Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/24ff25e6-fb53-31cd-9980-92a2e33cb078.roa
File:                     24ff25e6-fb53-31cd-9980-92a2e33cb078.roa (raw, json)
Hash identifier:          L5qegQTaHd96yUPbyQwvXqoZxRhjdJ4WqG9NGXYujVY=
Subject key identifier:   3D:DB:F5:C5:4E:D8:71:62:11:D2:3B:54:1C:42:36:75:89:C9:44:0E
Certificate issuer:       /CN=989afb89-021f-486a-9386-ea5ad2a85eb3
Certificate serial:       010D0C9F4328584AB3D5FBD574D3C46210FAF6B0
Authority key identifier: C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/24ff25e6-fb53-31cd-9980-92a2e33cb078.roa
Signing time:             Thu 31 Jul 2025 15:41:36 +0000
ROA not before:           Thu 31 Jul 2025 15:41:36 +0000
ROA not after:            Wed 29 Oct 2025 15:41:36 +0000
asID:                     3359
IP address blocks:        198.73.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b3:d5:fb:d5:74:d3:c4:62:10:fa:f6:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=989afb89-021f-486a-9386-ea5ad2a85eb3
        Validity
            Not Before: Jul 31 15:41:36 2025 GMT
            Not After : Oct 29 15:41:36 2025 GMT
        Subject: CN=e3ab3b96-5407-4520-aad4-7ccba387c5d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:29:03:d6:c0:47:30:a1:ad:4a:46:cf:27:f8:
                    26:33:fc:7d:16:31:ea:66:20:e9:6c:d2:f6:01:4a:
                    ea:fa:3f:10:22:3a:e8:b9:04:0e:55:0a:04:94:4e:
                    9e:d6:23:59:ad:50:0f:5f:28:ee:86:a6:6a:41:06:
                    99:69:4c:28:13:86:6a:eb:91:bb:92:84:05:4b:28:
                    eb:d6:88:b6:aa:db:e7:22:ac:7b:3a:75:c2:3c:28:
                    3b:cd:4a:d0:57:97:f0:c5:b3:1a:c5:cc:09:a7:aa:
                    a8:e1:ab:4d:8c:99:66:81:4d:ad:be:8a:89:8c:23:
                    6c:46:cd:69:ee:fa:1e:8d:34:fd:6d:7d:58:6b:dc:
                    26:d8:b1:a2:64:dc:ed:d6:68:c3:6e:ec:23:e4:94:
                    99:76:23:d0:fd:f5:93:2f:0c:28:66:ff:fe:86:46:
                    24:ce:73:ae:f7:9c:98:30:05:da:03:b3:db:ad:18:
                    dc:79:4a:08:a0:fe:88:7a:19:7b:4f:0f:2e:b8:77:
                    f6:5d:f6:40:00:55:c8:21:05:b4:00:04:43:b0:e0:
                    d1:08:99:ba:39:38:ec:16:82:22:10:2e:ba:93:72:
                    f2:30:6f:c4:7e:2b:b9:38:c2:b1:4c:bf:e2:f1:49:
                    42:c8:1d:cf:7b:58:8e:92:1d:1f:3b:ac:5a:86:91:
                    b3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:DB:F5:C5:4E:D8:71:62:11:D2:3B:54:1C:42:36:75:89:C9:44:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/24ff25e6-fb53-31cd-9980-92a2e33cb078.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl

            X509v3 Authority Key Identifier:
                keyid:C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.73.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:a1:94:0e:cb:82:59:0d:2a:d0:d0:ec:6b:1b:47:27:64:bf:
