Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/20cf665a-0b99-3e2a-8878-56fb7e8d403a.roa
File:                     20cf665a-0b99-3e2a-8878-56fb7e8d403a.roa (raw, json)
Hash identifier:          lSJH2ndaa9lDmBqwdOfGYFlTFmNRGH+eNLkvE3XZFfo=
Subject key identifier:   D7:D4:6B:65:F6:08:65:AC:EC:D9:BB:70:E5:E9:6F:5E:E2:E6:B2:2E
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F43285849D594EB040C68F1F5A695DF80
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/20cf665a-0b99-3e2a-8878-56fb7e8d403a.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     32181
IP address blocks:        98.159.224.0/24 maxlen: 24
                          173.239.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:eb:04:0c:68:f1:f5:a6:95:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=43dbe52a-8531-419c-9751-78407b10a1f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:72:7f:01:a3:10:94:50:a0:7f:83:37:19:6c:
                    ee:27:ae:f6:32:fd:38:7a:b4:f0:e0:80:89:eb:5b:
                    8c:78:5d:29:88:de:85:fa:10:c0:3b:f4:99:f2:d4:
                    b6:a7:dc:27:91:50:bb:ed:5f:89:9c:64:6a:c5:64:
                    95:1b:c8:c7:c1:b6:37:28:85:84:4a:fa:ca:71:79:
                    8e:c7:4a:c2:b8:31:eb:81:f6:91:8f:c7:ff:49:1b:
                    74:4f:d1:bd:98:36:c0:1a:b5:e0:d9:63:c5:38:a4:
                    51:b7:ad:c9:1d:3a:a5:67:53:7a:7e:7b:b1:84:6f:
                    9d:5c:3d:9e:60:6c:ce:d0:c0:a4:bd:70:b6:15:6c:
                    c1:07:34:83:7d:d2:f5:7d:34:63:77:39:fa:26:94:
                    c0:85:91:ae:d8:27:1f:10:11:49:cb:9d:9b:86:7d:
                    49:5a:6c:45:62:46:64:63:05:66:61:e7:56:e0:68:
                    f3:7b:2f:95:4f:65:df:6a:27:ba:bc:db:5c:93:21:
                    68:a4:20:77:c3:3c:74:a8:ba:f9:3c:88:ab:8a:3b:
                    d8:14:79:e0:fb:2b:8b:c4:c4:eb:6c:50:97:08:86:
                    4c:08:e8:c1:6f:6c:00:98:77:f7:8a:4a:1c:47:c0:
                    8d:3e:6f:7b:52:45:4c:7f:d4:b3:3e:fa:9f:5e:f0:
                    0a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D4:6B:65:F6:08:65:AC:EC:D9:BB:70:E5:E9:6F:5E:E2:E6:B2:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/20cf665a-0b99-3e2a-8878-56fb7e8d403a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.159.224.0/24
                  173.239.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:8c:79:68:52:b2:a7:d3:bd:19:8d:d4:1c:3c:b7:02:97:dd:
         b9:49:88:4a:e7:d6:2e:a8:7e:4b:73:cf:27:e0:90:7d:e4:02:
         87:49:88:6b:9f:e8:ae:a8:d3:72:88:70:5b:13:3e:72:0f:76:
         05:20:ec:cf:f3:e1:bc:88:60:aa:f5:3a:e5:55:cb:e8:92:2b:
         cb:e3:2a:e3:c7:2c:ef:7e:3e:71:0e:33:ae:be:91:8d:0f:42:
         b6:6a:e4:11:81:2a:f6:06:a0:46:e7:ab:1e:a3:37:24:58:88:
         4e:fa:50:02:0a:84:be:fa:56:69:8c:17:85:27:8b:a3:e6:69:
         7e:0d:52:23:c4:56:bd:06:ec:0c:79:30:85:b6:09:cb:53:83:
         18:aa:06:8e:34:db:e0:12:89:12:7b:15:51:9c:55:e7:37:9a:
         88:de:38:6b:7b:a4:7a:e7:82:9f:0f:9c:6f:96:c6:0e:f6:d3:
         4d:8f:d9:f0:4b:68:6e:15:7e:19:60:82:1d:eb:ad:a4:6b:8e:
         95:ae:01:a4:3c:78:15:ae:98:66:ac:fc:ba:56:94:b5:5c:e6:
         90:6d:fb:ac:4e:0f:1c:0c:59:e0:8b:89:79:1c:32:49:b8:71:
         85:26:5b:d1:d7:01:5b:c0:f0:b4:bb:56:59:da:c5:b4:92:ac:
         fb:ee:37:fe
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnVlOsEDGjx9aaV34AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx
NzNhMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk
NDNkYmU1MmEtODUzMS00MTljLTk3NTEtNzg0MDdiMTBhMWY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHJ/AaMQlFCgf4M3GWzuJ672Mv04erTw4ICJ
61uMeF0piN6F+hDAO/SZ8tS2p9wnkVC77V+JnGRqxWSVG8jHwbY3KIWESvrKcXmO
x0rCuDHrgfaRj8f/SRt0T9G9mDbAGrXg2WPFOKRRt63JHTqlZ1N6fnuxhG+dXD2e
YGzO0MCkvXC2FWzBBzSDfdL1fTRjdzn6JpTAhZGu2CcfEBFJy52bhn1JWmxFYkZk
YwVmYedW4Gjzey+VT2Xfaie6vNtckyFopCB3wzx0qLr5PIirijvYFHng+yuLxMTr
bFCXCIZMCOjBb2wAmHf3ikocR8CNPm97UkVMf9SzPvqfXvAKfQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFNfUa2X2CGWs7Nm7cOXpb17i5rIuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx
ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvMjBjZjY2NWEtMGI5OS0z
ZTJhLTg4NzgtNTZmYjdlOGQ0MDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh
M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm
MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk
MDFlZjE3M2EuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAYp/gAwQA
re/MMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBABuMeWhSsqfTvRmN1Bw8twKX3blJiErn1i6ofktzzyfgkH3k
AodJiGuf6K6o03KIcFsTPnIPdgUg7M/z4byIYKr1OuVVy+iSK8vjKuPHLO9+PnEO
M66+kY0PQrZq5BGBKvYGoEbnqx6jNyRYiE76UAIKhL76VmmMF4Uni6PmaX4NUiPE
Vr0G7Ax5MIW2CctTgxiqBo402+ASiRJ7FVGcVec3mojeOGt7pHrngp8PnG+Wxg72
002P2fBLaG4Vfhlggh3rraRrjpWuAaQ8eBWumGas/LpWlLVc5pBt+6xODxwMWeCL
iXkcMkm4cYUmW9HXAVvA8LS7VlnaxbSSrPvuN/4=
-----END CERTIFICATE-----
Generated at Mon Jun 16 19:46:59 2025 by rpki-client