Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/201f29d9-ab02-3513-8d42-c93a46d0e75e.roa
File:                     201f29d9-ab02-3513-8d42-c93a46d0e75e.roa (raw, json)
Hash identifier:          RvLqzhzIa90555D6dbLZBrjBBaeEYlh3xPXlj+7N9+M=
Subject key identifier:   6C:71:B0:CA:C0:A9:2F:1C:9E:92:6E:88:70:A0:74:C9:DB:62:03:D1
Certificate issuer:       /CN=fbe3f91d-911a-4397-956a-9925c68f0a94
Certificate serial:       010D0C9F43285849D85F888B350C8B39B15CE100
Authority key identifier: BF:95:AD:3B:A8:B6:DE:7B:6C:D5:C1:FE:F5:02:A7:24:EF:C6:16:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/201f29d9-ab02-3513-8d42-c93a46d0e75e.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     19353
IP address blocks:        66.175.240.0/20 maxlen: 24
                          198.47.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/fbe3f91d-911a-4397-956a-9925c68f0a94.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/fbe3f91d-911a-4397-956a-9925c68f0a94.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:88:8b:35:0c:8b:39:b1:5c:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbe3f91d-911a-4397-956a-9925c68f0a94
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=3d1bf7c7-6a0b-4e3c-9056-e1aab153f7e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4e:39:e1:67:98:31:d0:f7:53:99:c3:18:36:
                    5b:2e:97:51:59:0b:65:a2:fd:ac:b1:29:e8:4a:ad:
                    fc:fc:8d:bf:4d:16:11:16:96:0d:e3:1d:47:f1:e4:
                    35:1f:36:91:ab:0e:97:58:0b:13:2b:48:b8:d0:c9:
                    5c:14:19:0d:1a:bc:79:ac:56:3c:1c:f4:1d:82:88:
                    de:0c:5d:8f:8b:45:bb:8b:9f:49:c0:5e:64:26:3d:
                    f5:c9:9f:5d:1d:f5:eb:fb:a7:c8:0a:f1:00:24:27:
                    de:e8:8f:a5:0f:f6:67:68:2f:69:8a:6a:4e:f0:59:
                    ea:e7:ca:a0:e0:b0:9d:8c:ae:35:b3:2a:58:43:83:
                    ee:80:f2:8c:ba:3b:94:c1:76:12:52:4e:5e:59:9f:
                    ca:f1:ca:19:e4:40:0c:df:86:54:b1:2d:27:c0:4e:
                    4f:c8:8a:af:b5:fb:75:a5:ac:41:15:26:d0:77:48:
                    b8:ab:b0:be:41:52:5c:d5:39:93:4f:53:c8:8b:a4:
                    fb:a9:a2:db:e5:1e:87:52:9e:cd:c1:ff:51:77:66:
                    f4:dc:f9:33:9f:26:b5:f4:28:04:dd:e4:0a:d9:56:
                    ac:e9:e7:df:62:f0:e5:46:3d:f6:23:e1:97:61:aa:
                    05:01:8e:b8:32:6e:d5:fe:ab:e5:ac:48:f9:91:e8:
                    34:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:71:B0:CA:C0:A9:2F:1C:9E:92:6E:88:70:A0:74:C9:DB:62:03:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/201f29d9-ab02-3513-8d42-c93a46d0e75e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/fbe3f91d-911a-4397-956a-9925c68f0a94.crl

            X509v3 Authority Key Identifier:
                keyid:BF:95:AD:3B:A8:B6:DE:7B:6C:D5:C1:FE:F5:02:A7:24:EF:C6:16:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.175.240.0/20
                  198.47.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:14:dd:01:40:a3:29:c8:0b:5c:7d:72:60:18:6d:0a:5f:97:
         11:99:e9:30:4a:97:2e:41:ab:6d:e2:eb:b2:4b:98:63:ac:37:
         53:c8:0c:8c:08:5f:df:fc:cc:2d:80:e6:4a:b3:54:8c:25:6e:
         ec:05:1e:c5:74:64:41:c4:02:c5:6a:5c:f2:d5:c0:e0:c7:f4:
         72:98:6b:8f:80:59:60:db:16:52:9e:da:17:4a:54:23:ed:1c:
         d7:a3:95:89:77:0d:7d:c7:72:85:30:6c:a1:d8:9c:9d:c8:8f:
         09:1c:e6:9b:3a:aa:8f:9d:18:1b:96:a7:c8:46:b5:b7:0b:3f:
         30:45:7e:89:60:c3:4e:c9:68:d6:5e:f3:dc:ef:d8:29:ae:38:
         8d:f8:e9:2f:9c:30:73:60:1f:45:bb:f2:f4:0e:f0:da:c9:56:
         74:40:74:2e:37:c2:fa:c6:14:62:0a:9a:4f:20:fc:96:50:c9:
         76:e0:1b:7e:5e:0e:04:a1:47:dd:3e:d9:dc:45:21:f0:e8:62:
         f6:cc:45:b4:4c:0e:88:ec:ae:3a:af:4f:c6:77:a8:ba:cd:09:
         12:23:87:d3:a0:94:b4:0f:c1:35:e8:21:42:14:47:9f:e4:54:
         6d:f0:7c:b4:21:02:09:a6:f8:a0:81:ac:a4:1e:62:10:ff:a3:
         ad:68:20:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:06:35 2025 by rpki-client