Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f49a651f-30b7-3b82-bf3f-a14424824488.roa
File:                     f49a651f-30b7-3b82-bf3f-a14424824488.roa (raw, json)
Hash identifier:          Qx3hwon7KEcNQhYYdp6eVQRQzCzCJ0dcHR9QBBzS8+Y=
Subject key identifier:   F0:5C:F8:04:3B:B5:46:DD:91:50:EC:93:31:EA:41:69:DF:C7:9D:71
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584A331AFD3FE06558770CFE6960
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f49a651f-30b7-3b82-bf3f-a14424824488.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     54113
IP address blocks:        140.248.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:fd:3f:e0:65:58:77:0c:fe:69:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=221ecc80-dcd1-4337-ac94-1b9c8e280f41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:00:62:f5:70:64:f0:b6:a6:d3:94:96:8d:0d:
                    29:0f:5b:e3:a9:37:76:cf:8e:4f:17:0f:b8:57:a8:
                    03:c8:1c:fb:cf:48:d3:87:62:a0:45:92:a8:38:97:
                    1e:bd:ca:9d:cf:c7:bc:fe:f5:14:f7:eb:f5:cc:90:
                    11:f5:0c:6a:2d:38:08:9a:ee:3c:bf:dd:16:b6:97:
                    b4:18:ae:31:76:75:1c:a5:99:9b:ac:01:80:c3:85:
                    e6:a0:ea:ef:49:d9:76:cf:35:07:aa:27:fa:4c:f3:
                    34:bb:25:10:5f:9d:68:ee:5e:ce:77:d9:29:86:50:
                    d5:d2:4c:80:9c:98:27:9f:8f:e9:98:72:98:b6:17:
                    46:10:1d:30:e2:a1:66:3e:0d:22:59:f3:b7:2f:d5:
                    1b:34:00:5c:fa:53:1e:93:32:ef:d0:fc:5d:c2:80:
                    6b:ed:f1:00:ee:4c:12:09:0b:99:f5:86:28:fb:20:
                    6d:e6:31:26:03:53:26:7c:06:85:9b:61:80:37:f1:
                    39:b3:b6:a5:46:3d:5b:3c:80:a3:c1:59:cb:0b:dd:
                    bc:40:c8:74:34:9e:74:d6:f9:a7:39:30:f5:c2:56:
                    95:c2:ff:c2:c3:b4:bd:0f:03:19:82:67:b0:3c:c2:
                    79:2a:17:2f:52:84:3e:8a:98:34:8e:b2:68:e9:6b:
                    84:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5C:F8:04:3B:B5:46:DD:91:50:EC:93:31:EA:41:69:DF:C7:9D:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f49a651f-30b7-3b82-bf3f-a14424824488.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:26:58:23:3f:ea:3c:ac:85:0c:df:7f:f5:a0:06:09:d6:43:
         ad:e7:25:5b:c7:03:08:1a:fb:a1:06:7f:d1:36:87:b7:c9:bb:
         e8:3a:8b:25:41:33:04:ab:70:ee:8f:38:60:98:58:d0:92:4e:
         34:81:79:2a:92:11:ca:35:42:4a:f5:c6:c4:20:da:a2:5c:6e:
         9b:45:f9:c7:40:52:5f:5b:25:19:a2:11:ca:11:ce:34:ea:f1:
         f1:3a:9e:91:4d:d9:39:19:23:2c:81:cb:de:ee:30:67:c6:f8:
         f3:f0:4e:ad:e1:f1:fb:52:de:3e:93:a7:c8:bc:54:bb:cd:77:
         e3:14:a3:aa:07:7d:e1:7d:a2:f3:81:94:7f:be:02:7c:98:1b:
         f0:d8:3c:8a:98:61:95:05:c7:74:5d:95:ff:8d:ef:84:1f:9c:
         13:0e:c9:a7:7d:40:e8:15:85:1a:3f:4f:50:7c:fd:5d:09:7a:
         dc:52:f8:c3:25:48:07:24:cd:78:86:be:d3:3d:bc:1e:97:c5:
         f4:fa:4e:f8:1c:29:8e:c9:77:fe:66:ec:c9:b5:4d:1c:b2:72:
         86:0b:29:bd:83:8f:3f:75:9a:c0:54:2f:ef:11:35:4f:93:bb:
         40:40:11:6e:ad:50:eb:5b:91:f8:c1:22:32:1f:6b:6b:97:dd:
         47:6f:f2:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGv0/4GVYdwz+aWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk
MjIxZWNjODAtZGNkMS00MzM3LWFjOTQtMWI5YzhlMjgwZjQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwBi9XBk8Lam05SWjQ0pD1vjqTd2z45PFw+4
V6gDyBz7z0jTh2KgRZKoOJcevcqdz8e8/vUU9+v1zJAR9QxqLTgImu48v90Wtpe0
GK4xdnUcpZmbrAGAw4XmoOrvSdl2zzUHqif6TPM0uyUQX51o7l7Od9kphlDV0kyA
nJgnn4/pmHKYthdGEB0w4qFmPg0iWfO3L9UbNABc+lMekzLv0PxdwoBr7fEA7kwS
CQuZ9YYo+yBt5jEmA1MmfAaFm2GAN/E5s7alRj1bPICjwVnLC928QMh0NJ501vmn
OTD1wlaVwv/Cw7S9DwMZgmewPMJ5KhcvUoQ+ipg0jrJo6WuEJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPBc+AQ7tUbdkVDskzHqQWnfx51xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvZjQ5YTY1MWYtMzBiNy0z
YjgyLWJmM2YtYTE0NDI0ODI0NDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPhhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAYmWCM/6jyshQzff/WgBgnWQ63nJVvHAwga+6EGf9E2h7fJu+g6iyVB
MwSrcO6POGCYWNCSTjSBeSqSEco1Qkr1xsQg2qJcbptF+cdAUl9bJRmiEcoRzjTq
8fE6npFN2TkZIyyBy97uMGfG+PPwTq3h8ftS3j6Tp8i8VLvNd+MUo6oHfeF9ovOB
lH++AnyYG/DYPIqYYZUFx3Rdlf+N74QfnBMOyad9QOgVhRo/T1B8/V0JetxS+MMl
SAckzXiGvtM9vB6XxfT6TvgcKY7Jd/5m7Mm1TRyycoYLKb2Djz91msBUL+8RNU+T
u0BAEW6tUOtbkfjBIjIfa2uX3Udv8og=
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:20:14 2025 by rpki-client