Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/95f4ef10-2ca1-3e20-97a0-3a9ec71d3313.roa
File:                     95f4ef10-2ca1-3e20-97a0-3a9ec71d3313.roa (raw, json)
Hash identifier:          Raw6p6JYKWqf+G7CIB2SM9Fot5lOMnnrY0nPQVRoxQ8=
Subject key identifier:   93:E8:E0:8E:6F:23:AD:91:A3:FD:0D:62:A2:E9:6E:3C:45:A5:DE:77
Certificate issuer:       /CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092
Certificate serial:       010D0C9F4328584AD93652B969C6428B95998E00
Authority key identifier: E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/95f4ef10-2ca1-3e20-97a0-3a9ec71d3313.roa
Signing time:             Thu 14 Aug 2025 01:00:33 +0000
ROA not before:           Thu 14 Aug 2025 01:00:33 +0000
ROA not after:            Wed 12 Nov 2025 02:00:33 +0000
asID:                     64496
IP address blocks:        152.130.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d9:36:52:b9:69:c6:42:8b:95:99:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092
        Validity
            Not Before: Aug 14 01:00:33 2025 GMT
            Not After : Nov 12 02:00:33 2025 GMT
        Subject: CN=e6cc593b-8201-4b5e-b944-200b4f74fa6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a1:79:1f:d1:5c:80:ca:63:d0:72:bc:a1:46:
                    5a:d5:02:23:ac:9b:20:b5:5b:0a:b7:9e:71:97:61:
                    64:62:5b:62:fa:eb:10:18:e0:8d:b3:8b:82:58:13:
                    af:dc:63:b8:ac:8d:13:aa:59:fc:80:74:1a:f5:50:
                    04:28:0d:74:67:b4:d3:5b:36:92:67:04:b9:e4:d2:
                    42:c0:e2:db:fc:5d:d5:51:ed:7e:01:d8:fa:bd:25:
                    88:20:77:10:b9:1e:17:44:22:4f:aa:1c:32:f3:bb:
                    90:f5:44:82:5b:33:93:c4:af:13:37:bd:0f:f8:11:
                    8e:80:97:cd:a7:c6:2b:2d:54:27:8f:51:6d:31:df:
                    65:9a:c7:04:de:95:56:ed:9a:7c:bd:d6:14:5f:cb:
                    bc:85:c6:28:66:db:f4:e3:31:67:23:82:80:3f:45:
                    ef:6d:26:a5:da:f5:92:1f:bd:ec:de:70:17:a0:40:
                    d9:2b:3b:d8:16:02:37:be:4f:57:38:db:86:f5:97:
                    e8:a2:75:80:8a:37:14:65:b7:fc:b1:45:00:66:e0:
                    24:a8:51:8f:e5:07:16:d9:80:21:5c:8d:7b:fd:f3:
                    77:32:51:98:13:b6:77:94:48:7f:83:b8:7d:d4:12:
                    8d:a4:9e:8d:50:f0:c0:33:80:61:51:ee:3e:c1:b5:
                    9e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E8:E0:8E:6F:23:AD:91:A3:FD:0D:62:A2:E9:6E:3C:45:A5:DE:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/95f4ef10-2ca1-3e20-97a0-3a9ec71d3313.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.crl

            X509v3 Authority Key Identifier:
