Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f9e5042-0109-358f-9abb-5204ef9d0863.roa
File:                     9f9e5042-0109-358f-9abb-5204ef9d0863.roa (raw, json)
Hash identifier:          UW0V+2ubTrkl0GEUvTwr0cZAdY8t7aWhto/HlzdYurA=
Subject key identifier:   77:BF:CE:DC:F1:CE:3D:70:B2:28:09:18:4B:64:2C:B2:7E:65:7F:74
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848B85029CE764164530C517400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f9e5042-0109-358f-9abb-5204ef9d0863.roa
Signing time:             Thu 30 Jan 2025 20:36:40 +0000
ROA not before:           Thu 30 Jan 2025 20:36:40 +0000
ROA not after:            Wed 30 Apr 2025 19:36:40 +0000
asID:                     36733
IP address blocks:        64.235.160.0/19 maxlen: 19
                          65.97.0.0/20 maxlen: 20
                          65.97.16.0/20 maxlen: 20
                          67.174.80.0/20 maxlen: 20
                          68.81.10.0/23 maxlen: 23
                          68.85.136.0/23 maxlen: 23
                          68.85.215.0/24 maxlen: 24
                          68.86.134.0/23 maxlen: 23
                          68.86.228.0/23 maxlen: 23
                          68.87.16.0/22 maxlen: 22
                          68.87.24.0/24 maxlen: 24
                          68.87.26.0/23 maxlen: 23
                          68.87.28.0/22 maxlen: 22
                          68.87.32.0/20 maxlen: 20
                          68.87.96.0/20 maxlen: 20
                          69.137.133.0/24 maxlen: 24
                          69.139.191.0/24 maxlen: 24
                          69.139.244.0/23 maxlen: 23
                          69.241.18.0/23 maxlen: 23
                          69.241.40.0/21 maxlen: 21
                          69.241.72.0/24 maxlen: 24
                          69.247.96.0/20 maxlen: 20
                          73.5.240.0/20 maxlen: 20
                          75.149.106.0/23 maxlen: 23
                          76.26.112.0/21 maxlen: 21
                          76.96.48.0/20 maxlen: 20
                          76.96.64.0/20 maxlen: 20
                          96.82.16.0/23 maxlen: 23
                          96.97.20.0/22 maxlen: 22
                          96.108.38.0/23 maxlen: 23
                          96.108.76.0/22 maxlen: 22
                          96.108.144.0/23 maxlen: 23
                          96.109.130.0/23 maxlen: 23
                          96.115.158.0/23 maxlen: 23
                          96.116.0.0/19 maxlen: 19
                          96.119.96.0/19 maxlen: 19
                          96.216.36.0/22 maxlen: 22
                          98.40.34.0/23 maxlen: 23
                          162.150.160.0/20 maxlen: 20
                          2001:558:e0::/44 maxlen: 44
                          2001:558:400::/44 maxlen: 44
                          2001:558:460::/44 maxlen: 44
                          2001:558:461::/48 maxlen: 48
                          2001:558:502a::/48 maxlen: 48
                          2001:558:6000::/48 maxlen: 48
                          2001:558:fc0b::/48 maxlen: 48
                          2001:558:fe14::/48 maxlen: 48
                          2001:558:fee7::/48 maxlen: 48
                          2001:558:ff00::/40 maxlen: 40
                          2601:a40::/26 maxlen: 26
                          2601:a40:202::/48 maxlen: 48
                          2601:a40:600::/40 maxlen: 40
                          2601:a40:700::/40 maxlen: 40
                          2603:2a40::/26 maxlen: 26
                          2603:2a40:5::/48 maxlen: 48
                          2603:2a40:600::/40 maxlen: 40
                          2603:3019::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:50:29:ce:76:41:64:53:0c:51:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 30 20:36:40 2025 GMT
            Not After : Apr 30 19:36:40 2025 GMT
        Subject: CN=da0cbaff-ab33-4214-b1bd-32a4165e85bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2f:45:7d:d3:0f:0b:90:fd:ce:29:eb:bc:02:
