Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/d65d0f2b-be61-336f-8fc0-c38fcb1a1c10.roa
File:                     d65d0f2b-be61-336f-8fc0-c38fcb1a1c10.roa (raw, json)
Hash identifier:          w263oge0AewQElMDm9uWjnixx372CzWH33ueq6z1sac=
Subject key identifier:   D3:26:EA:2C:7A:1B:06:35:62:72:FB:98:A2:32:7C:ED:84:4D:83:7B
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F43285849780F09F89E08D7B53A1A7DC0
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/d65d0f2b-be61-336f-8fc0-c38fcb1a1c10.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     36007
IP address blocks:        52.144.45.0/24 maxlen: 24
                          52.144.46.0/24 maxlen: 24
                          52.144.47.0/24 maxlen: 24
                          78.138.0.0/24 maxlen: 24
                          78.138.31.0/24 maxlen: 24
                          83.229.3.0/24 maxlen: 24
                          83.229.39.0/24 maxlen: 24
                          83.229.67.0/24 maxlen: 24
                          83.229.112.0/24 maxlen: 24
                          83.229.115.0/24 maxlen: 24
                          103.54.57.0/24 maxlen: 24
                          103.54.58.0/24 maxlen: 24
                          103.89.12.0/24 maxlen: 24
                          103.89.13.0/24 maxlen: 24
                          103.90.160.0/24 maxlen: 24
                          103.90.161.0/24 maxlen: 24
                          103.90.162.0/24 maxlen: 24
                          103.90.163.0/24 maxlen: 24
                          104.128.64.0/24 maxlen: 24
                          104.128.65.0/24 maxlen: 24
                          104.238.214.0/24 maxlen: 24
                          104.238.215.0/24 maxlen: 24
                          138.128.240.0/24 maxlen: 24
                          138.128.241.0/24 maxlen: 24
                          138.128.247.0/24 maxlen: 24
                          147.185.238.0/24 maxlen: 24
                          147.185.239.0/24 maxlen: 24
                          194.113.194.0/24 maxlen: 24
                          194.113.195.0/24 maxlen: 24
                          194.113.210.0/24 maxlen: 24
                          194.113.211.0/24 maxlen: 24
                          195.88.24.0/24 maxlen: 24
                          195.88.25.0/24 maxlen: 24
                          195.88.56.0/24 maxlen: 24
                          195.88.57.0/24 maxlen: 24
                          198.22.162.0/24 maxlen: 24
                          199.19.72.0/24 maxlen: 24
                          199.19.73.0/24 maxlen: 24
                          199.19.75.0/24 maxlen: 24
                          199.244.48.0/24 maxlen: 24
                          199.244.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:09:f8:9e:08:d7:b5:3a:1a:7d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=919b1699-a517-4ba8-9db6-b30cbc712a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:56:1d:e4:ca:12:1f:36:24:f5:96:f2:99:b5:
                    8d:52:53:c3:0f:10:14:a8:22:8d:a6:80:88:17:9d:
                    54:86:a2:64:85:de:cb:eb:35:4c:83:c7:a3:aa:ff:
                    21:4e:13:a7:1c:4b:ac:5d:38:28:04:12:62:2f:88:
                    f3:39:25:8c:dd:56:34:48:6a:a1:de:e7:26:84:d5:
                    b9:44:e8:72:54:fd:5d:7a:c6:0c:a3:37:2f:d2:1e:
                    a4:a4:a8:19:f3:f0:16:85:36:aa:ee:4b:ec:01:0a:
                    72:81:b2:d9:b9:ab:aa:26:77:8b:01:26:f8:f6:c4:
                    27:08:bc:fc:e5:bc:5a:42:52:ae:11:a9:3b:05:d5:
                    20:ce:5d:f6:7a:ed:13:31:34:a4:a0:f1:14:fd:bc:
                    a8:ea:bc:01:d4:49:2d:cf:2e:96:b9:11:3c:23:09:
                    93:7e:e0:50:67:4a:c7:c4:34:89:5d:1c:cf:02:b1:
                    54:8f:f2:05:18:bf:96:f1:78:f3:c3:ea:9b:f9:bc:
                    25:17:30:1f:4c:b5:bd:30:90:8c:e8:32:df:55:69:
                    d5:d1:97:35:ff:d5:f9:37:9d:c4:2d:17:f9:4b:70:
                    4b:87:2b:61:6d:c9:bf:e2:17:ff:c3:ca:1d:6a:c3:
                    df:6e:bd:05:e4:c3:25:bf:9f:ad:8a:ac:46:a5:b6:
                    95:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:26:EA:2C:7A:1B:06:35:62:72:FB:98:A2:32:7C:ED:84:4D:83:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/d65d0f2b-be61-336f-8fc0-c38fcb1a1c10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.144.45.0-52.144.47.255
                  78.138.0.0/24
                  78.138.31.0/24
                  83.229.3.0/24
                  83.229.39.0/24
                  83.229.67.0/24
                  83.229.112.0/24
                  83.229.115.0/24
                  103.54.57.0-103.54.58.255
                  103.89.12.0/23
                  103.90.160.0/22
                  104.128.64.0/23
                  104.238.214.0/23
                  138.128.240.0/23
                  138.128.247.0/24
                  147.185.238.0/23
                  194.113.194.0/23
                  194.113.210.0/23
                  195.88.24.0/23
                  195.88.56.0/23
                  198.22.162.0/24
                  199.19.72.0/23
                  199.19.75.0/24
                  199.244.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:35:67:fe:f3:00:6c:26:0e:16:0f:a4:31:08:de:51:14:1e:
         8c:bf:fb:1c:98:28:dd:bf:3c:8c:50:0c:0b:36:b2:6d:d3:85:
         f0:b8:70:9a:1d:74:f6:1d:04:a8:cc:ea:73:75:41:6c:a5:41:
         46:8a:99:ed:45:a8:f0:3c:81:8a:aa:eb:21:26:95:b1:b6:95:
         76:5b:f7:c3:f6:69:83:50:70:4b:52:77:60:d5:10:e3:ac:13:
         51:eb:93:22:bc:09:3c:0b:2a:47:41:22:57:44:72:02:fd:b9:
         c3:b9:41:0e:af:ae:71:18:4f:1c:1b:11:e5:6d:07:00:1a:f1:
         50:b4:96:e0:79:7c:4d:48:02:e5:36:c9:bb:f9:aa:0e:b2:84:
         5d:a2:03:a2:43:68:4a:5b:4a:b9:a0:9f:bf:9e:2d:d5:6c:49:
         e0:8f:86:78:fc:1c:38:1d:26:4a:db:a8:63:80:f4:4b:3c:9f:
         a4:57:8f:3f:b5:b8:3e:14:78:68:ed:50:9e:88:27:da:fc:ba:
         a7:70:3d:2b:ac:bd:7f:04:c3:99:39:84:7f:65:f0:92:97:e2:
         84:10:b5:94:25:84:ac:4d:92:57:4f:e5:6c:1c:2b:a8:87:bb:
         55:fa:07:71:0c:46:b8:3a:47:f6:05:dd:66:95:3e:5d:8e:9a:
         10:d3:4d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:48:40 2025 by rpki-client