                keyid:E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.130.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:b2:52:d7:60:d7:c0:75:7b:3e:3f:5b:9e:52:b5:21:24:27:
         d4:5d:20:51:a2:9b:4e:9a:df:b5:51:f5:ad:4b:92:9f:bb:ce:
         84:40:c3:9c:ec:ac:ad:fb:d9:55:6a:c4:f9:26:27:22:0f:9c:
         fb:24:bb:32:3f:3a:e7:62:71:f9:be:53:70:f9:cc:70:be:f7:
         8a:ad:a9:3d:94:47:34:32:1f:d4:7f:c5:fa:50:47:72:ff:46:
         0c:ea:1b:b0:e1:d9:7c:48:f6:0a:7b:5a:fa:2a:17:a1:bd:cc:
         fc:9f:bf:59:fc:8a:f4:66:0a:69:1f:68:12:15:a4:de:a4:d5:
         20:9d:d4:8e:53:b6:55:63:a4:47:85:e7:38:3c:3e:1d:ba:e8:
         f0:ad:9a:14:39:9d:24:d5:20:b4:70:b2:d9:ea:89:37:5a:7c:
         d1:14:11:9f:02:73:89:80:04:e9:21:c4:1b:c2:93:49:44:f5:
         e6:b5:0b:1b:54:c7:bf:02:11:7d:1d:05:b8:f8:7c:8e:2c:59:
         85:32:f8:ca:55:0f:ae:cb:5b:f3:29:ec:bb:de:c6:d8:4c:95:
         87:65:9f:1d:17:08:b4:88:dc:63:ee:0d:c9:3f:5d:52:24:2e:
         26:07:c2:20:6e:23:7d:4a:95:d0:18:dd:59:c0:67:c4:3d:0c:
         89:94:50:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZNlK5acZCi5WZjgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGY0ZmFmMmEtMTdmZi00ODI3LTliZWMtYzZmZmNiMmFk
MDkyMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk
ZTZjYzU5M2ItODIwMS00YjVlLWI5NDQtMjAwYjRmNzRmYTZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6F5H9FcgMpj0HK8oUZa1QIjrJsgtVsKt55x
l2FkYlti+usQGOCNs4uCWBOv3GO4rI0Tqln8gHQa9VAEKA10Z7TTWzaSZwS55NJC
wOLb/F3VUe1+Adj6vSWIIHcQuR4XRCJPqhwy87uQ9USCWzOTxK8TN70P+BGOgJfN
p8YrLVQnj1FtMd9lmscE3pVW7Zp8vdYUX8u8hcYoZtv04zFnI4KAP0XvbSal2vWS
H73s3nAXoEDZKzvYFgI3vk9XONuG9ZfoonWAijcUZbf8sUUAZuAkqFGP5QcW2YAh
XI17/fN3MlGYE7Z3lEh/g7h91BKNpJ6NUPDAM4BhUe4+wbWewwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJPo4I5vI62Ro/0NYqLpbjxFpd53MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjRm
YWYyYS0xN2ZmLTQ4MjctOWJlYy1jNmZmY2IyYWQwOTIvOTVmNGVmMTAtMmNhMS0z
ZTIwLTk3YTAtM2E5ZWM3MWQzMzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGY0ZmFmMmEtMTdmZi00ODI3LTli
ZWMtYzZmZmNiMmFkMDkyLzRmNGZhZjJhLTE3ZmYtNDgyNy05YmVjLWM2ZmZjYjJh
ZDA5Mi5jcmwwHwYDVR0jBBgwFoAU4BNewN3Gcqc4VJWHF5QWjm2ZcC8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjRmYWYyYS0xN2ZmLTQ4MjctOWJlYy1jNmZm
Y2IyYWQwOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmIL4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE2yUtdg18B1ez4/W55StSEkJ9RdIFGim06a37VR9a1Lkp+7zoRAw5zs
rK372VVqxPkmJyIPnPskuzI/Oudicfm+U3D5zHC+94qtqT2URzQyH9R/xfpQR3L/
RgzqG7Dh2XxI9gp7WvoqF6G9zPyfv1n8ivRmCmkfaBIVpN6k1SCd1I5TtlVjpEeF
5zg8Ph266PCtmhQ5nSTVILRwstnqiTdafNEUEZ8Cc4mABOkhxBvCk0lE9ea1CxtU
x78CEX0dBbj4fI4sWYUy+MpVD67LW/Mp7LvexthMlYdlnx0XCLSI3GPuDck/XVIk
LiYHwiBuI31KldAY3VnAZ8Q9DImUUGI=
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:10:13 2025 by rpki-client