Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86f5656a-cafc-38ae-b0d6-dee9a612336a.roa
File:                     86f5656a-cafc-38ae-b0d6-dee9a612336a.roa (raw, json)
Hash identifier:          /RgsxRQ4Z3sDVRZm9cFl+/x7gli0ScSCNNb9fwd9P8k=
Subject key identifier:   6F:77:97:81:53:0D:55:DB:D3:32:81:53:3D:5B:A7:33:DB:7B:76:7A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C078DC642CB93BA7EC18840
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86f5656a-cafc-38ae-b0d6-dee9a612336a.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33287
IP address blocks:        71.225.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:8d:c6:42:cb:93:ba:7e:c1:88:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=f84f7b96-e59f-436f-97ab-ef4826cb4824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a0:3f:ff:9c:ad:94:5f:33:de:4f:e3:42:5e:
                    4d:ac:bd:92:8c:12:d0:89:be:6b:04:04:3d:01:c0:
                    50:2f:2d:d9:3b:ee:fb:76:9d:fc:35:33:63:6d:6f:
                    43:f3:64:e9:0e:12:bc:86:73:51:54:4b:0a:d3:92:
                    79:20:a1:eb:99:68:15:23:47:55:a7:a5:8b:ed:8e:
                    6f:d6:90:98:76:6f:9d:2e:b8:9d:c1:29:0c:27:a8:
                    f8:b1:99:3a:ce:24:11:48:69:e9:31:07:19:e6:c6:
                    36:3e:66:ac:e2:bd:a7:80:37:33:f7:d7:e6:2a:15:
                    c1:37:b8:c5:60:67:77:ed:9d:b6:b3:24:a0:83:1e:
                    11:a0:2a:dd:8b:94:86:97:92:ff:5d:46:f9:99:85:
                    2c:03:6f:63:4c:f3:ff:6a:63:2e:22:16:5b:91:c6:
                    2f:ce:a0:e1:31:4c:c3:1c:5a:89:bb:08:de:d2:a8:
                    12:59:fa:a4:f8:f6:b5:6f:1d:5a:5a:0f:8c:0d:a0:
                    c6:3e:de:6a:75:27:c0:b6:b3:f8:cb:b2:f3:55:d7:
                    2d:1e:2c:2d:c3:21:2f:1e:94:da:b7:92:81:50:f1:
                    10:ef:ed:f4:c0:aa:47:59:89:f8:4d:a7:66:a5:63:
                    56:a8:2d:e9:e7:d7:bb:5f:2f:08:1a:b4:f7:58:43:
                    78:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:77:97:81:53:0D:55:DB:D3:32:81:53:3D:5B:A7:33:DB:7B:76:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86f5656a-cafc-38ae-b0d6-dee9a612336a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.225.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:b7:f6:5a:f4:73:ec:52:52:71:60:69:fc:e4:55:51:b2:1a:
         8d:52:5f:50:50:69:bd:7b:07:e2:f6:77:90:55:d4:60:fc:94:
         82:9d:a4:da:5f:b5:c9:18:3e:3d:31:8c:da:b1:97:0f:01:ee:
         76:9c:4d:c9:e8:7d:cf:63:73:cb:cb:a1:c5:f8:5f:c5:35:66:
         88:e7:40:ba:e9:24:60:05:c2:3b:52:e2:93:98:18:b9:b6:b0:
         e6:88:15:6a:f9:eb:f0:d0:4a:cd:53:12:73:49:cc:da:f8:0b:
         b7:4e:e8:ce:b6:31:ed:7b:72:6e:48:96:0a:89:f9:fd:d3:20:
         ca:20:70:35:6e:e8:5c:75:26:bb:f8:45:0b:4e:d6:75:a0:f0:
         f8:4a:d9:a3:ea:7a:3d:bf:36:de:a9:e1:b4:5e:2d:01:72:0d:
         2f:64:d8:78:50:1e:2c:ef:a6:25:b7:66:b7:1f:89:ff:4b:2e:
         c1:be:a7:66:02:26:8c:9d:e4:f5:5c:97:c6:08:82:9d:15:70:
         da:bb:db:8f:52:fe:15:60:1b:80:da:98:ff:36:51:5e:5e:18:
         8c:1a:e5:fb:35:11:30:d7:64:f3:2f:03:fc:cf:30:a3:71:56:
         29:af:48:fa:3d:c8:92:60:15:92:32:bc:e6:9e:fb:b4:e2:96:
         f5:97:e9:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMB43GQsuTun7BiEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
Zjg0ZjdiOTYtZTU5Zi00MzZmLTk3YWItZWY0ODI2Y2I0ODI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqA//5ytlF8z3k/jQl5NrL2SjBLQib5rBAQ9
AcBQLy3ZO+77dp38NTNjbW9D82TpDhK8hnNRVEsK05J5IKHrmWgVI0dVp6WL7Y5v
1pCYdm+dLridwSkMJ6j4sZk6ziQRSGnpMQcZ5sY2Pmas4r2ngDcz99fmKhXBN7jF
YGd37Z22sySggx4RoCrdi5SGl5L/XUb5mYUsA29jTPP/amMuIhZbkcYvzqDhMUzD
HFqJuwje0qgSWfqk+Pa1bx1aWg+MDaDGPt5qdSfAtrP4y7LzVdctHiwtwyEvHpTa
t5KBUPEQ7+30wKpHWYn4TadmpWNWqC3p59e7Xy8IGrT3WEN4awIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG93l4FTDVXb0zKBUz1bpzPbe3Z6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODZmNTY1NmEtY2FmYy0z
OGFlLWIwZDYtZGVlOWE2MTIzMzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+HwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAK39lr0c+xSUnFgafzkVVGyGo1SX1BQab17B+L2d5BV1GD8lIKdpNpf
tckYPj0xjNqxlw8B7nacTcnofc9jc8vLocX4X8U1ZojnQLrpJGAFwjtS4pOYGLm2
sOaIFWr56/DQSs1TEnNJzNr4C7dO6M62Me17cm5IlgqJ+f3TIMogcDVu6Fx1Jrv4
RQtO1nWg8PhK2aPqej2/Nt6p4bReLQFyDS9k2HhQHizvpiW3Zrcfif9LLsG+p2YC
Joyd5PVcl8YIgp0VcNq7249S/hVgG4DamP82UV5eGIwa5fs1ETDXZPMvA/zPMKNx
VimvSPo9yJJgFZIyvOae+7TilvWX6b8=
-----END CERTIFICATE-----
Generated at Tue Jun 3 05:49:31 2025 by rpki-client