Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1ea3b29d-14f8-3c9f-834b-18e552116a3d.roa
File:                     1ea3b29d-14f8-3c9f-834b-18e552116a3d.roa (raw, json)
Hash identifier:          Ys3Au3SNAiTNy+QkGzT2Nit9t9qQr8FouoW+SUKh0tg=
Subject key identifier:   22:90:42:88:2C:2F:D3:27:CA:CE:4D:D6:42:5C:4A:3D:5E:79:8E:12
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285849B2AF5F03628A89E9D639C580
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1ea3b29d-14f8-3c9f-834b-18e552116a3d.roa
Signing time:             Wed 30 Apr 2025 13:01:02 +0000
ROA not before:           Wed 30 Apr 2025 13:01:02 +0000
ROA not after:            Tue 29 Jul 2025 13:01:02 +0000
asID:                     21859
IP address blocks:        98.98.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b2:af:5f:03:62:8a:89:e9:d6:39:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Apr 30 13:01:02 2025 GMT
            Not After : Jul 29 13:01:02 2025 GMT
        Subject: CN=3ccc79a7-36ec-4cf4-902d-4005786082b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c0:43:fd:52:0e:7c:87:1b:aa:dd:eb:6d:41:
                    b6:1d:58:e1:70:6f:dd:eb:e9:f9:d0:ce:38:56:8b:
                    25:95:57:0a:ab:d6:4a:10:aa:a6:23:d6:02:7a:81:
                    79:1f:47:a7:e0:69:4b:6d:f7:12:d7:b8:1f:9c:0d:
                    1e:5c:d2:b4:7a:f3:f6:93:6e:1e:14:2e:5d:5c:87:
                    55:41:20:62:03:18:20:77:c2:85:79:9f:1c:0e:c2:
                    e8:9f:cb:e2:48:e6:a3:7a:ab:fc:ee:bc:82:6b:d7:
                    05:f8:32:d0:76:48:b2:c7:5a:46:06:cd:56:30:bd:
                    1e:e9:d3:b3:a0:34:99:ec:cc:7e:59:86:04:a4:a2:
                    86:4a:a7:f6:53:dd:21:b9:12:99:48:70:80:18:58:
                    c8:a4:ed:9f:d1:f3:0b:13:e7:32:6c:c1:5e:e8:60:
                    64:e2:41:78:ab:75:02:00:84:c7:ba:93:c1:ee:83:
                    ee:6e:ae:cb:2f:34:0f:d0:5c:04:66:3a:c9:2a:23:
                    d5:50:89:af:9e:1d:69:68:17:2d:c8:cb:6b:28:5f:
                    4f:37:86:f6:2e:83:9e:18:23:ef:60:b1:a6:47:12:
                    b4:62:0d:84:23:db:c2:20:67:10:1f:7e:80:d5:4f:
                    a5:22:80:cd:1e:7e:14:14:fc:83:e9:93:ec:3a:c7:
                    76:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:90:42:88:2C:2F:D3:27:CA:CE:4D:D6:42:5C:4A:3D:5E:79:8E:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1ea3b29d-14f8-3c9f-834b-18e552116a3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:cd:5e:d7:b8:5e:f2:94:c3:9b:3a:33:9b:e3:84:f7:fc:06:
         d1:4e:db:9a:85:23:b6:27:ee:81:5d:29:17:50:4f:27:7f:0b:
         ca:5e:d7:bf:6a:b7:69:17:5f:bf:d0:f2:04:3c:24:38:d0:d9:
         c9:80:96:6c:12:82:94:54:c0:41:03:0a:24:fa:04:57:58:55:
         89:ac:10:1d:eb:fb:43:43:7e:1a:fd:ff:01:4b:29:23:23:72:
         c7:95:23:94:c5:5b:ab:1c:ef:50:0a:22:e2:ca:f6:1d:9e:54:
         0a:4e:f7:ee:49:54:99:81:af:3f:fb:e0:5c:b4:78:61:83:45:
         0b:7b:6a:d7:99:cb:39:fe:6a:4f:e7:15:bb:b1:11:96:17:45:
         64:29:8a:c4:56:1a:94:5e:e7:02:ec:24:e7:bf:2b:62:5f:30:
         e9:90:11:0f:f2:02:44:4a:53:9d:a8:54:96:6c:5d:a5:03:9f:
         7d:ec:ce:f5:12:2e:8e:91:d6:80:63:7a:e8:d4:ef:55:75:41:
         b5:70:7d:2a:c4:6d:c1:18:9a:95:22:1d:65:35:1d:82:a6:15:
         77:d2:d9:8a:f6:a0:22:ec:a0:dd:7e:c1:e6:e7:d4:ac:74:28:
         c8:15:98:e5:1f:f6:26:8c:fa:42:7e:d6:12:67:0c:d4:e5:88:
         41:50:fa:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmyr18DYoqJ6dY5xYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI1MDQzMDEzMDEwMloXDTI1MDcyOTEzMDEwMlowLzEtMCsGA1UEAxMk
M2NjYzc5YTctMzZlYy00Y2Y0LTkwMmQtNDAwNTc4NjA4MmI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8BD/VIOfIcbqt3rbUG2HVjhcG/d6+n50M44
VosllVcKq9ZKEKqmI9YCeoF5H0en4GlLbfcS17gfnA0eXNK0evP2k24eFC5dXIdV
QSBiAxggd8KFeZ8cDsLon8viSOajeqv87ryCa9cF+DLQdkiyx1pGBs1WML0e6dOz
oDSZ7Mx+WYYEpKKGSqf2U90huRKZSHCAGFjIpO2f0fMLE+cybMFe6GBk4kF4q3UC
AITHupPB7oPubq7LLzQP0FwEZjrJKiPVUImvnh1paBctyMtrKF9PN4b2LoOeGCPv
YLGmRxK0Yg2EI9vCIGcQH36A1U+lIoDNHn4UFPyD6ZPsOsd2sQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCKQQogsL9Mnys5N1kJcSj1eeY4SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvMWVhM2IyOWQtMTRmOC0z
YzlmLTgzNGItMThlNTUyMTE2YTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYmImMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABfNXte4XvKUw5s6M5vjhPf8BtFO25qFI7Yn7oFdKRdQTyd/C8pe179q
t2kXX7/Q8gQ8JDjQ2cmAlmwSgpRUwEEDCiT6BFdYVYmsEB3r+0NDfhr9/wFLKSMj
cseVI5TFW6sc71AKIuLK9h2eVApO9+5JVJmBrz/74Fy0eGGDRQt7ateZyzn+ak/n
FbuxEZYXRWQpisRWGpRe5wLsJOe/K2JfMOmQEQ/yAkRKU52oVJZsXaUDn33szvUS
Lo6R1oBjeujU71V1QbVwfSrEbcEYmpUiHWU1HYKmFXfS2Yr2oCLsoN1+webn1Kx0
KMgVmOUf9iaM+kJ+1hJnDNTliEFQ+rU=
-----END CERTIFICATE-----
Generated at Tue May 6 03:27:58 2025 by rpki-client