Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/81898094-751d-312a-a1ce-de9855fd858a.roa
File:                     81898094-751d-312a-a1ce-de9855fd858a.roa (raw, json)
Hash identifier:          Uxuyf8+aQV/vSUxkiXFKvIfJsgjKzr3DBRjAHdKADnI=
Subject key identifier:   FF:FC:5A:6D:72:25:49:EA:EE:BC:59:E9:F6:F7:35:AC:F0:BD:D8:D6
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F4328584AC710F12EB08267890A04E1A0
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/81898094-751d-312a-a1ce-de9855fd858a.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     18914
IP address blocks:        206.168.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:10:f1:2e:b0:82:67:89:0a:04:e1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=0f5f4a08-b823-4c38-8d1b-0bc6d5e71792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c0:3b:76:6f:2d:4f:a9:cb:70:c3:65:65:56:
                    dc:fd:f2:89:db:50:3e:48:11:79:3f:d2:79:30:fb:
                    41:7a:d9:16:bc:b9:a2:70:66:7d:e5:bf:f8:c5:26:
                    7d:75:e7:fb:a0:53:33:14:b3:90:af:b0:eb:4a:bd:
                    b1:62:d2:17:a2:bc:aa:9a:95:bb:bd:4c:4b:c4:ba:
                    90:0b:a5:15:fc:45:bc:a0:a3:e5:56:9d:aa:27:ab:
                    81:a8:8e:a6:fb:be:9a:4d:3c:e6:25:91:57:bc:72:
                    68:a2:58:4b:9f:48:c3:85:76:8d:b3:59:1f:8e:de:
                    91:9a:b1:82:b0:ef:f2:ee:db:b3:12:be:66:26:5f:
                    ff:51:c0:ce:98:d8:44:ed:19:f0:f0:8e:72:6c:62:
                    4f:8f:65:54:c0:17:4e:b4:2d:54:ca:78:d6:6b:eb:
                    47:9a:37:8a:b0:b9:21:f9:99:72:e0:08:a0:69:54:
                    8d:49:15:f3:b9:08:ef:8d:2f:6a:82:41:13:4c:3a:
                    ec:8e:f5:45:4e:2a:a2:8c:85:7d:c2:8a:e9:75:b1:
                    dc:e5:e5:f4:bb:01:1b:4a:76:54:2f:30:24:70:e4:
                    b9:36:17:4c:18:d8:27:2e:e6:a5:d0:e9:c0:f7:08:
                    e8:74:a6:aa:8a:fc:ff:27:1f:e5:aa:92:37:67:0b:
                    92:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FC:5A:6D:72:25:49:EA:EE:BC:59:E9:F6:F7:35:AC:F0:BD:D8:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/81898094-751d-312a-a1ce-de9855fd858a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:38:64:55:bd:84:3f:14:38:29:d6:d7:6e:07:6f:7e:6f:3f:
         12:6c:ec:b4:6a:4a:f2:d4:70:64:91:68:28:e2:db:a5:aa:45:
         b3:18:f8:20:fe:c0:0a:dc:cb:61:d7:b4:3a:5f:dd:f9:55:e5:
         48:c4:66:b0:cc:87:c1:d1:d2:c8:ff:b6:c2:69:ad:a7:aa:85:
         4f:1b:22:b7:2d:b3:62:4a:4b:56:63:4c:28:e7:6e:6d:f6:41:
         a1:10:3e:30:05:ef:4d:f3:90:9d:23:c9:d0:ab:70:a8:88:43:
         92:ef:f5:80:35:78:29:19:37:e7:6a:69:80:bc:ca:13:4b:4a:
         95:e6:3f:58:fb:f4:d8:a3:d6:60:a7:f1:29:d2:5f:b5:a8:a5:
         1c:4a:91:db:b2:18:c5:44:7f:d1:fc:3d:f8:15:8f:df:7c:6e:
         f2:e6:c8:10:66:0a:98:33:68:d0:eb:e1:a3:84:54:9d:05:56:
         19:de:1b:7b:2d:70:77:d1:e3:be:fe:d9:36:6b:7b:c0:e7:c6:
         da:22:db:1e:82:35:5a:81:03:e3:ef:f0:65:60:97:08:db:5e:
         88:9a:73:e3:87:fe:28:b2:e3:6d:42:9c:fd:9e:1c:23:eb:99:
         9b:51:fa:34:6e:52:d1:6d:58:d2:91:c8:a3:4d:17:0c:b4:74:
         b2:96:9d:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHEPEusIJniQoE4aAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTM5Y2I5NjAtMjM5NC00YjIyLWI5ZjEtM2FjNTU2NmJj
NzJhMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk
MGY1ZjRhMDgtYjgyMy00YzM4LThkMWItMGJjNmQ1ZTcxNzkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsA7dm8tT6nLcMNlZVbc/fKJ21A+SBF5P9J5
MPtBetkWvLmicGZ95b/4xSZ9def7oFMzFLOQr7DrSr2xYtIXoryqmpW7vUxLxLqQ
C6UV/EW8oKPlVp2qJ6uBqI6m+76aTTzmJZFXvHJoolhLn0jDhXaNs1kfjt6RmrGC
sO/y7tuzEr5mJl//UcDOmNhE7Rnw8I5ybGJPj2VUwBdOtC1UynjWa+tHmjeKsLkh
+Zly4AigaVSNSRXzuQjvjS9qgkETTDrsjvVFTiqijIV9worpdbHc5eX0uwEbSnZU
LzAkcOS5NhdMGNgnLual0OnA9wjodKaqivz/Jx/lqpI3ZwuSwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP/8Wm1yJUnq7rxZ6fb3NazwvdjWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzlj
Yjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1NTY2YmM3MmEvODE4OTgwOTQtNzUxZC0z
MTJhLWExY2UtZGU5ODU1ZmQ4NThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTM5Y2I5NjAtMjM5NC00YjIyLWI5
ZjEtM2FjNTU2NmJjNzJhL2UzOWNiOTYwLTIzOTQtNGIyMi1iOWYxLTNhYzU1NjZi
YzcyYS5jcmwwHwYDVR0jBBgwFoAUx5iuk+5ta+2iXZtwBvHdRTnXH4kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lMzljYjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1
NTY2YmM3MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzqhiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHE4ZFW9hD8UOCnW124Hb35vPxJs7LRqSvLUcGSRaCji26WqRbMY+CD+
wArcy2HXtDpf3flV5UjEZrDMh8HR0sj/tsJpraeqhU8bIrcts2JKS1ZjTCjnbm32
QaEQPjAF703zkJ0jydCrcKiIQ5Lv9YA1eCkZN+dqaYC8yhNLSpXmP1j79Nij1mCn
8SnSX7WopRxKkduyGMVEf9H8PfgVj998bvLmyBBmCpgzaNDr4aOEVJ0FVhneG3st
cHfR477+2TZre8Dnxtoi2x6CNVqBA+Pv8GVglwjbXoiac+OH/iiy421CnP2eHCPr
mZtR+jRuUtFtWNKRyKNNFwy0dLKWnc0=
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:03:19 2025 by rpki-client