Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7a38f2bb-f497-3922-be4a-6b683600887f.roa
File:                     7a38f2bb-f497-3922-be4a-6b683600887f.roa (raw, json)
Hash identifier:          1wvqs9BJdKsb2/xeGS51jn/gz2x9kLOeq/inEdYYJ7M=
Subject key identifier:   D2:0B:D9:92:81:85:87:C1:6E:7D:FA:38:4D:40:8E:C8:E9:73:65:DF
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285848CF4638C9EEEC1E22BAD0FF00
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7a38f2bb-f497-3922-be4a-6b683600887f.roa
Signing time:             Sat 08 Feb 2025 02:00:38 +0000
ROA not before:           Sat 08 Feb 2025 02:00:38 +0000
ROA not after:            Fri 09 May 2025 01:00:38 +0000
asID:                     394089
IP address blocks:        134.231.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cf:46:38:c9:ee:ec:1e:22:ba:d0:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Feb  8 02:00:38 2025 GMT
            Not After : May  9 01:00:38 2025 GMT
        Subject: CN=dd0ef57a-9eac-4b87-9658-1a9fdba70cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f1:84:d3:f9:72:df:06:8c:2e:ac:1b:2f:8b:
                    e4:0c:c3:4f:a0:66:e1:6d:56:80:ae:95:cc:4b:85:
                    02:62:da:60:c0:da:10:ce:15:d4:26:c1:e9:24:66:
                    b2:de:03:03:f1:ac:59:8a:b5:47:7e:09:3a:95:79:
                    57:ba:c8:c8:7a:af:63:4c:1c:ea:4c:6b:2c:d9:d4:
                    59:f0:52:f1:7e:83:71:4d:14:64:30:13:d3:d1:03:
                    72:ef:2f:da:d7:b5:26:6e:1c:18:f5:3e:b0:87:1e:
                    bd:9f:47:52:61:73:09:2d:f5:65:0a:c2:e4:51:02:
                    3a:9e:a2:52:a6:5f:e9:b1:e9:f3:41:59:42:87:d8:
                    70:9a:2d:5b:11:9b:c6:65:26:f3:3f:c2:ff:71:18:
                    a3:81:16:92:c3:66:6a:78:4c:d2:ee:35:64:04:e4:
                    c2:ae:53:cb:ae:c0:a4:9c:97:19:b3:fc:a4:07:35:
                    5d:ca:43:01:ce:e6:f6:53:f9:d0:5d:8b:c6:7a:89:
                    fb:0c:f5:a9:31:5d:0c:bc:a6:33:46:b7:56:3c:1e:
                    89:d2:59:36:ad:91:cb:0e:50:f6:7e:7a:10:f0:eb:
                    e0:68:7f:18:e1:28:8c:96:5a:1d:ec:6a:9f:97:0b:
                    1c:f7:8d:fa:58:cb:e2:92:32:bb:cd:e3:94:f3:6e:
                    cb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:0B:D9:92:81:85:87:C1:6E:7D:FA:38:4D:40:8E:C8:E9:73:65:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7a38f2bb-f497-3922-be4a-6b683600887f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.231.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:ad:6f:76:88:fb:a1:16:f1:28:f2:89:33:17:0e:aa:1d:c4:
         c1:30:52:f5:7f:43:b5:1f:a2:19:d7:1d:f7:77:42:0c:da:f4:
         3e:6f:05:7d:fc:43:43:47:f3:1a:d3:d7:af:8c:51:0f:ea:a9:
         e7:28:6f:ed:23:7a:27:7f:c3:5e:39:f5:79:70:8d:65:e1:32:
         d4:36:4d:91:8f:45:44:f3:b9:db:7d:79:2c:d4:b0:62:b1:e7:
         97:ac:b7:ab:e6:c1:2a:ee:43:31:cb:d4:2a:5d:e9:e0:17:c3:
         e0:59:db:63:99:dd:ba:3b:b5:fb:90:03:40:df:06:e2:27:b9:
         51:a0:2b:96:50:50:7b:dd:a2:bd:60:c6:a8:79:0b:a3:b1:dd:
         56:a7:a3:95:d6:b0:95:a3:f6:b0:1d:83:23:f1:e2:47:13:5a:
         6d:fd:d1:a6:5a:83:a1:fe:82:55:47:4f:b5:6a:d7:9a:45:c0:
         18:95:8f:a5:dd:93:9b:84:2a:65:7a:a4:14:69:41:5e:c3:38:
         23:0d:a6:b4:e6:e4:04:15:80:e9:c5:85:40:32:85:89:17:f9:
         a8:f1:81:e4:4d:3a:1c:cd:25:e4:a5:ac:92:a4:af:16:cd:45:
         ae:5f:d6:78:8f:95:90:c7:a9:b0:d4:fc:eb:7c:0b:a7:b5:1c:
         70:99:c0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:27:03 2025 by rpki-client