Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/140a9502-f85f-39f2-b424-85f37cd983a1.roa
File:                     140a9502-f85f-39f2-b424-85f37cd983a1.roa (raw, json)
Hash identifier:          ADsd8U3yvLHoYq+HXFjkSXmJJVZQEwM/ltZFZk5ey8M=
Subject key identifier:   E7:27:5A:33:22:B8:C3:2D:CA:D1:3C:9E:68:C9:C4:E9:05:B6:28:3A
Certificate issuer:       /CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
Certificate serial:       010D0C9F432858497DF9D3E1F28754119BD0ED80
Authority key identifier: 73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/140a9502-f85f-39f2-b424-85f37cd983a1.roa
Signing time:             Fri 11 Apr 2025 15:53:14 +0000
ROA not before:           Fri 11 Apr 2025 15:53:14 +0000
ROA not after:            Thu 10 Jul 2025 15:53:14 +0000
asID:                     199527
IP address blocks:        64.145.96.0/22 maxlen: 22
                          64.145.100.0/22 maxlen: 22
                          64.145.104.0/22 maxlen: 22
                          64.145.108.0/22 maxlen: 22
                          64.145.112.0/22 maxlen: 22
                          64.145.116.0/22 maxlen: 22
                          64.145.120.0/22 maxlen: 22
                          64.145.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:f9:d3:e1:f2:87:54:11:9b:d0:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
        Validity
            Not Before: Apr 11 15:53:14 2025 GMT
            Not After : Jul 10 15:53:14 2025 GMT
        Subject: CN=6948ba9b-bd00-4f53-bf4b-5b55ffc1c3f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ca:ec:47:7e:8b:5d:3a:38:b7:b8:90:26:2f:
                    a0:53:72:3f:e7:76:9e:4d:bb:df:80:51:e7:11:c2:
                    53:cb:43:9c:0e:e7:26:6e:8f:23:53:df:3f:41:e7:
                    43:dc:96:3f:0e:6d:8a:0d:bb:85:11:ef:ac:ae:f1:
                    5d:22:90:af:5e:e3:5e:fa:89:ea:a1:46:da:82:19:
                    25:27:eb:5a:a6:1e:c5:9e:da:0e:e2:6f:c9:6a:f4:
                    b0:f6:61:31:70:16:30:0a:e6:16:79:da:52:0b:82:
                    e7:0e:b1:81:79:3f:98:42:38:d5:49:9f:a3:b1:f0:
                    91:53:c3:ec:c6:3d:e1:84:14:71:86:b5:f8:a3:2b:
                    42:c8:4b:6e:29:5d:5f:61:28:a7:1f:d4:a1:80:b1:
                    62:2a:48:a2:45:0e:88:e8:c4:f7:cf:f9:94:02:9e:
                    2a:2f:73:f9:4a:97:92:eb:07:0b:93:b2:8a:83:c8:
                    4a:f4:56:c1:07:7b:2d:e3:ca:d7:54:84:f3:3c:ee:
                    d0:02:16:b8:7e:ce:d5:d1:5b:a8:e7:9a:55:5a:bb:
                    8f:17:00:6b:ab:8a:9b:5f:74:eb:d2:9e:83:f7:15:
                    72:1a:ef:5e:4a:f1:73:c1:f0:65:5d:b4:9c:9d:fe:
                    87:50:1e:37:23:d6:da:eb:9e:cc:cf:01:1b:0b:23:
                    c0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:27:5A:33:22:B8:C3:2D:CA:D1:3C:9E:68:C9:C4:E9:05:B6:28:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/140a9502-f85f-39f2-b424-85f37cd983a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl

            X509v3 Authority Key Identifier:
                keyid:73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.145.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:02:21:12:52:d0:43:b0:a5:0e:03:ac:f3:d4:85:c5:39:99:
         1f:ce:99:32:b9:1c:ed:69:8a:a6:7b:07:7c:5e:60:3b:01:c1:
         c3:6c:03:2a:4c:38:79:96:89:8c:38:ac:c2:26:44:81:33:83:
         75:5a:07:89:17:c6:57:2d:0e:43:dd:c0:16:14:d2:6c:b4:07:
         db:f0:c2:ac:35:dd:32:d7:49:ec:38:c1:dd:1d:d4:8a:e3:f7:
         b9:c8:1a:b4:e8:1e:69:c7:29:5b:0b:91:92:95:50:0a:c7:9a:
         b4:5a:a1:04:5c:7d:59:26:33:ca:32:a2:d0:a6:a0:b0:4a:20:
         a4:48:2d:02:2a:ae:0c:a0:7d:9b:42:63:7f:61:c6:e9:50:8a:
         2f:8f:7b:1d:8c:c0:8a:02:80:bc:07:8e:06:5a:3f:fe:7d:4b:
         7b:f6:f8:fa:bb:8c:69:7a:3d:4b:7e:7c:b4:e4:33:37:21:b1:
         fe:16:27:ed:c3:2f:00:31:5c:d9:2c:34:3d:a6:76:78:17:21:
         7d:57:50:90:f7:00:a3:60:2b:5e:01:d9:f9:26:0f:5d:b6:2e:
         e8:02:b1:e3:bc:25:91:2d:e0:ee:be:9b:db:6e:d6:7f:60:f6:
         1b:b4:ab:44:bc:bf:06:06:96:a0:49:01:20:88:31:5d:4a:28:
         4a:be:8b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 09:41:48 2025 by rpki-client