                    59:5f:72:4e:38:91:d3:e1:c2:16:1d:43:d9:05:04:
                    4d:80:a0:72:5e:a2:65:82:06:03:d5:14:40:15:f3:
                    b0:99:47:73:99:b8:c5:eb:e6:94:d1:7d:56:0d:27:
                    af:39:38:a5:41:9a:47:03:f7:ea:63:64:ab:31:05:
                    e7:3c:84:86:60:10:e5:44:96:3e:5a:ce:04:d7:79:
                    70:88:1d:25:29:e2:f5:84:50:1b:0c:d2:79:4b:34:
                    f8:f2:b6:f7:7f:72:05:ef:47:13:85:8a:92:2f:c0:
                    95:be:e8:0f:18:a8:1c:63:45:1c:46:88:8b:c7:d7:
                    54:35:d9:af:4e:37:d4:7f:8e:2c:97:4c:19:bc:b3:
                    42:06:d3:69:23:43:1d:68:33:44:46:f4:61:8e:f9:
                    c0:7d:04:02:c5:7f:43:10:bf:bb:fb:ec:12:5b:e0:
                    63:45:27:6c:5e:54:69:12:c4:ce:67:46:69:8b:b1:
                    19:75:c0:ec:24:b1:1a:61:1d:0c:dc:dc:eb:c9:b9:
                    ed:7d:44:c4:7d:64:95:75:09:4a:d3:8c:6e:98:57:
                    48:0e:72:f4:d7:90:a9:f0:45:da:15:41:19:72:1e:
                    a9:4e:06:15:59:18:2d:3e:40:fd:1d:44:cf:5e:a8:
                    1e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:BF:CE:DC:F1:CE:3D:70:B2:28:09:18:4B:64:2C:B2:7E:65:7F:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f9e5042-0109-358f-9abb-5204ef9d0863.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.235.160.0/19
                  65.97.0.0/19
                  67.174.80.0/20
                  68.81.10.0/23
                  68.85.136.0/23
                  68.85.215.0/24
                  68.86.134.0/23
                  68.86.228.0/23
                  68.87.16.0/22
                  68.87.24.0/24
                  68.87.26.0-68.87.47.255
                  68.87.96.0/20
                  69.137.133.0/24
                  69.139.191.0/24
                  69.139.244.0/23
                  69.241.18.0/23
                  69.241.40.0/21
                  69.241.72.0/24
                  69.247.96.0/20
                  73.5.240.0/20
                  75.149.106.0/23
                  76.26.112.0/21
                  76.96.48.0-76.96.79.255
                  96.82.16.0/23
                  96.97.20.0/22
                  96.108.38.0/23
                  96.108.76.0/22
                  96.108.144.0/23
                  96.109.130.0/23
                  96.115.158.0/23
                  96.116.0.0/19
                  96.119.96.0/19
                  96.216.36.0/22
                  98.40.34.0/23
                  162.150.160.0/20
                IPv6:
                  2001:558:e0::/44
                  2001:558:400::/44
                  2001:558:460::/44
                  2001:558:502a::/48
                  2001:558:6000::/48
                  2001:558:fc0b::/48
                  2001:558:fe14::/48
                  2001:558:fee7::/48
                  2001:558:ff00::/40
                  2601:a40::/26
                  2603:2a40::/26
                  2603:3019::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:61:18:7a:4e:67:9b:42:cf:c9:2a:f8:ab:b3:a4:0a:29:27:
         0e:f8:4b:90:6e:86:8f:c2:52:89:68:cd:24:4e:90:73:14:85:
         1f:f5:7a:ad:b0:be:e1:67:62:b0:a4:78:9b:bd:b0:6c:5f:ab:
         bc:fd:ce:f8:03:81:d7:07:1f:32:84:ed:65:32:55:73:c3:f4:
         ea:1a:0b:b1:92:68:d9:0a:14:77:cc:63:06:e3:37:44:8f:6c:
         b7:08:12:ab:d0:9f:08:65:66:bb:ed:2a:4b:2b:58:fd:0b:d2:
         f6:63:2f:2e:26:70:7a:32:b5:02:47:73:2e:60:a3:21:d1:7f:
         e7:6d:93:d6:89:06:65:b2:9b:d8:2a:41:74:14:f6:ff:82:e2:
         0e:08:aa:10:6a:9f:45:dc:6f:84:91:32:90:12:f8:3b:38:75:
         7a:b8:8b:37:06:7b:af:48:fb:40:28:dc:10:d8:da:72:59:1a:
         d2:86:d8:46:73:cc:54:0b:54:ae:76:38:a1:b0:ca:78:47:5d:
         ec:a6:65:a2:51:f4:ba:0f:0b:6c:a3:8e:d3:19:46:0d:f0:0f:
         f2:75:9c:0e:e8:21:e3:e9:7c:25:53:f8:eb:98:84:4b:31:fd:
         64:cd:79:bb:57:20:61:db:dd:89:48:01:b7:24:b8:61:5f:57:
         1a:d5:4b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:36:43 2025 by rpki-client