Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0631ab6f-ebed-3f82-b0a7-2d804f867d28.roa
File:                     0631ab6f-ebed-3f82-b0a7-2d804f867d28.roa (raw, json)
Hash identifier:          XDaccGnygHbPWXkwGHLa3yG4xnFCN5vwp/ZA3aYb2eY=
Subject key identifier:   0F:1E:01:84:7E:6A:B1:6F:7B:BB:E5:EC:6C:F3:74:97:F5:08:13:E0
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F432858491AA6D0633B70E3818DBF7B00
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0631ab6f-ebed-3f82-b0a7-2d804f867d28.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     394089
IP address blocks:        66.159.192.0/19 maxlen: 24
                          130.41.252.0/24 maxlen: 24
                          134.238.0.0/16 maxlen: 24
                          165.1.128.0/19 maxlen: 24
                          165.85.96.0/19 maxlen: 24
                          208.127.128.0/18 maxlen: 24
                          208.127.192.0/21 maxlen: 24
                          208.127.208.0/20 maxlen: 24
                          208.127.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:d0:63:3b:70:e3:81:8d:bf:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=db952227-00e3-45e2-8449-4d4d3400937b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:64:d2:db:a9:37:e2:5d:9f:fa:b8:db:0a:c9:
                    83:e5:12:00:b8:d8:16:af:5c:43:07:5f:e0:2a:4e:
                    2e:a6:ef:55:36:fc:49:14:3f:9a:54:a2:31:ba:81:
                    28:08:d2:73:5b:22:6b:5f:9e:3c:b2:9d:2e:85:ca:
                    8b:81:e8:6b:08:94:83:45:12:e2:55:ac:c9:f0:f9:
                    42:b8:48:96:b1:86:52:c9:8e:b4:7c:96:63:32:16:
                    3f:5c:3d:47:4e:73:1e:41:5d:3e:76:96:7a:eb:86:
                    7f:9b:af:7b:20:eb:10:65:da:25:f2:58:fb:29:f8:
                    7d:6c:9b:c6:31:a3:a9:cd:2d:8a:6a:29:eb:d6:6e:
                    d3:11:24:8b:38:20:0d:bf:22:26:bc:69:4a:91:13:
                    ae:4a:0b:5f:ab:76:9f:9b:1f:e0:a6:bf:0e:62:e9:
                    fe:f7:bc:24:65:f8:38:f1:5e:d3:30:6c:91:d8:0d:
                    eb:4b:e3:42:86:d6:b0:3a:2e:ff:4c:71:b3:3e:51:
                    b8:d0:68:4e:17:87:2b:9d:8e:47:3a:e8:17:28:02:
                    1b:66:5b:79:ed:af:d9:a7:5d:58:e6:46:ef:60:94:
                    42:b1:46:1b:16:ab:f2:23:72:be:db:3d:86:fa:94:
                    51:a0:67:cf:f4:f6:10:e2:f2:80:7f:e4:86:79:11:
                    d8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:1E:01:84:7E:6A:B1:6F:7B:BB:E5:EC:6C:F3:74:97:F5:08:13:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0631ab6f-ebed-3f82-b0a7-2d804f867d28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.159.192.0/19
                  130.41.252.0/24
                  134.238.0.0/16
                  165.1.128.0/19
                  165.85.96.0/19
                  208.127.128.0-208.127.199.255
                  208.127.208.0/20
                  208.127.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:00:49:ad:30:ed:80:7b:22:e8:03:92:21:1f:fe:7d:0f:c7:
         6d:1f:ad:e4:c6:57:18:8a:90:24:e6:6d:e7:44:76:85:c1:ca:
         8b:28:23:20:6a:ef:29:43:65:63:39:e5:40:09:ab:f9:fc:6a:
         b0:04:bf:ae:5f:aa:40:9a:71:4f:ed:1a:28:01:bd:d3:cd:c0:
         ac:60:ce:b5:90:18:59:f9:2e:f1:f0:dd:d9:4a:7d:cd:96:8b:
         cf:56:b1:b1:52:77:00:55:3d:e3:39:1c:60:4d:b3:88:5b:a3:
         41:a1:b8:6b:4f:90:14:60:2d:7c:8f:05:2a:56:17:a7:fa:5d:
         ce:b9:e2:59:88:bd:fa:bb:2a:25:b1:c6:1f:bf:76:f3:c1:2b:
         1a:be:cb:5c:13:63:f5:42:d0:7e:86:60:6e:91:06:e2:9d:ef:
         1f:2e:47:62:47:a1:e6:a4:97:25:dd:a0:34:74:54:92:69:42:
         cc:c4:26:ec:23:0f:37:a6:54:59:9a:2c:a3:66:1f:3b:fa:ba:
         69:ba:17:bd:98:2d:fb:6b:a9:c1:de:4e:73:50:2d:74:ff:5a:
         35:31:17:4e:03:04:56:ca:05:42:df:38:a7:0d:e2:d3:59:40:
         45:65:28:7d:e4:02:bf:73:19:4b:4a:ab:a3:21:28:ae:6b:c6:
         fe:37:78:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:29:05 2025 by rpki-client