Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/8da0e230-c0a2-344a-a2b7-6979b2a2a464.roa
File:                     8da0e230-c0a2-344a-a2b7-6979b2a2a464.roa (raw, json)
Hash identifier:          9l/EIxfbfdAS3BuZBBV5ChseOqiak18AwCqPZkS0HXE=
Subject key identifier:   70:4C:71:0B:AC:61:1F:D7:16:46:1B:F1:3C:06:58:78:5D:A0:5D:8D
Certificate issuer:       /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial:       010D0C9F4328584A89A614A5E671F288A83D01E0
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/8da0e230-c0a2-344a-a2b7-6979b2a2a464.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     401307
IP address blocks:        136.228.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:14:a5:e6:71:f2:88:a8:3d:01:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=5ccee466-122f-4c04-8e71-c5248669e92f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b1:7f:b2:07:95:20:75:a6:ec:a3:0d:eb:cf:
                    09:92:69:f9:86:7a:1a:1e:48:9b:18:a7:c6:9d:4a:
                    5b:10:8c:6e:c3:3f:76:ab:94:eb:15:1b:92:e6:af:
                    7b:95:d8:50:3a:d1:4b:e6:9b:6b:ee:86:42:c5:37:
                    17:f3:bc:2b:21:2d:29:3d:e1:05:6c:86:24:66:55:
                    aa:73:9c:cf:51:10:24:cd:1d:09:c6:61:67:d4:1e:
                    e2:e9:6a:dd:50:7c:9b:8a:7f:76:f3:e9:1e:f1:b7:
                    21:04:1f:f1:02:6b:85:4d:17:59:2f:21:c6:70:9e:
                    85:b0:92:c6:9e:22:92:83:29:b0:25:81:2e:13:d6:
                    c3:40:ee:c4:92:41:fb:1d:76:d4:66:2a:31:49:e6:
                    93:bc:4c:31:0f:b8:11:56:08:a6:53:48:77:52:6a:
                    7c:fd:4c:a3:e6:1d:6f:77:cf:9c:00:5b:5a:a5:64:
                    25:e3:7c:c3:02:f9:04:07:97:0b:41:08:4e:09:4f:
                    9f:f1:32:9a:19:d5:0b:44:e6:63:24:45:ba:b9:c4:
                    3b:3d:b9:a0:86:8e:d1:ac:b1:7f:e4:af:bf:d3:8a:
                    d7:40:d3:8c:d3:d4:20:81:95:3d:21:49:b1:95:51:
                    db:61:4c:32:7f:51:05:17:e9:74:55:dd:90:e4:0f:
                    1c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:4C:71:0B:AC:61:1F:D7:16:46:1B:F1:3C:06:58:78:5D:A0:5D:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/8da0e230-c0a2-344a-a2b7-6979b2a2a464.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl

            X509v3 Authority Key Identifier:
                keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:a0:08:8b:4f:b2:91:b6:a5:06:72:d9:cd:8d:97:69:02:ef:
         0a:0f:28:e9:65:e9:79:82:65:b0:b7:9c:42:2e:01:f4:b3:6c:
         ed:97:42:b6:73:94:81:62:a9:86:2e:2d:5c:16:47:18:a0:2b:
         37:c6:65:65:4a:28:94:c5:ce:be:04:14:00:80:db:79:d8:5c:
         43:b5:8e:4e:d1:fb:c3:e2:63:ab:3e:da:94:e9:de:2a:c1:f9:
         a5:01:be:75:d2:89:6b:0a:19:dd:e6:b7:b0:b9:f1:10:9e:76:
         0b:29:24:6b:3e:b0:d7:7e:54:8d:15:c7:de:e0:1e:f2:f9:64:
         1c:97:39:1e:65:58:fe:8d:3c:5c:ba:68:8e:07:14:ee:6f:31:
         4c:3e:d8:83:05:01:1e:62:d6:9d:9b:ea:4d:cb:85:40:01:48:
         6d:81:83:07:64:4a:0d:08:28:9b:0f:9f:52:f5:af:2e:9e:19:
         9a:8c:e0:35:2b:c4:62:5b:b2:e1:71:d2:f4:f1:fa:fd:14:9a:
         23:88:bd:42:08:18:99:f6:3b:34:6c:45:98:b1:f8:bb:83:26:
         13:f9:35:65:43:bb:15:56:d2:80:fa:c3:87:de:f4:2f:62:fb:
         b2:47:1f:cf:a7:08:07:d6:16:01:e4:58:17:ed:85:b5:3e:2f:
         c2:18:bd:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqJphSl5nHyiKg9AeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjA2MzgxNGQtNTE4My00OWRlLTkwZWUtODRjYmJlY2Rl
NDIyMB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk
NWNjZWU0NjYtMTIyZi00YzA0LThlNzEtYzUyNDg2NjllOTJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLF/sgeVIHWm7KMN688Jkmn5hnoaHkibGKfG
nUpbEIxuwz92q5TrFRuS5q97ldhQOtFL5ptr7oZCxTcX87wrIS0pPeEFbIYkZlWq
c5zPURAkzR0JxmFn1B7i6WrdUHybin928+ke8bchBB/xAmuFTRdZLyHGcJ6FsJLG
niKSgymwJYEuE9bDQO7EkkH7HXbUZioxSeaTvEwxD7gRVgimU0h3Ump8/Uyj5h1v
d8+cAFtapWQl43zDAvkEB5cLQQhOCU+f8TKaGdULROZjJEW6ucQ7Pbmgho7RrLF/
5K+/04rXQNOM09QggZU9IUmxlVHbYUwyf1EFF+l0Vd2Q5A8clwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHBMcQusYR/XFkYb8TwGWHhdoF2NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82MDYz
ODE0ZC01MTgzLTQ5ZGUtOTBlZS04NGNiYmVjZGU0MjIvOGRhMGUyMzAtYzBhMi0z
NDRhLWEyYjctNjk3OWIyYTJhNDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjA2MzgxNGQtNTE4My00OWRlLTkw
ZWUtODRjYmJlY2RlNDIyLzYwNjM4MTRkLTUxODMtNDlkZS05MGVlLTg0Y2JiZWNk
ZTQyMi5jcmwwHwYDVR0jBBgwFoAU+oFKWYuHd/AMGvqgYA7Dhlv3AcAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82MDYzODE0ZC01MTgzLTQ5ZGUtOTBlZS04NGNi
YmVjZGU0MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOQwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF+gCItPspG2pQZy2c2Nl2kC7woPKOll6XmCZbC3nEIuAfSzbO2XQrZz
lIFiqYYuLVwWRxigKzfGZWVKKJTFzr4EFACA23nYXEO1jk7R+8PiY6s+2pTp3irB
+aUBvnXSiWsKGd3mt7C58RCedgspJGs+sNd+VI0Vx97gHvL5ZByXOR5lWP6NPFy6
aI4HFO5vMUw+2IMFAR5i1p2b6k3LhUABSG2BgwdkSg0IKJsPn1L1ry6eGZqM4DUr
xGJbsuFx0vTx+v0UmiOIvUIIGJn2OzRsRZix+LuDJhP5NWVDuxVW0oD6w4fe9C9i
+7JHH8+nCAfWFgHkWBfthbU+L8IYvd8=
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:50:21 2025 by rpki-client