         15:e0:cd:f3:ce:1e:f1:67:be:ac:08:ba:89:0f:a9:f8:92:30:
         da:54:94:b9:26:b4:82:4d:9d:ba:4f:ce:36:43:b0:0d:b5:30:
         2f:e7:54:7f:a3:ba:4e:7a:73:20:98:87:40:55:f2:5d:bf:e6:
         03:97:97:3b:ba:40:f7:65:1d:a2:a1:24:31:d0:d9:69:07:5b:
         0f:a7:0e:f5:76:3f:b1:b5:b8:fa:f5:17:60:37:a1:77:a8:79:
         38:17:1b:87:c7:b0:a4:01:e8:ee:8e:01:1e:5f:f6:eb:86:bb:
         8b:36:28:33:44:b4:e6:da:63:0e:0a:80:de:60:50:36:12:42:
         10:fa:3f:0a:36:c8:3f:ce:bb:93:a5:65:e4:03:4d:19:7c:e3:
         97:59:a8:80:7f:e5:1e:ce:23:2a:e4:2c:57:00:b0:25:2e:19:
         45:a4:ac:29:1c:c4:ee:00:0f:8c:92:17:28:e8:f5:43:b9:2a:
         dd:f3:43:e2:3b:9e:f0:b7:0e:a2:11:59:c3:51:e4:dc:e9:b9:
         b4:6f:26:7c:6a:f8:ab:df:0c:53:c5:10:e7:8f:ad:62:72:96:
         1b:2f:a7:05:a8:e9:3a:e1:32:26:30:cc:e8:92:77:20:bd:86:
         e1:56:bb:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqz1fvVdNPEYhD69rAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg5YWZiODktMDIxZi00ODZhLTkzODYtZWE1YWQyYTg1
ZWIzMB4XDTI1MDczMTE1NDEzNloXDTI1MTAyOTE1NDEzNlowLzEtMCsGA1UEAxMk
ZTNhYjNiOTYtNTQwNy00NTIwLWFhZDQtN2NjYmEzODdjNWQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmykD1sBHMKGtSkbPJ/gmM/x9FjHqZiDpbNL2
AUrq+j8QIjrouQQOVQoElE6e1iNZrVAPXyjuhqZqQQaZaUwoE4Zq65G7koQFSyjr
1oi2qtvnIqx7OnXCPCg7zUrQV5fwxbMaxcwJp6qo4atNjJlmgU2tvoqJjCNsRs1p
7voejTT9bX1Ya9wm2LGiZNzt1mjDbuwj5JSZdiPQ/fWTLwwoZv/+hkYkznOu95yY
MAXaA7PbrRjceUoIoP6Iehl7Tw8uuHf2XfZAAFXIIQW0AARDsODRCJm6OTjsFoIi
EC66k3LyMG/Efiu5OMKxTL/i8UlCyB3Pe1iOkh0fO6xahpGzowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD3b9cVO2HFiEdI7VBxCNnWJyUQOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85ODlh
ZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVhZDJhODVlYjMvMjRmZjI1ZTYtZmI1My0z
MWNkLTk5ODAtOTJhMmUzM2NiMDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTg5YWZiODktMDIxZi00ODZhLTkz
ODYtZWE1YWQyYTg1ZWIzLzk4OWFmYjg5LTAyMWYtNDg2YS05Mzg2LWVhNWFkMmE4
NWViMy5jcmwwHwYDVR0jBBgwFoAUyLOtrnU5gy0QTgFrZ/8fi91WZlIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC85ODlhZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVh
ZDJhODVlYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxkmyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABahlA7LglkNKtDQ7GsbRydkvxXgzfPOHvFnvqwIuokPqfiSMNpUlLkm
tIJNnbpPzjZDsA21MC/nVH+juk56cyCYh0BV8l2/5gOXlzu6QPdlHaKhJDHQ2WkH
Ww+nDvV2P7G1uPr1F2A3oXeoeTgXG4fHsKQB6O6OAR5f9uuGu4s2KDNEtObaYw4K
gN5gUDYSQhD6Pwo2yD/Ou5OlZeQDTRl845dZqIB/5R7OIyrkLFcAsCUuGUWkrCkc
xO4AD4ySFyjo9UO5Kt3zQ+I7nvC3DqIRWcNR5NzpubRvJnxq+KvfDFPFEOePrWJy
lhsvpwWo6TrhMiYwzOiSdyC9huFWu50=
-----END CERTIFICATE-----
Generated at Thu Aug 14 06:43:00 2025 by rpki-client