Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/cf8140ef-63de-3420-af2d-b86be24b6d5a.roa
File:                     cf8140ef-63de-3420-af2d-b86be24b6d5a.roa (raw, json)
Hash identifier:          18DpJ3VyetOtVxQih65Jvr7qf2bYHMevYHQ65VV1i/8=
Subject key identifier:   A8:B9:F3:FB:CD:69:D9:00:8E:57:1E:81:12:ED:AE:85:44:ED:BE:07
Certificate issuer:       /CN=88e1646b-e1b3-42e7-8591-3a57fd436369
Certificate serial:       010D0C9F4328584AC5AB8A23EFC9788364D92380
Authority key identifier: BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/cf8140ef-63de-3420-af2d-b86be24b6d5a.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     26946
IP address blocks:        216.159.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:8a:23:ef:c9:78:83:64:d9:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88e1646b-e1b3-42e7-8591-3a57fd436369
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=b1335296-8a45-4338-a1be-42a0d12cc063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c1:60:f6:27:d2:f9:a8:25:af:70:43:b8:5f:
                    a7:1a:3b:00:29:9c:10:1f:3c:4e:4c:55:f3:a2:35:
                    55:72:fa:34:fe:1f:e2:ea:34:b5:b9:dc:65:1c:a2:
                    5d:4d:55:8f:42:dd:09:65:6f:06:5b:6f:fb:e5:0d:
                    32:6c:94:7b:1e:99:53:2e:d7:f5:fb:a4:83:79:2c:
                    70:23:1e:6f:cb:02:01:10:0c:98:18:d5:50:76:f8:
                    30:1d:34:75:4a:96:41:39:69:60:be:19:9f:44:20:
                    7a:db:0d:21:96:f6:28:6f:41:f3:7a:80:bf:08:20:
                    87:53:12:a9:19:3d:7d:c7:f9:28:6b:14:3b:50:cc:
                    ad:5e:d2:55:34:8a:ca:e8:30:90:eb:31:9c:88:e2:
                    67:fa:c0:7e:36:bd:64:12:f4:29:0e:8c:c8:7e:5b:
                    43:d2:a2:69:aa:00:39:6a:fa:eb:0c:0a:28:f4:44:
                    ee:b4:07:2b:ae:6e:db:b1:d2:00:bf:ef:6c:d3:6a:
                    e8:fd:61:4f:f3:67:ee:f6:2a:ba:54:80:4d:ef:c8:
                    f1:47:aa:e3:9d:6c:f0:b7:45:fc:28:8f:17:ed:3d:
                    54:b2:78:f1:ff:d5:37:c5:99:c7:1c:14:70:6f:9d:
                    63:02:f8:54:47:34:5a:95:45:5c:57:cb:f6:62:b4:
                    0c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B9:F3:FB:CD:69:D9:00:8E:57:1E:81:12:ED:AE:85:44:ED:BE:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/cf8140ef-63de-3420-af2d-b86be24b6d5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl

            X509v3 Authority Key Identifier:
                keyid:BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.159.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:15:db:0f:b8:55:7b:85:d0:54:35:e9:12:79:82:00:f7:cd:
         15:d3:5b:f8:96:b4:2d:63:a1:7f:2a:c1:4e:99:d3:2e:58:4a:
         87:ea:73:e8:92:38:35:48:af:13:b8:01:38:7b:5e:55:42:51:
         4a:48:41:aa:ee:76:34:f1:c9:f8:71:5e:f5:8e:94:9f:db:19:
         09:04:a6:93:9d:31:c9:ac:cf:21:01:a1:be:d4:6e:2e:44:64:
         40:81:27:aa:c5:10:76:9d:42:5b:f0:f9:1c:2d:be:93:d3:db:
         fa:21:c4:07:fa:26:1d:85:a8:70:ea:7a:dc:87:19:2b:e3:e3:
         d2:d3:f8:8a:ca:db:cf:4d:ce:68:d4:a1:7e:cb:6a:c3:f5:03:
         47:77:8e:74:82:ca:83:9a:df:c0:5a:03:ee:00:3a:47:44:36:
         14:e4:3d:42:b9:c3:4a:7c:14:49:31:49:b8:83:6f:45:22:cf:
         d6:45:76:81:bb:68:3b:51:23:40:94:24:c8:c6:41:38:bb:a8:
         6f:59:f9:1c:db:8e:59:b7:6f:c8:87:5e:59:b3:5c:d0:04:5f:
         ca:40:57:ff:9d:b9:c8:70:07:32:f6:45:61:4f:27:e3:3b:61:
         72:e3:c2:61:39:12:c3:d6:d9:9a:73:7e:0a:cf:b6:69:86:7d:
         ac:67:a2:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq4oj78l4g2TZI4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODhlMTY0NmItZTFiMy00MmU3LTg1OTEtM2E1N2ZkNDM2
MzY5MB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk
YjEzMzUyOTYtOGE0NS00MzM4LWExYmUtNDJhMGQxMmNjMDYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMFg9ifS+aglr3BDuF+nGjsAKZwQHzxOTFXz
ojVVcvo0/h/i6jS1udxlHKJdTVWPQt0JZW8GW2/75Q0ybJR7HplTLtf1+6SDeSxw
Ix5vywIBEAyYGNVQdvgwHTR1SpZBOWlgvhmfRCB62w0hlvYob0HzeoC/CCCHUxKp
GT19x/koaxQ7UMytXtJVNIrK6DCQ6zGciOJn+sB+Nr1kEvQpDozIfltD0qJpqgA5
avrrDAoo9ETutAcrrm7bsdIAv+9s02ro/WFP82fu9iq6VIBN78jxR6rjnWzwt0X8
KI8X7T1Usnjx/9U3xZnHHBRwb51jAvhURzRalUVcV8v2YrQM+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKi58/vNadkAjlcegRLtroVE7b4HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84OGUx
NjQ2Yi1lMWIzLTQyZTctODU5MS0zYTU3ZmQ0MzYzNjkvY2Y4MTQwZWYtNjNkZS0z
NDIwLWFmMmQtYjg2YmUyNGI2ZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODhlMTY0NmItZTFiMy00MmU3LTg1
OTEtM2E1N2ZkNDM2MzY5Lzg4ZTE2NDZiLWUxYjMtNDJlNy04NTkxLTNhNTdmZDQz
NjM2OS5jcmwwHwYDVR0jBBgwFoAUukMjcrv3l+XytBPr7L8gMlwthZkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy84OGUxNjQ2Yi1lMWIzLTQyZTctODU5MS0zYTU3
ZmQ0MzYzNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J+1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKYV2w+4VXuF0FQ16RJ5ggD3zRXTW/iWtC1joX8qwU6Z0y5YSofqc+iS
ODVIrxO4ATh7XlVCUUpIQarudjTxyfhxXvWOlJ/bGQkEppOdMcmszyEBob7Ubi5E
ZECBJ6rFEHadQlvw+RwtvpPT2/ohxAf6Jh2FqHDqetyHGSvj49LT+IrK289NzmjU
oX7LasP1A0d3jnSCyoOa38BaA+4AOkdENhTkPUK5w0p8FEkxSbiDb0Uiz9ZFdoG7
aDtRI0CUJMjGQTi7qG9Z+Rzbjlm3b8iHXlmzXNAEX8pAV/+duchwBzL2RWFPJ+M7
YXLjwmE5EsPW2ZpzfgrPtmmGfaxnoug=
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:56:13 2025 by rpki-client