Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/234c8b90-e98e-3d31-bc9b-1f715141e0fa.roa
File:                     234c8b90-e98e-3d31-bc9b-1f715141e0fa.roa (raw, json)
Hash identifier:          QMzIMHy6c5TLa3LsQxSNZYZFInOujurMrkhMUT+Pzso=
Subject key identifier:   50:9F:A6:88:DC:4B:C5:BF:88:C9:DA:37:13:29:C7:7F:42:C6:EC:63
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584AEE94F9F0C6B2F99A9A2C49C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/234c8b90-e98e-3d31-bc9b-1f715141e0fa.roa
Signing time:             Thu 21 Aug 2025 16:43:19 +0000
ROA not before:           Thu 21 Aug 2025 16:43:19 +0000
ROA not after:            Wed 19 Nov 2025 17:43:19 +0000
asID:                     4766
IP address blocks:        198.20.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:94:f9:f0:c6:b2:f9:9a:9a:2c:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 21 16:43:19 2025 GMT
            Not After : Nov 19 17:43:19 2025 GMT
        Subject: CN=07809d01-3290-43aa-acee-eb55299f3ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6b:e1:c6:ba:43:89:cd:1a:c1:3f:76:ac:01:
                    f4:a8:e3:5e:f8:e5:c8:44:0c:06:80:83:b7:53:76:
                    30:d4:e1:ea:c0:72:37:10:d1:35:77:e4:15:50:26:
                    bd:49:2d:35:0c:fa:8e:41:b9:64:0e:fb:87:43:2f:
                    c2:65:50:50:e5:f4:53:85:e5:73:05:98:9e:eb:79:
                    02:90:6b:0e:dd:6c:31:e5:4b:96:da:47:9d:11:26:
                    25:40:55:ff:b8:28:9b:35:42:93:64:04:d6:f2:bf:
                    c6:4c:8a:41:2b:a7:4d:d0:77:5f:f4:e5:2e:fd:83:
                    69:bd:87:f5:7a:b6:8e:0c:88:5b:b9:4f:32:a6:26:
                    7e:b6:96:ee:92:3e:12:18:83:3d:93:67:90:1b:58:
                    8e:84:66:55:8a:da:f3:3f:80:29:6e:15:b2:e2:ca:
                    89:79:f2:f0:12:32:4c:21:08:b9:7f:10:4a:7f:47:
                    06:a1:a7:63:bc:b2:f5:01:b0:50:9b:d6:8e:6a:41:
                    9f:bf:70:2f:60:7d:71:ce:00:21:e6:1a:3e:66:8a:
                    97:f7:03:55:25:35:21:ab:d6:41:e6:4e:5f:8e:ca:
                    66:68:9f:ca:97:04:f5:59:61:72:54:57:c0:61:01:
                    83:1f:6c:c8:23:13:bb:85:f1:25:65:85:c5:51:4c:
                    72:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:9F:A6:88:DC:4B:C5:BF:88:C9:DA:37:13:29:C7:7F:42:C6:EC:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/234c8b90-e98e-3d31-bc9b-1f715141e0fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.20.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:ae:a9:60:86:41:99:c0:24:04:bf:b0:f3:8f:8c:4c:98:da:
         75:86:c4:a0:04:47:14:0a:48:ef:09:0a:ab:9d:3a:24:61:62:
         8a:96:de:47:65:4c:c9:60:28:91:f9:9e:12:b0:32:f7:8d:91:
         9e:27:88:8c:87:4d:46:11:dc:be:f4:da:56:45:2a:27:d2:87:
         3d:5d:76:b0:a8:70:f4:8c:8b:75:62:3c:64:ae:1e:d2:96:cb:
         c4:cf:71:fb:2d:3f:fd:55:5a:dc:e3:6e:69:aa:ce:58:6f:ba:
         e9:4a:5a:cc:56:f1:1b:04:a8:11:37:8c:9d:e8:e4:69:c3:4e:
         89:e4:13:f2:a3:04:fc:7b:92:cb:c0:05:c3:c2:1e:87:e0:09:
         e9:21:35:8f:0f:0a:0b:76:f7:df:0e:34:f6:1f:5d:d2:4b:74:
         39:4f:2c:0d:c4:ce:d5:9e:b2:67:aa:de:d5:28:3b:13:35:8e:
         8a:06:87:ae:df:4f:8b:a8:7e:f5:da:43:8e:46:f4:af:dc:32:
         01:c9:57:01:16:58:1d:c2:e6:e4:89:04:bb:a7:b1:e3:dc:89:
         6a:50:29:cc:43:16:15:f5:c4:a8:de:02:b0:e3:1e:2c:06:08:
         de:f4:c5:eb:c6:47:58:89:9c:1d:6b:44:74:cb:6f:4f:a2:f0:
         84:ff:1d:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErulPnwxrL5mposScAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDgyMTE2NDMxOVoXDTI1MTExOTE3NDMxOVowLzEtMCsGA1UEAxMk
MDc4MDlkMDEtMzI5MC00M2FhLWFjZWUtZWI1NTI5OWYzZWM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWvhxrpDic0awT92rAH0qONe+OXIRAwGgIO3
U3Yw1OHqwHI3ENE1d+QVUCa9SS01DPqOQblkDvuHQy/CZVBQ5fRTheVzBZie63kC
kGsO3Wwx5UuW2kedESYlQFX/uCibNUKTZATW8r/GTIpBK6dN0Hdf9OUu/YNpvYf1
eraODIhbuU8ypiZ+tpbukj4SGIM9k2eQG1iOhGZVitrzP4ApbhWy4sqJefLwEjJM
IQi5fxBKf0cGoadjvLL1AbBQm9aOakGfv3AvYH1xzgAh5ho+ZoqX9wNVJTUhq9ZB
5k5fjspmaJ/KlwT1WWFyVFfAYQGDH2zIIxO7hfElZYXFUUxy4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFCfpojcS8W/iMnaNxMpx39CxuxjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMjM0YzhiOTAtZTk4ZS0z
ZDMxLWJjOWItMWY3MTUxNDFlMGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhSbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGGuqWCGQZnAJAS/sPOPjEyY2nWGxKAERxQKSO8JCqudOiRhYoqW3kdl
TMlgKJH5nhKwMveNkZ4niIyHTUYR3L702lZFKifShz1ddrCocPSMi3ViPGSuHtKW
y8TPcfstP/1VWtzjbmmqzlhvuulKWsxW8RsEqBE3jJ3o5GnDTonkE/KjBPx7ksvA
BcPCHofgCekhNY8PCgt2998ONPYfXdJLdDlPLA3EztWesmeq3tUoOxM1jooGh67f
T4uofvXaQ45G9K/cMgHJVwEWWB3C5uSJBLunsePciWpQKcxDFhX1xKjeArDjHiwG
CN70xevGR1iJnB1rRHTLb0+i8IT/HQQ=
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:45:55 2025 by rpki-client