Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/a7a74262-690c-3716-a6dd-60a2f8154fb2.roa
File:                     a7a74262-690c-3716-a6dd-60a2f8154fb2.roa (raw, json)
Hash identifier:          nMcW5dpu7o7ZaD2YcONvKPQZj0+FCqiAkTOKfQLGdkk=
Subject key identifier:   61:C4:62:4B:4C:8D:71:1B:B2:E2:38:FD:43:F8:DA:2B:B2:E3:6A:E4
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F4328584A23C0061A3FBE879E2CFE18C0
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/a7a74262-690c-3716-a6dd-60a2f8154fb2.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     2495
IP address blocks:        198.248.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:06:1a:3f:be:87:9e:2c:fe:18:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=e6d189be-64b4-4f77-8fd6-9b90a5c43717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c4:5b:08:66:60:45:14:d8:a7:7a:43:c0:54:
                    2b:cc:43:7d:2c:a6:e8:13:85:2e:13:25:a7:58:12:
                    58:b6:64:0a:fd:8f:55:5e:57:91:e0:39:1b:4e:c4:
                    28:6c:07:33:c0:25:7a:8f:c6:cb:ee:ce:c0:df:5f:
                    dd:da:90:d8:58:45:fb:ec:50:99:5d:a8:2f:36:d4:
                    44:dd:02:1d:38:f6:ab:32:6d:1d:e5:15:ce:c7:30:
                    e6:49:bd:f5:47:7c:0c:38:26:89:f6:80:79:7f:a5:
                    db:f6:59:56:b7:13:55:b3:e3:b6:52:4b:be:3f:e2:
                    7b:33:fe:36:d1:17:af:32:94:5f:e8:fc:e8:01:50:
                    3b:f0:6f:a0:ab:a1:42:44:14:60:ae:70:08:ca:3b:
                    d0:bb:a0:14:f3:f5:ed:cb:03:f5:30:bf:f1:e7:a1:
                    84:fb:b9:05:fb:bb:6d:94:7b:a6:54:43:93:4b:a6:
                    00:16:98:34:14:73:9a:28:21:a8:01:6f:46:1c:9c:
                    2b:c4:b5:76:4b:eb:6b:21:27:aa:e4:6b:17:30:f1:
                    19:f4:18:3d:9c:d4:46:19:96:cb:3f:24:ba:68:17:
                    82:b8:f4:5f:d2:73:09:88:2b:f5:40:43:1b:3b:f5:
                    72:7f:c0:a5:cd:de:46:a1:d0:a3:d4:4d:60:16:dc:
                    8c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C4:62:4B:4C:8D:71:1B:B2:E2:38:FD:43:F8:DA:2B:B2:E3:6A:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/a7a74262-690c-3716-a6dd-60a2f8154fb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.248.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:22:7d:f0:dd:27:20:1d:6d:3f:73:9f:21:bf:57:76:4f:42:
         06:fb:d8:90:81:ed:91:ba:44:c6:66:a2:48:6c:6e:b3:42:13:
         aa:78:b4:2f:dc:5f:f6:31:4c:ae:87:86:ef:4e:e3:64:35:17:
         e0:4a:1a:f6:67:03:ce:0e:b2:a9:cd:3d:c5:64:fb:31:63:13:
         05:5b:68:f0:fe:d0:ca:35:e4:f6:04:61:e4:a9:c1:dc:39:01:
         61:df:c2:31:08:17:b8:d2:89:6d:c2:1f:27:c7:d1:d2:71:bc:
         e9:9d:99:7d:25:2e:49:00:bd:b7:8b:e5:c4:e6:5a:1e:31:25:
         bb:50:a7:e9:58:62:8b:5a:f8:13:56:4d:51:c8:95:55:34:4b:
         09:46:5e:d0:a9:d5:9f:86:4f:c9:22:ec:c1:44:af:87:c1:70:
         d9:1a:87:a7:9d:4e:73:06:46:c4:e4:be:52:bf:0b:0c:bc:ec:
         99:ae:3a:f1:59:9b:a6:f8:8a:1f:de:82:e0:15:35:36:a1:c4:
         d2:04:f6:5e:57:7a:89:f9:ef:ce:41:61:16:f2:8c:f1:55:03:
         28:67:13:c7:da:37:a4:a7:52:35:48:56:49:15:8c:89:06:9d:
         3c:2b:24:23:ab:5b:ae:93:6b:4e:b0:c8:05:17:0e:ac:03:0d:
         71:f1:e8:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwAYaP76Hniz+GMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRi
ODNkMB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk
ZTZkMTg5YmUtNjRiNC00Zjc3LThmZDYtOWI5MGE1YzQzNzE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscRbCGZgRRTYp3pDwFQrzEN9LKboE4UuEyWn
WBJYtmQK/Y9VXleR4DkbTsQobAczwCV6j8bL7s7A31/d2pDYWEX77FCZXagvNtRE
3QIdOParMm0d5RXOxzDmSb31R3wMOCaJ9oB5f6Xb9llWtxNVs+O2Uku+P+J7M/42
0RevMpRf6PzoAVA78G+gq6FCRBRgrnAIyjvQu6AU8/XtywP1ML/x56GE+7kF+7tt
lHumVEOTS6YAFpg0FHOaKCGoAW9GHJwrxLV2S+trISeq5GsXMPEZ9Bg9nNRGGZbL
PyS6aBeCuPRf0nMJiCv1QEMbO/Vyf8Clzd5GodCj1E1gFtyMDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGHEYktMjXEbsuI4/UP42iuy42rkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0
Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvYTdhNzQyNjItNjkwYy0z
NzE2LWE2ZGQtNjBhMmY4MTU0ZmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODg4NDI4NzgtMTA1MC00ZGY3LTgy
MmItZWE4ZWMyNWRiODNkLzg4ODQyODc4LTEwNTAtNGRmNy04MjJiLWVhOGVjMjVk
YjgzZC5jcmwwHwYDVR0jBBgwFoAUCvQvaSDxqtdtZzyGmgTIgB6tfZkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThl
YzI1ZGI4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxviIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABEiffDdJyAdbT9znyG/V3ZPQgb72JCB7ZG6RMZmokhsbrNCE6p4tC/c
X/YxTK6Hhu9O42Q1F+BKGvZnA84OsqnNPcVk+zFjEwVbaPD+0Mo15PYEYeSpwdw5
AWHfwjEIF7jSiW3CHyfH0dJxvOmdmX0lLkkAvbeL5cTmWh4xJbtQp+lYYota+BNW
TVHIlVU0SwlGXtCp1Z+GT8ki7MFEr4fBcNkah6edTnMGRsTkvlK/Cwy87JmuOvFZ
m6b4ih/eguAVNTahxNIE9l5Xeon5785BYRbyjPFVAyhnE8faN6SnUjVIVkkVjIkG
nTwrJCOrW66Ta06wyAUXDqwDDXHx6Kc=
-----END CERTIFICATE-----
Generated at Tue Jul 1 19:42:33 2025 by rpki-client