Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/f7e0bd36-8adb-3c43-b4dc-432ee8e35bba.roa
File:                     f7e0bd36-8adb-3c43-b4dc-432ee8e35bba.roa (raw, json)
Hash identifier:          8ybtI2Z4x3xraftVyVMjNHLtl6OXmfZh3Gma/wDybl4=
Subject key identifier:   AB:59:94:B1:1F:11:CC:11:9B:96:A5:24:49:FD:95:14:62:E7:A0:BF
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584A0D6A882508356646354EE800
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/f7e0bd36-8adb-3c43-b4dc-432ee8e35bba.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     14061
IP address blocks:        146.190.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:88:25:08:35:66:46:35:4e:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=305edda2-8505-4d5e-8f39-a4b8dfe1dd9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b6:8b:98:cd:a3:d7:cc:07:43:cc:2d:b2:31:
                    82:d7:78:d4:83:27:86:38:93:31:1b:14:01:74:2f:
                    93:d6:f6:cd:16:ae:c1:d9:0b:49:50:6b:21:c5:24:
                    50:13:ee:3f:e0:a0:9e:bf:f1:45:29:f0:4a:0b:81:
                    68:a3:f6:f1:5f:29:a8:7d:46:83:83:d4:ec:4f:83:
                    bc:d4:75:c9:de:3d:0e:1b:82:0e:d2:75:51:df:7e:
                    ce:54:5b:a6:85:60:46:60:8f:c6:f7:75:bc:ea:30:
                    11:2a:5a:cc:56:6e:10:b1:b6:3d:7e:39:d3:49:a0:
                    15:34:5e:9d:c2:fe:43:39:59:3d:c7:ea:9e:a1:f8:
                    d3:ff:46:3c:17:46:f7:a2:3d:96:55:d2:b0:65:ae:
                    59:b6:82:8f:f2:ca:36:ca:7a:66:83:80:f2:4d:71:
                    b6:9d:f1:f2:7c:65:e2:2f:7a:d0:72:05:80:f3:fa:
                    45:14:ed:f3:32:43:5e:db:79:35:6b:6d:7c:c7:bb:
                    82:b3:9c:38:90:43:33:50:b3:4c:58:36:c3:61:af:
                    eb:43:ce:a0:60:5b:1a:fb:78:b6:49:08:30:f1:24:
                    26:30:0d:4f:ee:0a:78:be:5b:cd:e1:9a:4c:40:b8:
                    49:97:41:c2:f0:7a:38:a9:72:31:b5:2f:15:9b:d8:
                    31:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:59:94:B1:1F:11:CC:11:9B:96:A5:24:49:FD:95:14:62:E7:A0:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/f7e0bd36-8adb-3c43-b4dc-432ee8e35bba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.190.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:07:4e:33:92:59:bf:76:52:76:dc:84:5a:75:8e:20:bd:2a:
         8d:97:7b:c3:5a:a7:e3:89:62:af:8a:56:77:ac:f3:46:a5:0e:
         a8:7e:83:c2:71:b4:47:ed:b0:66:78:b8:64:f8:28:91:cb:a6:
         6a:7b:c3:01:b8:ac:5d:ab:36:6f:2e:43:0f:32:cc:af:a6:24:
         67:26:e2:88:46:67:fb:13:72:2d:96:c8:51:c1:ea:91:48:30:
         e5:64:ae:e7:46:0c:02:d2:d5:51:ab:1d:35:5c:56:f4:ee:c8:
         a2:d4:e2:75:03:e8:36:50:af:40:40:b0:6e:10:fb:e8:fc:c7:
         9b:c5:c1:1d:fa:36:74:08:5b:32:77:6b:c3:7b:01:50:37:e3:
         5d:66:a8:d7:a9:5f:88:62:3b:02:89:27:ea:bc:50:d9:80:42:
         4b:12:42:b3:58:91:f2:3d:45:7c:5a:d2:f3:03:43:3e:30:c6:
         5d:71:a6:62:a1:9e:82:4c:59:fe:03:58:ae:f4:97:4f:66:c9:
         52:5c:e6:15:cd:3b:b4:1d:24:05:f5:1e:b6:9a:6d:fa:1b:ac:
         6b:ae:3a:cc:73:4a:11:c4:82:a1:54:5d:43:b0:79:9d:3d:63:
         64:31:09:b0:64:e3:af:28:61:26:99:8f:3c:38:8c:f7:d5:1a:
         5e:92:a3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:39:50 2025 by rpki-client