Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/90c90ff0-7e6b-357b-ab5b-2ab54e15c4f2.roa
File:                     90c90ff0-7e6b-357b-ab5b-2ab54e15c4f2.roa (raw, json)
Hash identifier:          bzY4Wu1LcUWkzdhvahcEue6B7zWCCRwJq6V1SGgfNug=
Subject key identifier:   2E:D4:B4:50:50:03:4F:D4:8B:DE:FC:62:CE:F8:FA:3A:FE:D5:F3:BF
Certificate issuer:       /CN=311e0039-6b7c-42f2-a76e-395b51d9ec97
Certificate serial:       010D0C9F4328584957F41778A31EE6435439B580
Authority key identifier: 9A:90:99:7A:47:4A:98:A4:A1:24:89:41:55:90:BE:7C:B7:54:35:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/90c90ff0-7e6b-357b-ab5b-2ab54e15c4f2.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     401233
IP address blocks:        23.140.152.0/24 maxlen: 24
                          130.51.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/311e0039-6b7c-42f2-a76e-395b51d9ec97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/311e0039-6b7c-42f2-a76e-395b51d9ec97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:17:78:a3:1e:e6:43:54:39:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=311e0039-6b7c-42f2-a76e-395b51d9ec97
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=7d728e59-5280-45b8-974c-d57c1e844564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8a:55:08:a9:3f:25:15:8e:39:22:8f:1d:ff:
                    47:7f:09:26:c5:21:5e:aa:4f:79:0c:2c:21:69:98:
                    ca:1a:77:af:3d:7e:18:7d:59:ec:9d:a8:82:eb:7a:
                    7d:60:b2:0a:d7:8e:d7:8a:d7:68:f9:ee:28:9e:17:
                    c0:6a:e7:6d:4d:ca:2e:5a:0b:64:e5:34:c6:a5:dd:
                    88:7f:86:8b:e1:e0:d4:23:e2:c9:1e:c0:9f:29:16:
                    cb:55:a2:95:73:a8:61:ff:05:3f:9e:9d:88:b9:4f:
                    d1:53:b4:92:6e:b7:97:1d:e3:a3:1a:16:99:58:8b:
                    ad:08:f4:0c:0a:73:76:f3:04:b5:d3:d7:ac:5c:17:
                    7f:0d:21:76:44:c2:00:02:00:07:8e:58:fb:21:e5:
                    fc:25:61:b9:5e:5f:b8:27:ee:b0:e8:36:bc:77:77:
                    73:c9:82:50:9a:a2:42:51:aa:34:15:d3:25:3e:ca:
                    1f:09:21:fe:eb:c8:db:57:3c:ca:db:6f:3e:b3:21:
                    3d:8e:a2:51:46:5d:65:68:ac:20:d7:cd:97:45:58:
                    b6:2d:14:8a:0b:b2:45:a9:31:1d:b6:bb:51:73:9e:
                    15:d2:5b:fd:c3:4c:5d:9b:d8:ff:d6:9b:44:70:cf:
                    89:c3:60:90:25:75:8e:6d:e5:8b:ab:67:25:93:14:
                    e4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D4:B4:50:50:03:4F:D4:8B:DE:FC:62:CE:F8:FA:3A:FE:D5:F3:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/90c90ff0-7e6b-357b-ab5b-2ab54e15c4f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/311e0039-6b7c-42f2-a76e-395b51d9ec97.crl

            X509v3 Authority Key Identifier:
                keyid:9A:90:99:7A:47:4A:98:A4:A1:24:89:41:55:90:BE:7C:B7:54:35:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.152.0/24
                  130.51.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:48:35:24:04:e8:79:73:61:4b:30:bd:ab:bc:93:16:e4:f4:
         fd:dc:f0:02:2d:6b:67:01:45:fb:54:8c:18:f4:80:98:d7:69:
         0c:5d:d7:e8:22:fa:d1:6e:9f:3f:d4:0c:18:07:9d:dc:9d:e8:
         8c:60:f0:36:7e:b1:68:b5:56:1d:a3:e7:ff:c4:20:63:5a:66:
         7b:a2:20:e1:0c:9b:35:f0:1c:ee:f1:bc:ff:b1:a9:75:d0:86:
         ce:75:3a:e0:12:7a:2b:bf:ee:27:d5:b1:33:99:c7:1c:64:21:
         8f:9a:6b:01:24:d0:96:8b:2b:e3:1a:d5:ef:dd:ac:7d:3d:e1:
         39:97:f4:34:ea:f2:bc:6a:82:66:e0:57:da:fa:36:75:78:b2:
         3d:49:32:24:af:38:a0:fe:57:95:fc:48:df:37:a9:33:22:df:
         2b:b0:91:b7:0b:0f:de:73:8b:9e:64:67:ff:ef:8c:c4:a0:e7:
         a7:cf:fc:6a:b8:08:84:74:6f:96:a6:59:89:4f:14:a0:dd:3c:
         8b:72:4d:c8:b5:76:43:e2:cf:13:92:df:2b:a6:13:c6:15:56:
         f1:0f:6a:9a:0a:4d:f4:6a:99:fc:c4:6f:0e:d4:1f:21:7a:f2:
         36:ec:5f:03:9b:e8:e4:47:5d:8c:e7:e2:47:ae:6d:43:56:b2:
         44:37:4a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:07 2025 by rpki-client