Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/8798fb32-a617-325e-86bf-5ce5ec48e881.roa
File:                     8798fb32-a617-325e-86bf-5ce5ec48e881.roa (raw, json)
Hash identifier:          4JNjOArNEnQjkTZC7bG0J+uiBBRRM/t6Q00GGqScykU=
Subject key identifier:   67:0A:DC:67:C4:F6:AD:BD:52:11:32:23:A1:72:39:FE:BD:A8:2C:A0
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584A91207ED74B62ED65A567EE80
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/8798fb32-a617-325e-86bf-5ce5ec48e881.roa
Signing time:             Sat 19 Jul 2025 05:18:27 +0000
ROA not before:           Sat 19 Jul 2025 05:18:27 +0000
ROA not after:            Fri 17 Oct 2025 05:18:27 +0000
asID:                     13998
IP address blocks:        198.215.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:91:20:7e:d7:4b:62:ed:65:a5:67:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Jul 19 05:18:27 2025 GMT
            Not After : Oct 17 05:18:27 2025 GMT
        Subject: CN=9c11b270-5d07-4d70-b9ad-9107a74ea5f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:97:91:c5:0e:0f:8d:68:f3:be:1c:41:e7:65:
                    a9:a3:d7:ba:ce:cf:41:07:9e:72:ac:24:7b:44:f1:
                    32:32:9b:0e:24:ac:bd:9e:cb:be:fa:9a:07:07:92:
                    73:53:ce:70:eb:16:22:19:15:6d:22:7d:0c:e2:08:
                    52:83:9c:8b:0b:75:02:27:2e:58:4e:d6:70:bf:25:
                    cd:e3:70:9a:a9:c3:21:a7:b2:57:e7:60:db:bc:ba:
                    43:3e:55:aa:33:db:8d:e1:18:a2:b4:7f:45:d7:d4:
                    87:db:7f:85:26:0f:3b:76:6f:75:86:7a:27:b6:41:
                    a7:58:a7:74:fc:95:dd:82:7f:df:b9:7d:21:8a:d9:
                    a2:e6:78:57:55:09:e0:7c:07:2d:ff:82:e8:ce:29:
                    3c:9a:4b:71:fe:83:df:90:fe:78:33:e1:21:68:1c:
                    bb:f0:9d:5e:dd:fc:ea:fd:39:61:a1:c3:7b:4e:d8:
                    48:4a:2b:7f:03:d6:e1:db:52:55:8c:51:da:d1:1d:
                    18:0e:d6:81:64:82:4a:4f:72:5d:59:20:1b:b7:f6:
                    d2:6a:d6:6f:ee:e5:34:83:54:ec:a5:e4:6c:14:f2:
                    c3:00:fb:5e:ba:0f:f4:4b:2a:6c:fd:71:64:32:11:
                    5c:73:1d:38:a1:06:fc:1c:53:0a:72:1b:35:49:9c:
                    3b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:0A:DC:67:C4:F6:AD:BD:52:11:32:23:A1:72:39:FE:BD:A8:2C:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/8798fb32-a617-325e-86bf-5ce5ec48e881.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.215.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:3c:fa:56:5a:f5:b7:17:0d:22:7d:c1:ff:f8:74:b8:2f:71:
