Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/a74dc707-2e89-3a65-8f80-e993ceb87ce2.roa
File:                     a74dc707-2e89-3a65-8f80-e993ceb87ce2.roa (raw, json)
Hash identifier:          GcYbQgFNkotxr28xs6nMS/2FLxRuWRHdyOJAl3lonBA=
Subject key identifier:   13:1D:C5:40:5E:4D:4D:68:3E:49:91:4D:98:A8:05:AB:5C:7F:11:1A
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285849D594E13C9C399E9DC817F540
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/a74dc707-2e89-3a65-8f80-e993ceb87ce2.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     396982
IP address blocks:        208.127.0.0/17 maxlen: 24
                          208.127.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:e1:3c:9c:39:9e:9d:c8:17:f5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=d0d48820-b21d-4cd6-ac8f-970132c750c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:95:e7:e1:59:9e:f6:30:aa:62:ac:be:61:7e:
                    51:13:8d:e3:ac:34:69:5d:7f:f9:71:88:e6:ac:40:
                    ae:c3:9d:4a:db:43:23:0c:73:9e:8e:0b:ad:86:99:
                    bb:da:d1:98:1c:d6:f2:66:e6:a5:35:cc:09:a1:dd:
                    9d:38:ac:1e:b6:97:d8:d5:c8:1b:e3:0d:bc:0e:90:
                    7d:ee:8d:99:57:90:c4:a1:13:28:81:09:26:3c:85:
                    ba:85:5b:34:54:8a:1a:af:da:d4:16:81:64:86:65:
                    f2:6b:38:a3:4d:12:0d:18:2e:75:9a:5c:70:b2:dd:
                    2b:24:09:f0:fc:48:3d:21:79:03:37:b0:10:8a:8a:
                    0c:fb:a9:33:15:5f:64:3b:5b:fe:14:2e:7f:91:77:
                    d2:00:48:2d:a3:31:82:00:6b:10:6e:4f:84:6d:e8:
                    f8:cf:38:a5:18:95:c9:0f:20:ff:40:d9:8a:85:20:
                    c9:f7:ca:12:50:da:d3:d2:17:c4:32:fb:f0:b4:ef:
                    ef:71:96:6c:e6:3c:5c:00:f3:3a:3a:8a:30:d3:ca:
                    e8:89:ba:97:aa:9c:c4:e1:76:86:4b:e5:03:33:20:
                    18:e5:bc:68:2e:c1:cc:fa:86:ca:af:a8:21:36:a6:
                    23:63:3f:61:13:27:1c:8e:84:ee:60:2c:f4:4e:96:
                    21:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1D:C5:40:5E:4D:4D:68:3E:49:91:4D:98:A8:05:AB:5C:7F:11:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/a74dc707-2e89-3a65-8f80-e993ceb87ce2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.127.0.0-208.127.191.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:52:c1:13:93:14:99:78:50:39:2f:93:8e:52:f2:6b:27:e5:
         20:63:c3:e6:03:fb:0c:c2:72:cc:de:f1:83:9c:70:da:98:7a:
         c6:d9:ff:42:b9:c1:a6:29:4c:15:42:8c:b9:72:3d:90:d3:2b:
         82:38:12:92:99:bd:73:9b:c3:02:04:8f:ab:ad:77:be:2d:ff:
         24:72:45:7b:c5:75:69:eb:ed:45:5c:9a:2e:15:b8:fd:8d:43:
         2c:d0:2d:ef:e9:2e:a8:0b:b6:34:c9:8a:ea:7e:db:17:4b:c0:
         de:13:d7:21:be:6b:52:95:fd:52:5c:da:bd:9c:41:11:f7:9f:
         0e:b8:5e:f6:b3:ee:34:15:27:04:32:5c:c6:37:2d:e1:cd:29:
         08:b6:72:75:cb:60:14:a7:b1:1f:b2:32:be:8b:b8:c7:e5:e8:
         2a:be:42:15:2e:1a:f8:73:df:f2:84:60:fe:52:04:32:e2:0b:
         cd:f2:a2:bc:84:d3:b8:ea:6a:52:8c:71:35:7f:4a:e4:d7:59:
         49:6c:f4:69:93:df:f3:42:48:cc:94:a2:f4:7d:2b:15:4c:96:
         c8:ae:c1:41:d4:19:0a:c1:39:94:c0:d8:0f:a0:90:c7:21:cc:
         0d:72:8e:ca:5a:87:c5:49:a2:d0:db:17:c3:8e:8e:41:0a:83:
         b1:1a:80:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:07:32 2025 by rpki-client