Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fe040942-c808-38d5-8883-6e17e25019d8.roa
File:                     fe040942-c808-38d5-8883-6e17e25019d8.roa (raw, json)
Hash identifier:          +1THbd2Drvga0BNeSpshDylrnJRC28HIQ+cFJYfxohs=
Subject key identifier:   A7:47:27:CE:1F:33:A6:3E:2F:53:29:A8:B5:2A:D5:27:83:2F:42:04
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584A0C05616018EE9AD6CD00CD60
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fe040942-c808-38d5-8883-6e17e25019d8.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     19905
IP address blocks:        162.254.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:61:60:18:ee:9a:d6:cd:00:cd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=198b5466-8e42-4811-a7d6-6bd987f26231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:70:d8:5f:04:a6:40:f0:24:7a:44:3d:13:0e:
                    91:5e:18:f2:3a:23:40:1e:d6:ad:e8:e2:9b:1d:61:
                    62:32:c1:24:59:bf:9f:53:8d:c6:35:6f:7f:80:ec:
                    89:12:2a:5b:ef:58:96:90:5e:31:70:64:84:b6:51:
                    52:31:08:ff:c6:1e:5b:9f:d5:bb:db:0f:4d:7b:3d:
                    99:85:88:a3:f2:93:1b:ce:69:4d:ec:8b:cd:31:50:
                    9a:61:e9:d7:31:25:9a:b6:ff:1d:33:15:93:1b:82:
                    d9:00:ae:2f:de:de:0f:b1:94:3f:a6:1e:29:df:51:
                    1d:f8:56:8e:c7:70:fa:50:6b:c5:c6:77:7c:3f:f2:
                    9c:97:e7:b6:30:f5:b0:80:6b:07:79:78:77:f9:c3:
                    a9:7e:f5:c4:a7:56:66:0e:0b:a4:fe:11:d1:c5:26:
                    18:4d:a9:be:da:c6:1a:89:ef:e2:14:7c:4c:e7:93:
                    63:19:30:ba:38:d0:e3:c0:a2:9a:66:11:1d:29:b6:
                    a8:f6:6f:9d:a6:8f:66:2b:07:9b:62:da:f6:6f:ba:
                    28:83:28:3b:fb:05:c4:b7:fe:77:d1:00:23:8a:a1:
                    86:4d:e6:f3:6f:7a:38:a0:3f:e4:38:69:ce:c3:04:
                    f1:08:eb:ef:8c:32:d5:e7:4c:96:ec:b1:6c:98:c0:
                    f9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:47:27:CE:1F:33:A6:3E:2F:53:29:A8:B5:2A:D5:27:83:2F:42:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fe040942-c808-38d5-8883-6e17e25019d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.254.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:80:b6:c1:c8:75:1a:09:d7:a9:9a:b3:66:ba:cb:02:1a:c5:
         ca:28:12:47:41:19:be:38:11:35:0d:c8:40:0e:d0:72:2f:20:
         63:53:e5:cd:92:7d:74:7f:a4:6b:bf:5d:07:19:fe:2f:86:9a:
         0a:8a:f6:b5:0f:96:eb:8b:45:cb:aa:01:0b:5a:e2:2d:95:95:
         fb:10:86:39:36:7b:a0:d9:40:f4:b4:c5:7e:67:01:c3:fa:3d:
         fb:01:83:ed:fd:8d:75:74:9f:68:5a:83:e4:5c:8e:dc:33:d1:
         02:98:7a:d9:3b:e2:8a:a5:c3:fe:e1:c5:44:6b:ef:df:dd:95:
         86:65:47:91:c1:8c:bf:9d:8e:92:28:6e:1f:11:26:36:de:51:
         03:ff:a0:19:56:8f:71:86:e5:12:fe:ca:2e:87:c8:7a:86:c2:
         9e:a5:c7:de:84:47:4e:6a:5d:70:a6:96:08:d4:c0:e5:a2:9f:
         8c:fd:d0:43:07:58:c3:a8:6e:3b:df:42:2d:de:0c:0d:81:fd:
         bc:86:65:4d:c3:36:b7:44:08:f0:01:70:88:8b:6f:1f:5b:e2:
         8d:90:79:9a:46:33:25:2a:c4:1a:b6:40:0d:23:56:94:c6:0b:
         a6:ae:d7:7b:54:e4:0f:07:7e:14:77:af:85:bf:b8:c3:01:5a:
         80:c6:14:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBWFgGO6a1s0AzWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1
YjU4MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
MTk4YjU0NjYtOGU0Mi00ODExLWE3ZDYtNmJkOTg3ZjI2MjMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHDYXwSmQPAkekQ9Ew6RXhjyOiNAHtat6OKb
HWFiMsEkWb+fU43GNW9/gOyJEipb71iWkF4xcGSEtlFSMQj/xh5bn9W72w9Nez2Z
hYij8pMbzmlN7IvNMVCaYenXMSWatv8dMxWTG4LZAK4v3t4PsZQ/ph4p31Ed+FaO
x3D6UGvFxnd8P/Kcl+e2MPWwgGsHeXh3+cOpfvXEp1ZmDguk/hHRxSYYTam+2sYa
ie/iFHxM55NjGTC6ONDjwKKaZhEdKbao9m+dpo9mKwebYtr2b7oogyg7+wXEt/53
0QAjiqGGTebzb3o4oD/kOGnOwwTxCOvvjDLV50yW7LFsmMD5mQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKdHJ84fM6Y+L1MpqLUq1SeDL0IEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz
ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvZmUwNDA5NDItYzgwOC0z
OGQ1LTg4ODMtNmUxN2UyNTAxOWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm
ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj
NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5
ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDov74MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKCAtsHIdRoJ16mas2a6ywIaxcooEkdBGb44ETUNyEAO0HIvIGNT5c2S
fXR/pGu/XQcZ/i+GmgqK9rUPluuLRcuqAQta4i2VlfsQhjk2e6DZQPS0xX5nAcP6
PfsBg+39jXV0n2hag+Rcjtwz0QKYetk74oqlw/7hxURr79/dlYZlR5HBjL+djpIo
bh8RJjbeUQP/oBlWj3GG5RL+yi6HyHqGwp6lx96ER05qXXCmlgjUwOWin4z90EMH
WMOobjvfQi3eDA2B/byGZU3DNrdECPABcIiLbx9b4o2QeZpGMyUqxBq2QA0jVpTG
C6au13tU5A8HfhR3r4W/uMMBWoDGFLM=
-----END CERTIFICATE-----
Generated at Sun Jun 15 13:15:51 2025 by rpki-client