Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b68e385c-04d0-3a63-9611-9c28241ec780.roa
File:                     b68e385c-04d0-3a63-9611-9c28241ec780.roa (raw, json)
Hash identifier:          FDaTMAjDDTK3NVKpeKFBAQ4OoGNB8+J1/ci2NbHVKRY=
Subject key identifier:   7F:35:B2:80:62:F8:E9:87:5C:C7:88:B6:2F:07:3C:72:A0:5C:7A:26
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584B0CDC0FD633D3EC39492EFE20
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b68e385c-04d0-3a63-9611-9c28241ec780.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     394089
IP address blocks:        137.83.213.0/24 maxlen: 24
                          137.83.215.0/24 maxlen: 24
                          137.83.216.0/21 maxlen: 24
                          137.83.248.0/23 maxlen: 24
                          137.83.250.0/24 maxlen: 24
                          165.85.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:0f:d6:33:d3:ec:39:49:2e:fe:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=d406c606-77a3-4cb4-b54c-6d47f9689319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:6b:3f:77:7c:d0:50:f2:9c:3e:d8:36:76:a4:
                    f4:09:eb:1d:a9:55:ed:86:43:da:c7:ef:bb:11:16:
                    a9:1b:03:43:2c:12:4d:9f:56:58:69:17:6e:ac:66:
                    7c:2d:17:40:57:07:33:c3:a5:81:21:89:ab:36:d4:
                    d0:50:e8:96:12:82:5d:04:23:99:97:5a:5f:d8:66:
                    6c:29:11:0c:40:85:0c:a6:7a:e8:0f:13:d9:23:84:
                    b5:21:9c:4f:86:fc:7a:45:87:cb:99:cd:81:c1:b5:
                    09:72:f1:a9:07:91:49:81:2e:23:36:51:6c:9e:73:
                    29:1f:85:52:66:66:72:a9:dd:86:c1:c3:61:62:d3:
                    a4:e9:36:c1:0a:78:2e:86:b2:bb:90:60:b9:7a:72:
                    3c:45:41:a1:a0:0d:dc:71:f4:7e:02:1a:f2:05:7c:
                    1b:f3:86:32:73:00:98:95:76:17:3c:aa:10:93:ad:
                    3a:72:ea:b0:20:0f:2d:fe:46:62:55:9c:b3:40:7b:
                    05:80:eb:ee:7e:8f:a8:16:48:bd:32:5e:99:a4:b8:
                    65:31:55:cc:e6:16:ed:55:ac:46:b8:e8:4f:42:8b:
                    dc:7f:06:dc:64:76:48:70:79:31:ee:da:3a:a9:23:
                    e9:74:e4:45:14:d2:82:80:c5:cd:66:84:9a:57:d6:
                    30:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:35:B2:80:62:F8:E9:87:5C:C7:88:B6:2F:07:3C:72:A0:5C:7A:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b68e385c-04d0-3a63-9611-9c28241ec780.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.213.0/24
                  137.83.215.0-137.83.223.255
                  137.83.248.0-137.83.250.255
                  165.85.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:02:7d:ff:a2:21:a6:d1:d7:1a:80:a9:01:35:5e:0a:96:e6:
         c4:c5:eb:2f:74:96:07:dc:d4:e6:08:c8:af:0e:9f:47:65:42:
         d7:11:8c:c6:ae:72:63:65:2f:ca:f4:86:ae:9b:dc:95:82:f3:
         aa:59:0f:b8:11:a2:8d:3e:a4:2a:b5:8b:31:73:fb:c5:81:64:
         e7:01:83:8f:5e:0f:18:25:dc:af:e7:c7:15:ae:e8:d2:25:98:
         8d:83:a3:93:18:f6:5b:54:de:47:16:f3:c2:ef:9b:99:f3:8e:
         32:31:dc:b3:1f:db:01:15:0b:58:ab:e3:66:cf:77:e0:07:b4:
         b3:77:0a:4a:b7:f4:aa:ff:d1:43:81:ed:4a:d2:3e:65:74:85:
         84:06:cb:b0:6f:a3:41:d7:2a:2b:71:2f:db:00:00:cf:51:f1:
         42:65:a1:e8:51:08:1b:6f:a1:3e:a2:d4:35:1e:8b:49:cc:d7:
         7b:c6:89:b2:78:57:11:71:df:16:65:ef:14:5a:9c:43:4f:9b:
         f8:a8:24:f4:f0:9b:23:66:ac:a8:a0:ed:67:20:1b:62:5a:3b:
         a2:6b:8a:ba:f4:28:c8:19:7a:7b:2c:e8:93:74:9e:26:3b:34:
         80:f1:5c:6b:bb:7b:d5:7d:32:c6:6c:b7:4d:30:5b:f9:9c:e1:
         d7:35:ca:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 02:36:39 2025 by rpki-client