         9a:3e:35:5d:f0:a7:c1:07:ef:43:44:74:7e:88:4c:5d:36:19:
         36:6b:28:6b:59:b1:6c:b6:22:cd:2f:ae:0a:51:22:6f:05:f6:
         59:9d:40:25:a2:00:49:7e:fb:bf:d8:63:56:ee:dc:9d:e7:ee:
         df:6c:55:f9:28:19:6b:a7:d9:97:b2:60:a2:3c:62:52:f8:e2:
         26:c4:e3:10:4e:26:03:97:02:fc:47:de:05:b4:54:a2:c6:7a:
         56:d0:d6:00:28:f6:63:d3:31:6c:0f:1e:53:9d:18:e9:77:d8:
         2e:a7:50:e8:25:5f:42:67:d6:a4:42:b1:1f:17:4e:e6:54:84:
         9c:8f:0b:f8:bd:37:65:cc:fa:6b:6a:0f:ba:84:73:20:50:dc:
         62:8a:9c:34:97:55:ba:8b:95:31:2c:3d:78:95:aa:10:fd:96:
         b7:3d:05:11:b5:5a:fc:aa:a8:7c:3f:e7:87:a6:17:73:30:70:
         ab:50:21:5b:9e:6e:57:1e:58:b4:36:be:64:d4:17:63:b5:07:
         b5:36:a5:16:08:24:37:04:53:aa:8e:53:d6:6b:c5:45:54:37:
         2c:47:c7:a0:bd:2d:aa:5e:8a:a2:7b:05:31:aa:c1:33:85:67:
         94:7d:ca:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqRIH7XS2LtZaVn7oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU4MWEyNTYtNDFmZi00ZjUxLTgwOTItYzdmZmZhNGQ5
MjIxMB4XDTI1MDcxOTA1MTgyN1oXDTI1MTAxNzA1MTgyN1owLzEtMCsGA1UEAxMk
OWMxMWIyNzAtNWQwNy00ZDcwLWI5YWQtOTEwN2E3NGVhNWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJeRxQ4PjWjzvhxB52Wpo9e6zs9BB55yrCR7
RPEyMpsOJKy9nsu++poHB5JzU85w6xYiGRVtIn0M4ghSg5yLC3UCJy5YTtZwvyXN
43CaqcMhp7JX52DbvLpDPlWqM9uN4RiitH9F19SH23+FJg87dm91hnontkGnWKd0
/JXdgn/fuX0hitmi5nhXVQngfAct/4Lozik8mktx/oPfkP54M+EhaBy78J1e3fzq
/TlhocN7TthISit/A9bh21JVjFHa0R0YDtaBZIJKT3JdWSAbt/bSatZv7uU0g1Ts
peRsFPLDAPteug/0Syps/XFkMhFccx04oQb8HFMKchs1SZw7XQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGcK3GfE9q29UhEyI6FyOf69qCygMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTgx
YTI1Ni00MWZmLTRmNTEtODA5Mi1jN2ZmZmE0ZDkyMjEvODc5OGZiMzItYTYxNy0z
MjVlLTg2YmYtNWNlNWVjNDhlODgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU4MWEyNTYtNDFmZi00ZjUxLTgw
OTItYzdmZmZhNGQ5MjIxLzRlODFhMjU2LTQxZmYtNGY1MS04MDkyLWM3ZmZmYTRk
OTIyMS5jcmwwHwYDVR0jBBgwFoAUwitnYdEerOUTJk8QRtL6zHxFiyowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTgxYTI1Ni00MWZmLTRmNTEtODA5Mi1jN2Zm
ZmE0ZDkyMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExtcwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFo8+lZa9bcXDSJ9wf/4dLgvcZo+NV3wp8EH70NEdH6ITF02GTZrKGtZ
sWy2Is0vrgpRIm8F9lmdQCWiAEl++7/YY1bu3J3n7t9sVfkoGWun2ZeyYKI8YlL4
4ibE4xBOJgOXAvxH3gW0VKLGelbQ1gAo9mPTMWwPHlOdGOl32C6nUOglX0Jn1qRC
sR8XTuZUhJyPC/i9N2XM+mtqD7qEcyBQ3GKKnDSXVbqLlTEsPXiVqhD9lrc9BRG1
WvyqqHw/54emF3MwcKtQIVueblceWLQ2vmTUF2O1B7U2pRYIJDcEU6qOU9ZrxUVU
NyxHx6C9LapeiqJ7BTGqwTOFZ5R9yp8=
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:06:03 2025 by rpki-client