Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/5b908763-b6ac-3b5c-9c9d-c28e84cf5115.roa
File:                     5b908763-b6ac-3b5c-9c9d-c28e84cf5115.roa (raw, json)
Hash identifier:          /qzPgv4sv+VboJRvoPYrDTxH2okEGaFOsDFNb5L6nOQ=
Subject key identifier:   8A:07:DD:08:F4:0B:8A:68:E0:8D:4C:2A:64:A2:94:CF:F8:31:8D:F8
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F4328584A6825F978845C339B596BF0E0
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/5b908763-b6ac-3b5c-9c9d-c28e84cf5115.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     396982
IP address blocks:        50.116.114.0/23 maxlen: 23
                          108.167.161.0/24 maxlen: 24
                          108.167.172.0/23 maxlen: 23
                          108.167.180.0/22 maxlen: 22
                          108.167.189.0/24 maxlen: 24
                          108.179.232.0/23 maxlen: 23
                          108.179.234.0/23 maxlen: 23
                          192.185.224.0/21 maxlen: 21
                          192.185.232.0/21 maxlen: 21
                          192.185.240.0/21 maxlen: 21
                          192.232.216.0/22 maxlen: 22
                          192.232.220.0/22 maxlen: 22
                          192.232.248.0/22 maxlen: 22
                          192.254.180.0/22 maxlen: 22
                          192.254.184.0/21 maxlen: 21
                          192.254.224.0/21 maxlen: 21
                          192.254.232.0/21 maxlen: 21
                          192.254.249.0/24 maxlen: 24
                          192.254.250.0/24 maxlen: 24
                          192.254.251.0/24 maxlen: 24
                          192.254.252.0/22 maxlen: 22
                          216.172.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:25:f9:78:84:5c:33:9b:59:6b:f0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=9de902a2-ba92-4293-a3a7-1b022bde3da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:77:91:74:89:1f:4f:53:c4:6a:08:ae:cf:61:
                    17:6c:54:92:56:c7:46:43:81:ba:69:d0:f4:40:b8:
                    26:99:ab:dc:30:79:e9:55:30:90:b6:70:e4:30:e4:
                    79:a2:34:cd:19:06:0e:ba:e0:5a:bc:0b:c0:12:3c:
                    f7:86:93:2a:44:c2:e6:f6:a2:56:77:47:51:14:f2:
                    2c:c4:89:2d:01:11:62:7a:b7:13:e7:bf:0d:be:8f:
                    8c:07:cf:21:45:18:71:b9:82:dd:b4:f6:35:c2:68:
                    96:51:93:8e:f1:59:65:27:e7:9a:c1:92:d6:cc:74:
                    dc:61:42:be:19:56:ba:6a:5c:b5:b9:34:cb:e1:ce:
                    31:90:7e:4d:4a:1a:8c:b6:8e:15:a0:7e:3c:f4:ae:
                    24:5e:16:bd:7f:d0:b2:d1:ed:74:7e:ec:b8:8d:70:
                    d3:b1:cd:38:00:67:15:c5:55:ce:2a:8b:2f:8a:1e:
                    b1:51:a7:e5:48:65:e3:1f:4a:e2:fc:eb:9d:30:7b:
                    a7:a6:7c:a9:50:c9:6e:46:3a:c9:7b:96:94:f8:ed:
                    26:87:a6:61:b0:1e:d8:2d:5a:0a:ff:e2:f8:0e:8b:
                    a0:60:5a:e5:5d:0a:f3:5d:e7:38:c2:b1:15:9f:0d:
                    c5:20:c5:7f:a1:6f:66:e1:be:1e:77:72:d8:b8:3e:
                    c4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:07:DD:08:F4:0B:8A:68:E0:8D:4C:2A:64:A2:94:CF:F8:31:8D:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/5b908763-b6ac-3b5c-9c9d-c28e84cf5115.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.116.114.0/23
                  108.167.161.0/24
                  108.167.172.0/23
                  108.167.180.0/22
                  108.167.189.0/24
                  108.179.232.0/22
                  192.185.224.0-192.185.247.255
                  192.232.216.0/21
                  192.232.248.0/22
                  192.254.180.0-192.254.191.255
                  192.254.224.0/20
                  192.254.249.0-192.254.255.255
                  216.172.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:2b:67:3f:bd:19:f6:a1:a4:e2:92:53:a0:cf:9a:e9:30:7b:
         c6:d7:bf:47:4b:bb:93:18:e6:45:34:bc:22:f1:bd:97:a0:31:
         8d:b9:67:95:52:f5:a0:ad:cd:dc:14:bb:fa:7c:fb:09:fd:0b:
         8b:3c:6b:25:54:a0:d4:4d:67:4f:a3:38:fe:1c:70:d5:45:06:
         59:2a:48:1f:13:f0:31:36:84:0f:7d:04:78:57:88:8d:94:7f:
         b4:64:3b:93:ea:0d:d5:ba:fc:e5:6e:15:70:e8:12:da:6f:ac:
         c8:51:59:18:ca:10:2e:67:1d:bd:79:49:94:52:26:94:4c:5b:
         15:77:e3:53:87:c2:db:cb:81:e3:95:72:80:19:c0:82:84:0a:
         ac:e0:ab:9a:29:17:10:5c:78:75:61:3d:6c:a0:04:4b:02:3d:
         5e:f1:80:7d:18:a2:43:f4:ad:ed:d1:9a:c8:75:33:98:4f:e0:
         69:fd:74:31:64:83:b4:a8:81:f4:76:5e:a3:80:30:ed:93:e5:
         1a:2d:50:98:9b:6a:41:80:8c:db:0b:f7:83:db:61:f1:08:b1:
         f9:44:0d:da:21:62:5a:9c:98:1f:a3:7d:74:d6:a6:a7:f2:31:
         7d:12:17:b3:d0:44:d4:48:08:eb:f2:cd:7c:37:06:74:b7:39:
         1f:91:f0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 00:30:17 2025 by rpki-client