Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d546f647-962b-3c0b-af80-2d78bb80fcac.roa
File:                     d546f647-962b-3c0b-af80-2d78bb80fcac.roa (raw, json)
Hash identifier:          eH9o2gLN9pxVWd9ICrDCLISln1fwfQiYNzvgHNqVgDU=
Subject key identifier:   54:53:3A:82:AA:C1:AD:71:47:39:0B:EB:5D:6F:6E:0D:39:C6:A8:04
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584ACD61A8532AF5D7645ECDD100
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d546f647-962b-3c0b-af80-2d78bb80fcac.roa
Signing time:             Sat 09 Aug 2025 19:18:15 +0000
ROA not before:           Sat 09 Aug 2025 19:18:15 +0000
ROA not after:            Fri 07 Nov 2025 20:18:15 +0000
asID:                     31898
IP address blocks:        155.248.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cd:61:a8:53:2a:f5:d7:64:5e:cd:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug  9 19:18:15 2025 GMT
            Not After : Nov  7 20:18:15 2025 GMT
        Subject: CN=521bdfbb-d49a-43de-94b3-331068f76e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2a:19:f3:c3:71:e0:20:00:fc:76:27:05:28:
                    d3:f4:63:bd:d8:b4:c9:af:1c:d8:fd:92:83:53:71:
                    90:79:32:2e:02:0e:99:5c:0e:7f:3c:9d:5f:93:b9:
                    2e:1d:df:0f:7f:00:5c:67:44:97:b0:bf:3f:5c:99:
                    a1:f5:89:b6:ff:36:85:88:3b:be:04:2a:7e:4d:a2:
                    ec:4d:2e:e5:8d:8c:d3:75:3a:86:d2:09:f8:b6:cd:
                    65:5a:dd:e4:e0:f6:d5:d8:13:70:e1:a9:c6:16:83:
                    47:a5:64:4d:40:ec:43:f3:21:a0:f1:6c:4c:da:3d:
                    97:27:df:23:e4:1d:3f:84:c6:32:a0:62:81:e5:cc:
                    7b:6c:59:c3:fc:cd:fe:df:ab:9c:50:22:32:e6:66:
                    ae:89:d3:3b:96:1b:5f:ff:ea:d8:15:37:85:28:b3:
                    fb:e6:0d:49:6a:66:ef:9c:c8:17:02:35:98:7e:f7:
                    00:3b:41:dc:43:e8:d7:d2:d3:47:be:1e:cf:63:64:
                    19:6e:1f:86:fe:51:4e:89:ce:51:0c:2e:c0:43:c9:
                    7b:84:8f:65:49:fb:42:76:de:bf:9e:7e:03:bf:06:
                    fe:f4:e6:62:ec:7a:56:8a:ae:6e:ab:d1:b7:b5:f6:
                    a0:37:de:62:ef:7b:cb:f0:54:bf:aa:20:79:e8:2c:
                    dc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:53:3A:82:AA:C1:AD:71:47:39:0B:EB:5D:6F:6E:0D:39:C6:A8:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d546f647-962b-3c0b-af80-2d78bb80fcac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.248.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:e3:ec:c3:db:b9:1e:62:00:2c:16:02:88:92:ca:30:2e:d6:
         7e:86:67:cd:eb:49:22:52:50:8b:48:f4:19:11:ab:dc:be:28:
         38:34:bc:bb:73:e7:5d:78:b4:1a:48:85:ae:34:23:7d:13:d5:
         14:c8:47:00:c4:f6:d9:2d:6a:87:af:e0:cf:c3:c6:52:d2:50:
         8c:3c:95:48:38:79:01:99:20:f1:7c:b4:54:52:66:8f:d6:76:
         bd:c0:45:31:23:dc:1e:cf:f6:c9:84:f2:8b:14:c6:92:f4:ee:
         f4:01:21:b8:3a:60:c1:55:c5:2d:aa:4e:88:c1:57:35:67:6b:
         3e:e5:58:ca:f8:eb:6b:c6:a3:f0:6a:50:80:66:28:1e:ea:18:
         76:4f:81:4b:02:26:7d:3e:de:7f:e0:54:ec:2a:b6:9e:0f:75:
         74:2a:16:ad:14:ec:c4:dc:ce:d4:9f:43:26:72:2d:d7:17:89:
         89:76:6e:47:14:66:22:70:fa:0f:f5:c2:54:70:35:84:70:b4:
         39:4d:17:eb:85:27:8c:89:31:46:d7:f0:a1:ed:75:d8:a6:02:
         2f:82:64:df:40:2d:1b:19:75:76:b3:25:11:e3:d3:5d:78:b4:
         c6:91:13:66:a2:21:48:cf:99:90:07:47:ee:30:de:e0:d8:a1:
         20:fa:1a:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErNYahTKvXXZF7N0QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI1MDgwOTE5MTgxNVoXDTI1MTEwNzIwMTgxNVowLzEtMCsGA1UEAxMk
NTIxYmRmYmItZDQ5YS00M2RlLTk0YjMtMzMxMDY4Zjc2ZTBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCoZ88Nx4CAA/HYnBSjT9GO92LTJrxzY/ZKD
U3GQeTIuAg6ZXA5/PJ1fk7kuHd8PfwBcZ0SXsL8/XJmh9Ym2/zaFiDu+BCp+TaLs
TS7ljYzTdTqG0gn4ts1lWt3k4PbV2BNw4anGFoNHpWRNQOxD8yGg8WxM2j2XJ98j
5B0/hMYyoGKB5cx7bFnD/M3+36ucUCIy5mauidM7lhtf/+rYFTeFKLP75g1Jambv
nMgXAjWYfvcAO0HcQ+jX0tNHvh7PY2QZbh+G/lFOic5RDC7AQ8l7hI9lSftCdt6/
nn4Dvwb+9OZi7HpWiq5uq9G3tfagN95i73vL8FS/qiB56CzcCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFRTOoKqwa1xRzkL611vbg05xqgEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDU0NmY2NDctOTYyYi0z
YzBiLWFmODAtMmQ3OGJiODBmY2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm/jwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAXj7MPbuR5iACwWAoiSyjAu1n6GZ83rSSJSUItI9BkRq9y+KDg0vLtz
5114tBpIha40I30T1RTIRwDE9tktaoev4M/DxlLSUIw8lUg4eQGZIPF8tFRSZo/W
dr3ARTEj3B7P9smE8osUxpL07vQBIbg6YMFVxS2qTojBVzVnaz7lWMr462vGo/Bq
UIBmKB7qGHZPgUsCJn0+3n/gVOwqtp4PdXQqFq0U7MTcztSfQyZyLdcXiYl2bkcU
ZiJw+g/1wlRwNYRwtDlNF+uFJ4yJMUbX8KHtddimAi+CZN9ALRsZdXazJRHj0114
tMaRE2aiIUjPmZAHR+4w3uDYoSD6GlE=
-----END CERTIFICATE-----
Generated at Wed Aug 20 03:29:14 2025 by rpki-client