Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd86afa8-57f3-379b-a855-4d084ac157bd.roa
File:                     fd86afa8-57f3-379b-a855-4d084ac157bd.roa (raw, json)
Hash identifier:          dODuRpNToTcHktVuEo9+zxI26OdqqpxxCg8XndCqvco=
Subject key identifier:   51:5F:BA:35:03:86:5D:4A:78:B9:A1:9C:73:63:81:63:64:CD:C9:C8
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584A2ABAD33083967F5C04AC2A40
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd86afa8-57f3-379b-a855-4d084ac157bd.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     27321
IP address blocks:        192.158.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:d3:30:83:96:7f:5c:04:ac:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=5844ca42-4bba-47c5-b8bd-37556cfc40f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5b:5a:66:5a:d4:3d:84:86:57:b9:40:29:c5:
                    6a:fa:c0:b3:7f:d6:14:08:02:37:29:07:09:3b:8d:
                    01:69:c1:af:e4:c9:9a:7e:ea:b9:2e:8d:91:b0:6c:
                    64:fc:7e:c5:65:30:be:e6:a9:8c:57:a5:17:c1:f8:
                    7d:a0:81:a2:73:15:1b:7c:43:c3:86:ec:87:09:5b:
                    e0:8c:ac:af:17:8e:57:ef:44:7b:23:d5:19:bb:c1:
                    7a:33:3e:f5:e4:a7:da:22:fb:20:79:21:85:03:24:
                    e1:58:da:cf:37:4d:23:42:e8:d7:f2:d2:11:32:d9:
                    a1:7b:4a:1f:bc:52:5a:92:85:6f:49:e0:36:0f:04:
                    8c:31:ea:cd:5c:b6:76:f3:90:83:04:1a:96:10:e4:
                    52:d1:97:16:79:63:2e:4d:4b:7d:ea:96:73:be:e5:
                    b6:f0:c4:3f:8d:d9:a1:7a:62:eb:65:47:8e:cf:9b:
                    54:6e:75:39:de:67:1a:4c:e7:48:b2:6e:b9:d5:3b:
                    dc:f2:82:4d:d9:93:d8:9c:c0:45:da:46:4b:e2:38:
                    e4:1e:26:29:56:ea:59:e0:21:cd:73:44:07:d7:fc:
                    03:e8:53:a4:0e:92:82:4f:a0:b1:1c:9f:11:82:69:
                    31:23:5d:b5:52:13:ae:9e:9b:64:5a:71:fa:02:56:
                    ae:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5F:BA:35:03:86:5D:4A:78:B9:A1:9C:73:63:81:63:64:CD:C9:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd86afa8-57f3-379b-a855-4d084ac157bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.158.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:95:9d:9a:5f:e1:ce:29:59:f1:cd:12:61:1c:0c:8b:67:a6:
         6f:d5:fc:1e:68:8f:7c:dd:c4:d4:70:42:bd:76:df:2a:c2:f5:
         1a:db:42:e8:96:8d:f1:5c:ae:1c:a4:e7:7a:55:75:23:2b:b1:
         73:75:6a:36:ef:2a:f6:fc:e9:02:75:2c:82:00:f8:1d:0e:e5:
         0b:4d:3f:03:b5:13:e3:b6:d7:c9:eb:30:2a:f8:88:e2:65:5f:
         3b:20:93:05:6a:ac:3c:6b:01:75:41:72:42:1c:cb:a3:92:1e:
         2b:71:e4:6d:21:a1:e4:b9:50:8f:db:f3:11:b6:70:9f:ff:12:
         5a:c3:aa:d7:5e:d5:1a:71:07:07:cf:90:00:99:fb:4e:65:fe:
         4a:0b:0a:11:83:5e:86:7b:9f:ac:01:18:9d:10:20:28:03:a3:
         20:6d:5f:1c:56:49:4b:79:ff:05:31:5a:81:49:64:62:72:96:
         95:ee:71:ac:40:d9:e6:72:9e:e8:61:03:0f:e9:3b:6d:6f:7b:
         a2:42:78:4f:e1:50:a9:ab:e6:64:fa:29:30:a1:7a:e6:19:07:
         71:05:24:81:0d:7a:1d:ac:8e:67:6a:18:1f:ef:a0:79:f4:bc:
         17:ac:dc:49:81:ef:c8:b6:0e:85:4f:ab:68:88:a5:59:fb:95:
         d7:71:85:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoqutMwg5Z/XASsKkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk
MTc3MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk
NTg0NGNhNDItNGJiYS00N2M1LWI4YmQtMzc1NTZjZmM0MGY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFtaZlrUPYSGV7lAKcVq+sCzf9YUCAI3KQcJ
O40BacGv5Mmafuq5Lo2RsGxk/H7FZTC+5qmMV6UXwfh9oIGicxUbfEPDhuyHCVvg
jKyvF45X70R7I9UZu8F6Mz715KfaIvsgeSGFAyThWNrPN00jQujX8tIRMtmhe0of
vFJakoVvSeA2DwSMMerNXLZ285CDBBqWEORS0ZcWeWMuTUt96pZzvuW28MQ/jdmh
emLrZUeOz5tUbnU53mcaTOdIsm651Tvc8oJN2ZPYnMBF2kZL4jjkHiYpVupZ4CHN
c0QH1/wD6FOkDpKCT6CxHJ8RgmkxI121UhOunptkWnH6AlauKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFFfujUDhl1KeLmhnHNjgWNkzcnIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1
NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvZmQ4NmFmYTgtNTdmMy0z
NzliLWE4NTUtNGQwODRhYzE1N2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4
ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw
ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5
MDQ4MGQxNzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ74MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEaVnZpf4c4pWfHNEmEcDItnpm/V/B5oj3zdxNRwQr123yrC9RrbQuiW
jfFcrhyk53pVdSMrsXN1ajbvKvb86QJ1LIIA+B0O5QtNPwO1E+O218nrMCr4iOJl
XzsgkwVqrDxrAXVBckIcy6OSHitx5G0hoeS5UI/b8xG2cJ//ElrDqtde1RpxBwfP
kACZ+05l/koLChGDXoZ7n6wBGJ0QICgDoyBtXxxWSUt5/wUxWoFJZGJylpXucaxA
2eZynuhhAw/pO21ve6JCeE/hUKmr5mT6KTCheuYZB3EFJIENeh2sjmdqGB/voHn0
vBes3EmB78i2DoVPq2iIpVn7lddxhe0=
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:39:08 2025 by rpki-client