Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/f56f5b84-03bb-37ee-acc6-cae97dcb1acb.roa
File:                     f56f5b84-03bb-37ee-acc6-cae97dcb1acb.roa (raw, json)
Hash identifier:          8KOjiWmw5wz31O3lFIUgLiwJYEi9C586iOn4v0U7IUY=
Subject key identifier:   7A:01:EC:E9:8B:59:AC:54:93:EF:A5:C8:45:D3:34:04:E0:B9:08:9F
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F4328584A23C0035CC4EE6F2294086EC0
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/f56f5b84-03bb-37ee-acc6-cae97dcb1acb.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     16826
IP address blocks:        198.248.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:03:5c:c4:ee:6f:22:94:08:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=35e5fa43-ad28-4b34-b240-d0b989b28995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:21:b4:43:89:c0:6c:a3:87:ca:3c:22:d4:f7:
                    ab:f4:3d:c0:fc:c6:e5:5b:e8:63:ff:7a:b6:ca:ca:
                    23:6d:25:4f:b8:3c:f2:f5:b8:5a:a5:31:5a:fd:29:
                    ec:dd:56:69:df:7f:3b:bf:ff:dc:b9:01:d7:9b:87:
                    94:a6:3a:44:c0:16:ff:b4:7f:81:44:1f:80:b1:11:
                    6f:6b:21:f7:16:ca:a4:c5:a2:35:97:d8:ad:a1:42:
                    65:18:54:6c:13:c0:f3:b0:0a:c4:52:85:e9:de:19:
                    66:86:23:7b:4e:7d:16:86:66:f8:aa:dc:bb:5c:9d:
                    0d:1c:8d:0b:a8:5b:80:8e:e3:2c:45:77:d7:e4:a6:
                    19:79:bc:cc:58:21:47:29:d2:04:87:cb:83:43:bc:
                    45:1b:5c:ad:54:9f:89:d0:a3:27:ba:6c:c3:db:ea:
                    1e:0e:89:b0:7f:2a:30:cc:8f:e8:73:43:21:da:56:
                    de:98:71:8a:90:48:91:b0:b0:b2:f4:bf:c6:f3:7e:
                    c8:5d:f6:9f:88:a9:84:a3:f9:b4:f3:13:90:9a:1e:
                    d5:dc:96:9b:d8:c4:97:9f:78:c0:0e:5a:71:c1:55:
                    db:86:10:74:5e:62:49:2a:9a:a0:6c:4d:81:0c:03:
                    89:eb:de:b1:ce:5a:ff:2d:a8:22:fc:ed:45:0e:13:
                    eb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:01:EC:E9:8B:59:AC:54:93:EF:A5:C8:45:D3:34:04:E0:B9:08:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/f56f5b84-03bb-37ee-acc6-cae97dcb1acb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.248.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:34:11:18:9b:68:0f:e6:33:8e:75:96:a5:f8:41:f4:41:7d:
         95:93:f8:c3:e4:89:4e:3a:df:a0:ba:91:63:dd:d4:54:ed:c4:
         0c:48:b3:2a:23:9e:ea:c9:99:55:7b:35:0e:04:6d:fc:b3:13:
         36:f9:3c:ab:4b:fb:c5:6e:5d:fa:74:3b:24:5f:cf:b4:d2:60:
         63:57:e7:62:86:50:87:87:2f:5a:8e:13:0b:a5:59:fe:0a:05:
         d9:92:23:7b:9c:1a:00:5c:b7:39:eb:2c:3a:7e:5c:09:e3:93:
         3e:21:55:7c:3a:d0:b8:f0:66:31:e2:92:0c:b8:2f:a0:54:2c:
         8d:2e:b0:d6:54:8e:c0:7c:5c:a3:c4:13:31:99:ac:e4:58:b9:
         20:20:88:bb:f4:54:42:d8:de:a5:f0:30:fd:e5:94:50:e6:ca:
         ea:b3:60:5f:f6:f6:43:f5:c0:e6:8c:22:27:46:05:dd:e0:fa:
         6a:70:b4:8a:c0:6b:fb:cf:d6:81:e8:21:1e:c8:f7:53:16:08:
         38:1e:65:b1:2a:86:fe:d7:1e:f4:cf:b4:51:4a:69:6b:db:ad:
         b1:1b:71:de:bc:c1:f4:b0:23:7d:8f:65:c5:b5:71:4a:b5:df:
         23:f3:0b:8e:78:5a:98:0c:70:16:be:85:21:64:e4:76:7d:59:
         04:35:5e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 21:21:52 2025 by rpki-client