33:46:59:84:3A:AF:73:D6:5A:B0:E8:8C:44:1A:D2:D1:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/da636073-8693-3554-9dac-9a99a0593989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:f5:b1:c1:ac:e4:2a:94:75:4d:cb:86:40:54:db:21:18:40:
         d2:b3:ab:e6:81:14:6d:24:3b:70:64:45:e4:1e:b3:1a:44:b5:
         2e:0e:03:83:ce:18:4d:97:7e:53:02:14:8b:c7:b2:61:81:a2:
         66:f5:86:40:fc:69:4e:ac:c3:f8:f8:8a:e3:fc:a2:dc:48:90:
         52:6e:c7:1e:fb:a6:c2:89:79:72:f3:2f:c3:ac:06:dc:c8:41:
         f8:eb:5b:36:e0:30:25:18:63:10:de:71:12:b7:43:b5:76:fa:
         57:4b:2b:ad:f4:71:67:bd:3f:12:75:38:ca:d3:8b:3c:49:42:
         89:5a:11:b6:06:a9:93:05:18:2e:f9:13:d0:09:4c:d1:50:8f:
         50:98:1f:3e:38:64:88:83:b2:71:79:0f:77:dd:d4:0f:ad:36:
         3e:c5:8a:b2:e1:2b:59:68:90:62:8c:50:d5:18:94:7e:c4:83:
         cc:5a:a4:0e:25:86:40:dd:f0:60:d3:3b:cb:03:8c:9f:aa:d4:
         ac:a4:ce:20:10:c9:5b:90:58:1e:38:13:5e:a5:fb:2f:8e:18:
         35:71:e1:5c:01:c2:d5:f0:cb:ac:a8:86:d9:94:14:95:35:62:
         4d:89:27:95:70:dc:56:f8:d2:ba:01:d2:77:b0:91:a0:2e:a1:
         c7:68:38:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMgHCFxcOiGBVbQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk
NmNkMzE4ODctY2NlNy00NmU5LTkzN2UtNmY2OWExMGJkNDQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/cxU+13ii+4UGORq9xPfq/v9YIzsGNTYbdz
H3JvwgxU5El6PpKz1uTt3tCRa6WU1JJ0CIl1nvSWyAVk6FJNp23ZaPGkv5UeB6HT
pUStkZ5jxWTQpQxyKkz13CRaxTq7Lu9tcpdf934jfR7yLcrcwixgf0671u8v2JFi
arYLtVJWeXLM5NXjkXVDc4i1bIe8B0sjzuC0DDpk8Gw7z2oVCvHs/XlC3N6u+5Vx
x1/BG1WvNdMHQEFoFG7/wce8H3jFw5eeH9KEdLjdQtOyVYwflWzwZwDHSsy7Wdez
7CVN6P3AFRbFZXzqCKOOaNpxxA0B0WqB4FBIlGRdcuNFyCs66QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKF+4zNGWYQ6r3PWWrDojEQa0tGqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvZGE2MzYwNzMtODY5My0z
NTU0LTlkYWMtOWE5OWEwNTkzOTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYo4vMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAL1scGs5CqUdU3LhkBU2yEYQNKzq+aBFG0kO3BkReQesxpEtS4OA4PO
GE2XflMCFIvHsmGBomb1hkD8aU6sw/j4iuP8otxIkFJuxx77psKJeXLzL8OsBtzI
QfjrWzbgMCUYYxDecRK3Q7V2+ldLK630cWe9PxJ1OMrTizxJQolaEbYGqZMFGC75
E9AJTNFQj1CYHz44ZIiDsnF5D3fd1A+tNj7FirLhK1lokGKMUNUYlH7Eg8xapA4l
hkDd8GDTO8sDjJ+q1KykziAQyVuQWB44E16l+y+OGDVx4VwBwtXwy6yohtmUFJU1
Yk2JJ5Vw3Fb40roB0newkaAuocdoOBg=
-----END CERTIFICATE-----
Generated at Tue Oct 21 07:20:53 2025 by rpki-client