Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/4a9c37ad-9e8a-369e-bf7f-9478353fca0b.roa
File:                     4a9c37ad-9e8a-369e-bf7f-9478353fca0b.roa (raw, json)
Hash identifier:          1kT1diV3yi6sQqG/C/q3vvuRXE7z5KUWrW7daN2vk7o=
Subject key identifier:   F2:60:BB:6C:C3:1B:BB:25:22:1F:E7:F5:C8:17:D0:B2:D6:33:F5:16
Certificate issuer:       /CN=7e4eda42-1b89-4124-8a06-63381278375d
Certificate serial:       010D0C9F4328584A612B140E12BC493E22E00E80
Authority key identifier: 8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/4a9c37ad-9e8a-369e-bf7f-9478353fca0b.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     21699
IP address blocks:        23.130.96.0/23 maxlen: 24
                          45.41.212.0/22 maxlen: 24
                          45.45.240.0/22 maxlen: 24
                          162.253.212.0/22 maxlen: 24
                          204.10.89.0/24 maxlen: 24
                          209.160.96.0/22 maxlen: 24
                          2602:fe6b::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:14:0e:12:bc:49:3e:22:e0:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e4eda42-1b89-4124-8a06-63381278375d
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=ac1b1576-364c-45cc-b9ad-bc3898e5ec25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f1:a8:97:cc:33:2e:e6:18:50:4c:d2:4d:a6:
                    63:69:20:ca:f0:d1:ee:00:99:c0:e7:39:9d:93:e0:
                    a4:af:d1:7a:e6:92:62:a7:44:5b:0a:25:5b:a1:a1:
                    1c:1b:b7:29:4b:a2:99:70:67:40:b5:4f:ea:db:69:
                    8c:3b:24:ce:3e:2a:5c:d4:49:05:d9:8c:ac:4e:f1:
                    56:27:5a:3a:a5:43:89:f6:a7:39:64:ad:ca:3a:19:
                    ff:53:4d:c0:05:a5:d4:44:ee:53:49:b2:10:cd:56:
                    78:de:d9:9d:80:25:49:55:08:4f:bc:9b:25:e6:1d:
                    b3:f0:33:05:3c:50:93:34:29:9a:a9:0b:bd:4e:57:
                    8e:81:d7:8d:74:40:d1:2a:1d:df:57:79:a1:eb:fb:
                    86:47:74:b9:5f:62:f0:02:23:60:24:ff:76:d2:c1:
                    49:c6:5d:25:73:d2:af:ba:8d:eb:30:90:ad:4b:26:
                    19:c7:42:8d:2e:05:04:00:0f:a1:d2:ff:15:ac:35:
                    ce:12:4a:d9:de:29:6c:e6:4d:a5:3a:2b:e6:d7:29:
                    81:5c:79:03:64:6f:d1:3f:b2:e1:ee:eb:de:a4:03:
                    61:f0:4a:ae:7c:4b:64:88:95:76:f7:21:87:04:e6:
                    8e:e2:2c:1a:f7:84:78:1d:cc:ff:61:45:89:8f:a2:
                    79:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:60:BB:6C:C3:1B:BB:25:22:1F:E7:F5:C8:17:D0:B2:D6:33:F5:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/4a9c37ad-9e8a-369e-bf7f-9478353fca0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.crl

            X509v3 Authority Key Identifier:
                keyid:8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.96.0/23
                  45.41.212.0/22
                  45.45.240.0/22
                  162.253.212.0/22
                  204.10.89.0/24
                  209.160.96.0/22
                IPv6:
                  2602:fe6b::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:4a:88:d6:f3:16:07:9f:23:b3:90:66:09:96:e9:ff:e9:68:
         fb:49:53:8e:e1:2f:4e:ae:d1:aa:77:32:4e:80:6f:0c:0c:0a:
         70:02:7b:3f:34:88:e8:8c:33:74:98:70:d9:44:27:0e:cb:73:
         34:d4:4b:5b:0c:1e:8a:ec:9e:61:3c:c6:d7:e7:dd:64:27:70:
         21:62:e2:15:7a:13:f6:1f:3a:28:bc:67:84:29:ee:b7:c9:e2:
         a8:3e:dd:9b:74:0b:c6:84:52:3f:31:9f:d5:54:92:05:a3:fb:
         75:2a:a4:d6:e3:cb:89:c4:bd:22:d9:aa:d0:0f:31:7b:94:fc:
         e3:a6:a9:67:7d:d6:1e:c5:60:19:34:c8:f2:f3:7c:db:10:9c:
         a2:27:8b:d0:b2:83:c6:a1:8d:de:7a:b8:6d:ee:75:28:26:85:
         de:a2:43:07:6b:8b:a5:3c:9d:fe:2b:4c:ea:1a:81:14:c6:a1:
         2c:09:05:d3:33:9c:1c:e7:7f:0a:0e:10:8d:74:70:38:71:c8:
         2c:ca:0b:60:06:ba:e1:21:bf:b6:46:70:a2:d4:91:b6:f8:58:
         e8:a2:63:c6:e3:13:60:19:d9:82:4e:48:f3:ce:be:29:4f:a1:
         93:94:18:8a:57:c6:58:61:3d:e3:3b:09:2d:97:d3:52:b8:37:
         98:8b:ba:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:11:51 2025 by rpki-client