Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/ff338702-1c9c-37a4-99c5-c2efbf1c824b.roa
File:                     ff338702-1c9c-37a4-99c5-c2efbf1c824b.roa (raw, json)
Hash identifier:          0DFfhtGh7Z4xkPWDKY0GW/VuG5sjMvZPlHfbh+LJ8os=
Subject key identifier:   B8:BC:AB:3C:77:82:24:3F:8A:89:E1:E1:1E:6C:97:FC:DF:CB:F0:93
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F4328584A23C0060A82D7015F5C2AF6E0
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/ff338702-1c9c-37a4-99c5-c2efbf1c824b.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     2495
IP address blocks:        198.248.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:06:0a:82:d7:01:5f:5c:2a:f6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=de48cefc-6756-47ed-bd39-e4d4fbf854a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:59:47:7f:43:98:41:4d:22:e6:c7:9c:d5:4d:
                    99:1c:65:57:c5:17:54:dc:49:57:23:12:af:52:82:
                    8f:ea:ac:64:11:a1:2b:2b:d6:da:db:2b:3f:f4:6b:
                    a2:bf:6f:1f:45:66:59:3d:39:76:52:da:72:f5:57:
                    d7:b0:16:f6:12:af:4b:80:46:c8:67:96:33:ca:68:
                    56:83:69:95:bf:6a:ac:0a:48:5b:ce:27:a6:3c:12:
                    df:3f:5e:18:ed:a4:65:40:76:a5:2a:8d:15:26:48:
                    55:bc:3c:6b:f8:e9:f2:1d:23:53:f5:67:e6:10:e5:
                    58:f1:07:ff:06:33:2f:4e:34:db:56:bb:56:62:99:
                    e2:89:a9:7c:19:b4:c2:46:52:50:5c:48:d3:0a:85:
                    af:b0:10:01:64:38:eb:fc:8f:b2:d4:71:6d:d9:e3:
                    bb:06:5b:6c:c9:41:dc:57:7b:08:db:96:f4:d6:69:
                    ea:09:67:f5:51:75:c8:d3:58:1d:1d:f6:79:4f:55:
                    d0:bf:33:e0:8d:4c:68:71:2d:45:39:ff:df:cf:c8:
                    df:85:c8:b3:3b:46:45:2e:61:cd:46:d7:65:da:c3:
                    78:8a:c2:f2:50:0b:0e:72:54:7f:7e:ae:17:90:92:
                    44:b6:82:8c:63:c3:8e:dc:d8:27:51:8a:0a:4f:05:
                    ed:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BC:AB:3C:77:82:24:3F:8A:89:E1:E1:1E:6C:97:FC:DF:CB:F0:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/ff338702-1c9c-37a4-99c5-c2efbf1c824b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.248.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:94:39:b4:28:92:42:d5:0c:42:54:d9:e9:94:ad:ca:4a:29:
         23:e2:7d:28:64:25:ac:77:20:f3:da:94:bf:52:16:21:2c:5c:
         b9:1f:4f:6c:d4:8d:7c:42:df:6c:05:a2:36:53:99:f8:04:d6:
         13:d6:cd:c5:fe:a7:bc:58:6f:c5:fa:1a:ba:12:03:01:94:47:
         eb:28:76:cc:a1:b8:f2:56:1a:d1:9c:bf:c3:43:4e:e2:af:03:
         ec:bf:03:3b:10:2c:ce:1a:4d:59:81:ae:6c:4b:7f:03:c0:f4:
         66:75:88:1e:6a:23:fa:48:ff:4a:54:6f:3d:e4:f9:12:35:a0:
         0c:ac:82:a4:fc:d9:9d:ee:f8:ed:3a:04:47:37:87:e2:99:ab:
         0a:3c:a9:59:98:7b:87:b2:7f:e0:e5:6c:7d:32:cb:28:c8:8d:
         dd:7d:0e:81:a5:6c:0e:ef:0c:22:4c:b2:c5:fb:1d:91:3c:74:
         1c:75:c2:ef:26:52:7d:43:96:0c:91:ac:90:97:82:54:95:df:
         e7:03:42:34:b9:ee:12:c5:4e:12:a6:00:1f:22:11:27:5c:9d:
         f3:7b:f8:cf:c1:14:22:a0:09:43:82:14:88:85:10:7a:db:4f:
         73:c5:ff:4a:47:88:c1:10:68:7b:ca:7a:34:c0:2c:a1:c4:5c:
         21:28:10:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwAYKgtcBX1wq9uAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRi
ODNkMB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk
ZGU0OGNlZmMtNjc1Ni00N2VkLWJkMzktZTRkNGZiZjg1NGEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1lHf0OYQU0i5sec1U2ZHGVXxRdU3ElXIxKv
UoKP6qxkEaErK9ba2ys/9Guiv28fRWZZPTl2Utpy9VfXsBb2Eq9LgEbIZ5YzymhW
g2mVv2qsCkhbziemPBLfP14Y7aRlQHalKo0VJkhVvDxr+OnyHSNT9WfmEOVY8Qf/
BjMvTjTbVrtWYpniial8GbTCRlJQXEjTCoWvsBABZDjr/I+y1HFt2eO7BltsyUHc
V3sI25b01mnqCWf1UXXI01gdHfZ5T1XQvzPgjUxocS1FOf/fz8jfhcizO0ZFLmHN
Rtdl2sN4isLyUAsOclR/fq4XkJJEtoKMY8OO3NgnUYoKTwXtMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLi8qzx3giQ/ionh4R5sl/zfy/CTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0
Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvZmYzMzg3MDItMWM5Yy0z
N2E0LTk5YzUtYzJlZmJmMWM4MjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODg4NDI4NzgtMTA1MC00ZGY3LTgy
MmItZWE4ZWMyNWRiODNkLzg4ODQyODc4LTEwNTAtNGRmNy04MjJiLWVhOGVjMjVk
YjgzZC5jcmwwHwYDVR0jBBgwFoAUCvQvaSDxqtdtZzyGmgTIgB6tfZkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThl
YzI1ZGI4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxvh8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALGUObQokkLVDEJU2emUrcpKKSPifShkJax3IPPalL9SFiEsXLkfT2zU
jXxC32wFojZTmfgE1hPWzcX+p7xYb8X6GroSAwGUR+sodsyhuPJWGtGcv8NDTuKv
A+y/AzsQLM4aTVmBrmxLfwPA9GZ1iB5qI/pI/0pUbz3k+RI1oAysgqT82Z3u+O06
BEc3h+KZqwo8qVmYe4eyf+DlbH0yyyjIjd19DoGlbA7vDCJMssX7HZE8dBx1wu8m
Un1DlgyRrJCXglSV3+cDQjS57hLFThKmAB8iESdcnfN7+M/BFCKgCUOCFIiFEHrb
T3PF/0pHiMEQaHvKejTALKHEXCEoEP4=
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:16:24 2025 by rpki-client