Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/514b60b3-68dc-3b45-9724-79424b10208a.roa
File:                     514b60b3-68dc-3b45-9724-79424b10208a.roa (raw, json)
Hash identifier:          xSmOQQy1VUMq0baPxmSGvxicq36nFMF6qUA3hcgBt68=
Subject key identifier:   41:1F:3A:24:05:4D:EF:8E:95:58:96:76:C5:E0:99:C6:C6:0F:9B:FB
Certificate issuer:       /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial:       010D0C9F4328584A331AF23BE7CA6192A4EE3780
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/514b60b3-68dc-3b45-9724-79424b10208a.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     2920
IP address blocks:        198.188.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:f2:3b:e7:ca:61:92:a4:ee:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=2e8985d7-01c8-42e4-8634-392343a7c970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f7:c4:d2:12:b5:60:9f:18:26:ab:df:13:d5:
                    b7:07:26:33:fb:06:98:04:87:db:8c:95:d4:01:32:
                    15:5c:88:a6:67:7e:b9:1e:08:bd:a6:72:79:11:9a:
                    ad:b2:34:88:e9:20:e9:ac:31:9c:2c:54:c6:4d:ad:
                    c9:5c:14:78:12:9d:af:e2:c9:2f:5f:e0:2e:9b:0e:
                    ff:6d:59:5d:b9:cb:5c:2d:4e:cc:e3:86:0c:42:72:
                    d1:d9:3e:87:73:93:1f:7f:0c:c5:0c:7c:1f:d8:b9:
                    65:77:b9:bf:f2:21:68:d2:54:0f:5e:da:92:fb:35:
                    37:b4:b6:66:3f:02:15:98:ea:f6:45:cf:cb:a1:2a:
                    ab:23:59:1c:13:0f:5b:60:82:34:ab:15:dd:ed:08:
                    df:f9:cb:74:0b:66:72:15:af:59:51:3c:ec:c7:84:
                    fd:3f:f4:67:7d:d3:92:a6:2b:6a:a6:e6:ef:99:f6:
                    b2:d4:02:10:20:c6:b2:0f:0e:4f:5a:ce:a8:ac:24:
                    c6:3f:61:bf:ef:03:bd:1c:41:06:ad:d0:fa:05:9e:
                    15:88:e8:d5:0a:35:b8:11:46:cf:da:0c:b0:f6:55:
                    8c:7a:da:24:00:17:02:e3:46:c5:8f:cf:a0:2d:dd:
                    95:29:ff:3f:bc:b4:65:79:cf:31:60:d2:a2:24:0f:
                    f4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1F:3A:24:05:4D:EF:8E:95:58:96:76:C5:E0:99:C6:C6:0F:9B:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/514b60b3-68dc-3b45-9724-79424b10208a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl

            X509v3 Authority Key Identifier:
                keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.188.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:e1:06:e5:47:c9:38:7e:62:1f:2c:e0:9d:49:48:3a:4a:b1:
         d8:bd:c7:0b:5e:ce:ca:1f:49:51:51:57:f8:18:4a:9e:d3:4b:
         5f:aa:ec:7a:1a:15:1b:60:f1:6b:36:bf:08:4c:b2:a4:b8:49:
         a7:41:26:f8:2f:ae:11:49:bf:95:87:17:b0:30:bb:6c:2f:8a:
         1b:08:82:2a:59:c1:35:7b:b8:97:33:5b:0c:71:da:8d:0f:8d:
         da:81:a8:a6:9f:1d:65:d4:6e:15:c8:26:9e:d5:70:2f:1f:5a:
         26:b4:b6:a4:ad:fc:64:98:60:51:bd:ce:b6:02:7f:74:b7:38:
         a0:18:d6:d5:8d:f7:4d:62:af:75:77:db:a0:00:50:be:4c:bb:
         a0:4e:c9:03:55:27:48:28:ee:f3:1c:33:39:0f:50:6c:11:ab:
         35:c2:2e:39:c3:5d:42:91:cf:14:e7:60:11:64:ad:8b:31:46:
         15:c2:4b:2c:62:ac:cf:75:9a:87:53:8b:84:1d:be:3a:de:db:
         4f:41:a2:6a:6d:b6:2c:09:19:7a:f8:f9:89:9a:e7:7f:53:d2:
         db:14:ad:7c:c3:64:61:8f:cc:fe:89:ff:38:1a:19:16:87:40:
         61:42:e4:2b:87:5d:2d:aa:35:b6:02:ec:ff:76:9f:0e:98:b6:
         71:31:db:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 02:27:36 2025 by rpki-client