Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/3e90970f-dd28-30ac-83fd-9f25160e4d92.roa
File:                     3e90970f-dd28-30ac-83fd-9f25160e4d92.roa (raw, json)
Hash identifier:          vgr2AFLXJtmur7c8fV7+zls16+IQmoTUJpoY7/+IozY=
Subject key identifier:   58:18:5F:39:85:56:2E:6D:9B:21:39:C6:41:14:79:35:5B:7B:AF:63
Certificate issuer:       /CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
Certificate serial:       010D0C9F432858491246A4EF23108BA7281AF480
Authority key identifier: FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/3e90970f-dd28-30ac-83fd-9f25160e4d92.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     26863
IP address blocks:        64.40.8.0/23 maxlen: 32
                          104.143.2.0/23 maxlen: 32
                          104.238.229.0/24 maxlen: 32
                          168.100.160.0/22 maxlen: 32
                          208.52.152.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:a4:ef:23:10:8b:a7:28:1a:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=fda37f4e-c0dc-4183-abb0-e76b8b69d52b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c2:26:10:72:cf:d2:96:71:1d:03:2d:99:e8:
                    c3:02:cb:7b:f2:6a:54:6e:22:75:7a:bb:42:e8:4c:
                    22:9d:d2:2f:3b:9e:c3:3f:ac:05:6e:91:9d:96:2d:
                    c4:33:ff:05:ef:e3:72:30:c9:79:ef:95:6f:45:67:
                    a1:eb:fc:de:ce:67:91:12:01:0f:06:20:74:a5:36:
                    b1:b1:0d:34:f4:68:b8:5d:f5:82:44:f2:e3:13:58:
                    6e:61:3c:a9:49:c4:5a:9e:1f:da:5b:61:53:4c:61:
                    ab:72:31:bc:db:c6:67:70:87:e2:b7:c6:25:74:e4:
                    eb:43:da:dc:8f:2b:5f:90:e9:59:4d:f5:f5:5c:75:
                    03:fd:f2:88:3b:4a:dc:69:fa:a1:4e:c1:73:67:7b:
                    c5:4e:a5:2e:86:43:84:6c:2e:0a:e0:4e:9e:22:42:
                    db:01:d5:c8:cd:a8:18:b6:84:5c:b6:79:52:f9:7e:
                    ce:79:0d:f2:b5:d4:0c:e8:cb:93:41:5a:51:fa:22:
                    70:e7:c5:f2:2a:53:39:11:e1:69:8b:0d:2d:03:7f:
                    b0:87:26:4f:df:86:f4:e8:db:da:d7:fc:e4:57:e7:
                    5c:74:7a:c7:2b:15:39:bf:f3:12:82:9c:bf:6c:36:
                    14:c6:cb:2b:0e:76:90:59:13:ac:85:4f:14:e8:74:
                    4b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:18:5F:39:85:56:2E:6D:9B:21:39:C6:41:14:79:35:5B:7B:AF:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/3e90970f-dd28-30ac-83fd-9f25160e4d92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl

            X509v3 Authority Key Identifier:
                keyid:FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.8.0/23
                  104.143.2.0/23
                  104.238.229.0/24
                  168.100.160.0/22
                  208.52.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:69:ce:f8:a9:f0:a8:0a:fb:2f:ba:54:bf:fb:49:2e:d5:11:
         a6:9c:68:a3:e9:a8:10:97:ce:df:ed:35:27:f3:3b:29:23:0e:
         39:32:af:b5:09:9e:9b:9a:ec:77:45:8d:05:b7:6e:99:80:1d:
         a1:67:9c:0a:a8:27:9b:7e:83:2e:8a:28:ac:82:56:82:2f:63:
         52:11:74:03:00:d8:ce:d6:d9:c8:4f:58:39:66:96:74:55:77:
         14:f7:8a:9f:2a:e2:23:60:de:b8:e7:78:87:ae:6c:10:52:96:
         aa:7a:65:09:ee:9e:d1:29:aa:de:4c:41:83:81:9f:5a:a9:af:
         bf:46:57:65:85:aa:fc:d7:36:c4:5e:bc:c8:ce:1f:ac:a9:f5:
         52:8d:fc:a8:c2:c9:a5:91:4e:88:9f:49:d3:0a:6e:a1:03:e9:
         fb:55:f2:66:ec:4b:9f:10:a9:01:c3:ba:96:c2:00:85:55:e2:
         32:e8:7e:47:5f:38:c8:a5:4e:e2:3f:de:7f:10:96:82:3f:90:
         fd:2f:62:58:4d:53:ea:93:c8:e2:a2:66:12:fe:57:ae:85:d3:
         53:f3:32:ed:90:b5:b8:5c:83:9e:a7:2a:cb:4c:08:f2:d3:d5:
         da:12:5a:2c:60:2f:01:91:30:a5:f3:1d:af:d0:7e:3a:5a:3b:
         a4:4c:1d:3b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Mar 14 08:23:51 2025 by rpki-client