Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4b71e068-fb79-373d-8238-8859be44a088.roa
File:                     4b71e068-fb79-373d-8238-8859be44a088.roa (raw, json)
Hash identifier:          yq85JC/BjtxOaK5VMUfHgcaFLoRZNpMGzLrq/lZYBR0=
Subject key identifier:   6A:B9:5A:DA:4A:FC:04:55:60:0A:F2:05:DA:C3:5F:DC:8F:AE:6D:8F
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584AE891466094F12839A684B280
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4b71e068-fb79-373d-8238-8859be44a088.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     6922
IP address blocks:        198.216.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:46:60:94:f1:28:39:a6:84:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=3a036af9-2091-4d0c-891b-de0a3d1d62be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:27:c0:5c:cb:d4:45:a9:4b:31:b3:d7:1f:b8:
                    12:a4:93:5a:47:90:17:09:95:fb:1b:8e:92:e2:54:
                    d0:84:0c:f3:5d:72:e4:c0:05:b3:a3:fb:cd:1b:df:
                    fb:17:3e:a4:77:36:e8:d4:ad:f9:16:61:41:14:0e:
                    c0:46:9e:3a:23:13:c9:83:7c:93:e3:45:ca:a7:2f:
                    f6:d1:87:03:ab:cf:b5:dd:c7:14:f7:c9:90:7a:1d:
                    5e:a9:43:1d:e3:51:89:4c:41:d8:2b:62:c5:f2:25:
                    dc:eb:8f:a4:c1:90:2f:a1:3a:f4:e5:6d:a5:61:7d:
                    2f:f6:84:dc:fd:2b:a3:43:a7:fd:e1:5e:6e:18:d9:
                    cd:ef:30:51:a7:0d:c0:64:36:ad:a3:9a:e4:51:fd:
                    09:5a:a4:d8:be:a9:1e:32:cd:c8:06:c9:96:1c:e5:
                    ee:ff:ba:4c:f9:8b:5b:09:e3:93:96:25:ce:62:18:
                    37:a6:f3:56:45:a6:d2:ad:6e:50:bb:fd:2d:57:8f:
                    bb:bf:57:e0:68:38:82:b9:f1:77:2e:2f:f3:96:96:
                    3d:8e:8f:49:a6:8f:1c:07:62:0e:4f:36:1e:4c:65:
                    c1:96:99:79:75:3e:7a:b6:44:e0:68:80:3c:5e:55:
                    d1:91:e5:61:fc:cf:37:21:b9:82:1e:8b:e7:59:28:
                    39:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B9:5A:DA:4A:FC:04:55:60:0A:F2:05:DA:C3:5F:DC:8F:AE:6D:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4b71e068-fb79-373d-8238-8859be44a088.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.216.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:d9:f7:bc:98:87:72:55:21:af:6c:0a:d6:11:f8:e5:1e:a7:
         a2:d8:61:a3:2f:12:81:31:6b:b8:10:27:47:41:c9:81:00:13:
         78:8e:80:5f:75:a2:bf:3e:54:e8:fe:85:c2:07:55:bf:90:8c:
         30:0e:4c:10:e7:b6:59:8c:95:1d:3e:96:00:ce:29:db:fc:55:
         c9:8c:82:b0:a1:cb:bc:ac:7d:02:87:9e:21:3d:e0:17:ea:38:
         70:26:48:b0:b3:2f:4a:34:fa:96:e1:18:c5:08:f8:61:53:a1:
         f9:69:c4:0c:c9:4a:2f:4d:b8:29:a3:a3:55:33:9a:a1:6f:52:
         bb:19:e7:a1:b1:d8:b4:75:89:58:2f:21:b6:d5:7a:91:71:0e:
         3c:a8:a0:88:dd:68:be:7c:29:c8:ef:c3:f6:d2:91:fe:51:64:
         08:db:ba:cf:49:74:94:c4:51:8b:5a:50:31:ca:36:d0:03:6a:
         10:b1:1b:96:eb:d1:4a:4a:6f:ec:20:72:69:55:79:dd:6b:6a:
         5b:b2:4a:19:42:03:36:c5:76:65:1c:fa:f7:03:ef:60:92:ee:
         7d:ce:3b:22:14:99:dc:c6:ba:64:6a:20:c6:7a:ef:1a:3c:87:
         ba:3f:0c:5c:72:87:57:11:c0:89:8a:40:44:c3:78:97:f6:b9:
         a8:95:7a:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokUZglPEoOaaEsoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU4MWEyNTYtNDFmZi00ZjUxLTgwOTItYzdmZmZhNGQ5
MjIxMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk
M2EwMzZhZjktMjA5MS00ZDBjLTg5MWItZGUwYTNkMWQ2MmJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhifAXMvURalLMbPXH7gSpJNaR5AXCZX7G46S
4lTQhAzzXXLkwAWzo/vNG9/7Fz6kdzbo1K35FmFBFA7ARp46IxPJg3yT40XKpy/2
0YcDq8+13ccU98mQeh1eqUMd41GJTEHYK2LF8iXc64+kwZAvoTr05W2lYX0v9oTc
/SujQ6f94V5uGNnN7zBRpw3AZDato5rkUf0JWqTYvqkeMs3IBsmWHOXu/7pM+Ytb
CeOTliXOYhg3pvNWRabSrW5Qu/0tV4+7v1fgaDiCufF3Li/zlpY9jo9Jpo8cB2IO
TzYeTGXBlpl5dT56tkTgaIA8XlXRkeVh/M83IbmCHovnWSg5oQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGq5WtpK/ARVYAryBdrDX9yPrm2PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTgx
YTI1Ni00MWZmLTRmNTEtODA5Mi1jN2ZmZmE0ZDkyMjEvNGI3MWUwNjgtZmI3OS0z
NzNkLTgyMzgtODg1OWJlNDRhMDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU4MWEyNTYtNDFmZi00ZjUxLTgw
OTItYzdmZmZhNGQ5MjIxLzRlODFhMjU2LTQxZmYtNGY1MS04MDkyLWM3ZmZmYTRk
OTIyMS5jcmwwHwYDVR0jBBgwFoAUwitnYdEerOUTJk8QRtL6zHxFiyowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTgxYTI1Ni00MWZmLTRmNTEtODA5Mi1jN2Zm
ZmE0ZDkyMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxthYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJLZ97yYh3JVIa9sCtYR+OUep6LYYaMvEoExa7gQJ0dByYEAE3iOgF91
or8+VOj+hcIHVb+QjDAOTBDntlmMlR0+lgDOKdv8VcmMgrChy7ysfQKHniE94Bfq
OHAmSLCzL0o0+pbhGMUI+GFToflpxAzJSi9NuCmjo1UzmqFvUrsZ56Gx2LR1iVgv
IbbVepFxDjyooIjdaL58Kcjvw/bSkf5RZAjbus9JdJTEUYtaUDHKNtADahCxG5br
0UpKb+wgcmlVed1raluyShlCAzbFdmUc+vcD72CS7n3OOyIUmdzGumRqIMZ67xo8
h7o/DFxyh1cRwImKQETDeJf2uaiVevI=
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:16:23 2025 by rpki-client