Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b68e385c-04d0-3a63-9611-9c28241ec780.roa
File:                     b68e385c-04d0-3a63-9611-9c28241ec780.roa (raw, json)
Hash identifier:          vnMQmSuAk/tYAf99gYWovl3m8VU1/8Q/botr0Wc6cp8=
Subject key identifier:   5B:32:EF:10:13:AE:E3:8D:D1:9A:71:38:C2:21:49:0F:54:E1:85:B8
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F432858494CC943C77896D62F05AC0080
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b68e385c-04d0-3a63-9611-9c28241ec780.roa
Signing time:             Tue 25 Mar 2025 01:00:40 +0000
ROA not before:           Tue 25 Mar 2025 01:00:40 +0000
ROA not after:            Mon 23 Jun 2025 01:00:40 +0000
asID:                     394089
IP address blocks:        137.83.213.0/24 maxlen: 24
                          137.83.215.0/24 maxlen: 24
                          137.83.216.0/21 maxlen: 24
                          137.83.248.0/23 maxlen: 24
                          137.83.250.0/24 maxlen: 24
                          165.85.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:c9:43:c7:78:96:d6:2f:05:ac:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Mar 25 01:00:40 2025 GMT
            Not After : Jun 23 01:00:40 2025 GMT
        Subject: CN=8549567e-893a-430a-a99b-9be209715a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:87:87:2a:67:c8:f8:4f:26:cc:fc:ad:a1:4e:
                    d5:0c:b4:e3:cf:a7:a9:86:4a:bd:97:67:f4:7b:a0:
                    f8:73:71:5b:d7:0a:46:92:e7:a2:6b:5d:cf:5c:a2:
                    49:57:7b:98:06:15:a2:a9:cc:05:da:73:2d:6d:2f:
                    99:2a:3b:a8:87:ef:95:64:51:64:f9:92:8a:8d:2a:
                    f9:fb:6b:32:25:c5:5a:24:54:95:aa:c3:16:cd:cb:
                    d0:52:7b:ce:81:17:a6:c2:61:d3:a7:2a:84:d5:7d:
                    bb:21:6a:33:ea:3c:cf:af:82:91:da:28:28:6d:ec:
                    a7:47:8e:30:e1:0d:de:49:1e:53:c0:2e:b8:0e:4d:
                    29:d2:e4:6b:6d:6c:c5:ef:a3:4b:0c:09:7f:fd:e3:
                    58:8c:66:ac:b0:29:63:ed:93:a7:42:a2:03:a6:4c:
                    27:70:7b:2d:3c:28:84:e5:42:b1:3d:0d:36:61:bd:
                    17:93:44:d0:1a:cd:f8:d3:a2:fb:32:94:99:85:1f:
                    e3:42:bb:26:95:03:7b:14:07:32:d3:9a:cf:72:f8:
                    a8:a3:30:24:b6:ba:41:88:96:d8:51:54:b1:4d:c0:
                    66:42:37:90:cb:a6:ed:a8:ce:4d:0e:09:25:81:68:
                    d4:5d:fb:7a:b8:a0:74:32:a8:f2:95:51:cc:46:6c:
                    f9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:32:EF:10:13:AE:E3:8D:D1:9A:71:38:C2:21:49:0F:54:E1:85:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b68e385c-04d0-3a63-9611-9c28241ec780.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.213.0/24
                  137.83.215.0-137.83.223.255
                  137.83.248.0-137.83.250.255
                  165.85.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:44:ea:9a:9c:f5:94:50:8e:5e:f0:fd:37:e7:d9:2d:c3:5b:
         c8:4b:eb:61:93:e5:a4:57:39:b9:1e:d3:bd:0d:71:19:e6:6f:
         61:0c:bc:ae:48:db:97:58:cd:2e:b0:e2:5e:93:7e:b9:c4:fa:
         61:29:ba:2f:1b:4b:8d:78:19:66:db:e2:fb:a8:50:59:4f:98:
         2e:0d:6d:90:7c:a6:76:6d:74:8c:81:cc:b1:e8:b4:d5:c0:9f:
         a8:08:8c:68:6f:f4:6c:c6:0d:fb:0e:e4:15:15:4d:b1:e4:86:
         ee:42:47:04:4e:b1:dd:63:ff:6d:f1:29:d8:42:c3:82:a2:80:
         4c:e0:87:d9:12:5f:cf:72:d9:e8:f3:1a:4a:eb:c1:04:c0:ed:
         3c:1c:59:ff:b3:da:d8:3b:4b:59:4b:8d:70:7b:08:f5:3b:2c:
         c2:ce:0c:f9:ad:20:35:08:b2:50:15:6e:04:ab:48:eb:d8:31:
         8b:06:77:6a:fe:5f:cc:3e:0f:b9:dd:17:f1:d7:bd:40:98:80:
         1e:00:e8:a8:51:1c:0a:f5:96:31:ad:22:d1:c0:8c:de:7c:03:
         48:39:52:26:46:c7:82:97:c9:61:21:4f:1e:04:c6:ff:bd:ac:
         74:0e:ac:a6:98:87:d0:4c:dc:eb:5a:34:ff:40:e8:09:84:41:
         fb:bd:79:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:02:01 2025 by rpki-client