Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/89e11acf-801c-3082-ba53-a9d50b309f69.roa
File:                     89e11acf-801c-3082-ba53-a9d50b309f69.roa (raw, json)
Hash identifier:          BM5g0r6n5wxbpnlVPTIl+u//S5cSDXRB4noN+QnIneA=
Subject key identifier:   6B:84:C5:8E:28:09:9D:50:B3:E1:3C:0F:5F:48:4F:B9:4E:56:6C:D1
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584A0ECFF449B56E0C04318C92C0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/89e11acf-801c-3082-ba53-a9d50b309f69.roa
Signing time:             Mon 02 Jun 2025 13:01:03 +0000
ROA not before:           Mon 02 Jun 2025 13:01:03 +0000
ROA not after:            Sun 31 Aug 2025 13:01:03 +0000
asID:                     54113
IP address blocks:        140.248.197.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0e:cf:f4:49:b5:6e:0c:04:31:8c:92:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jun  2 13:01:03 2025 GMT
            Not After : Aug 31 13:01:03 2025 GMT
        Subject: CN=73f64832-8256-4fd2-a61e-aed29efb899a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5b:b6:a0:69:8b:0f:a3:c7:eb:fa:47:65:6c:
                    d3:9d:59:f9:0c:82:68:a5:b7:29:03:30:3f:7a:fd:
                    b7:e4:ee:ab:81:bc:24:94:a0:f8:f1:7d:60:7b:61:
                    68:8a:e8:f7:75:69:ed:93:2b:9c:ff:78:3b:c7:f1:
                    eb:86:86:db:66:96:75:70:12:e5:d8:fa:11:2a:30:
                    3c:ab:52:28:63:eb:d3:39:fd:45:e7:8b:fa:ed:34:
                    09:d8:49:46:2c:84:32:ab:ae:11:f4:7a:41:c6:36:
                    12:aa:1f:8f:38:c8:1c:89:dc:79:d3:56:c7:3a:02:
                    cb:ac:1d:5a:40:6e:5b:8d:50:5b:a4:98:0d:b0:cb:
                    04:5b:4d:b2:fc:46:bb:98:b5:df:bd:a6:1a:92:a8:
                    c9:aa:93:30:2b:4d:ee:8a:8c:b6:44:f2:8e:65:17:
                    63:4b:53:9a:21:14:f5:21:90:59:86:a8:61:ee:cd:
                    56:f3:dd:62:01:ae:9b:e4:28:06:24:e1:2f:f9:ae:
                    1e:b4:6c:f1:2e:14:65:70:14:6f:73:67:ef:57:e6:
                    f1:09:b7:d4:cc:fb:0c:21:a7:8c:61:7b:98:d1:f1:
                    50:8d:90:45:15:80:25:de:99:1f:cd:a8:03:7b:4d:
                    04:4f:c2:0a:8e:65:e4:de:d5:c0:90:59:13:b0:97:
                    d9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:84:C5:8E:28:09:9D:50:B3:E1:3C:0F:5F:48:4F:B9:4E:56:6C:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/89e11acf-801c-3082-ba53-a9d50b309f69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.197.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:0c:c5:34:53:9c:34:dc:88:45:77:29:a3:5f:0f:55:eb:9c:
         50:b8:58:5a:f9:76:e1:6d:ce:87:a5:e2:8b:7a:5b:c2:a3:35:
         56:b4:16:46:c1:e2:6e:52:54:93:c6:42:14:fb:fb:16:af:0e:
         0b:de:0d:48:45:39:22:c8:8b:9f:24:6c:f3:78:0f:cd:f3:7f:
         aa:f1:09:87:2d:58:00:40:31:23:dc:de:c2:bd:f6:ba:56:a5:
         5b:24:8c:1f:f5:0e:1e:f4:9c:36:9f:ff:bc:8c:65:dd:5d:48:
         73:12:8e:43:fa:f4:68:20:b5:ec:c8:77:a8:d3:e7:b7:c6:8f:
         5a:44:e1:14:fd:2d:48:49:37:79:c5:09:58:13:6e:4d:a8:d9:
         7f:56:1f:da:05:f7:b0:8b:36:ae:2c:46:5c:af:ed:cf:32:f3:
         56:a0:df:79:41:05:95:6e:dc:04:3e:fd:8a:64:72:59:ac:4a:
         72:5a:fa:e4:6e:b8:46:ab:bf:b6:f6:d6:8e:7b:60:8e:83:70:
         27:6f:fc:ab:ca:53:e8:6d:47:1e:26:7f:54:8f:f3:f5:2e:bf:
         df:05:2b:79:e9:ff:83:90:87:b6:59:83:dd:b2:74:bb:8b:2b:
         44:36:24:91:d1:40:0e:ed:7f:e9:df:34:47:53:45:6a:14:52:
         84:73:a2:b4
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoOz/RJtW4MBDGMksAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDYwMjEzMDEwM1oXDTI1MDgzMTEzMDEwM1owLzEtMCsGA1UEAxMk
NzNmNjQ4MzItODI1Ni00ZmQyLWE2MWUtYWVkMjllZmI4OTlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFu2oGmLD6PH6/pHZWzTnVn5DIJopbcpAzA/
ev235O6rgbwklKD48X1ge2Foiuj3dWntkyuc/3g7x/HrhobbZpZ1cBLl2PoRKjA8
q1IoY+vTOf1F54v67TQJ2ElGLIQyq64R9HpBxjYSqh+POMgcidx501bHOgLLrB1a
QG5bjVBbpJgNsMsEW02y/Ea7mLXfvaYakqjJqpMwK03uioy2RPKOZRdjS1OaIRT1
IZBZhqhh7s1W891iAa6b5CgGJOEv+a4etGzxLhRlcBRvc2fvV+bxCbfUzPsMIaeM
YXuY0fFQjZBFFYAl3pkfzagDe00ET8IKjmXk3tXAkFkTsJfZdQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGuExY4oCZ1Qs+E8D19IT7lOVmzRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvODllMTFhY2YtODAxYy0z
MDgyLWJhNTMtYTlkNTBiMzA5ZjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHjPjFgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAbDMU0U5w03IhFdymjXw9V65xQuFha+Xbhbc6HpeKLelvCozVWtBZG
weJuUlSTxkIU+/sWrw4L3g1IRTkiyIufJGzzeA/N83+q8QmHLVgAQDEj3N7Cvfa6
VqVbJIwf9Q4e9Jw2n/+8jGXdXUhzEo5D+vRoILXsyHeo0+e3xo9aROEU/S1ISTd5
xQlYE25NqNl/Vh/aBfewizauLEZcr+3PMvNWoN95QQWVbtwEPv2KZHJZrEpyWvrk
brhGq7+29taOe2COg3Anb/yrylPobUceJn9Uj/P1Lr/fBSt56f+DkIe2WYPdsnS7
iytENiSR0UAO7X/p3zRHU0VqFFKEc6K0
-----END CERTIFICATE-----
Generated at Tue Jul 1 17:28:16 2025 by rpki-client