Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/d503a515-ed7a-39e2-b200-4edaa2b39e9f.roa
File:                     d503a515-ed7a-39e2-b200-4edaa2b39e9f.roa (raw, json)
Hash identifier:          Cb9pv2eNyfOBZ1aUEcBlIvhz5PYyGu0XrPKb18c31LA=
Subject key identifier:   5D:15:72:2B:4F:23:88:76:A1:CC:07:07:A4:30:F0:C2:9F:78:58:8E
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584AB4EF04E33322CE35ABC8C8A0
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/d503a515-ed7a-39e2-b200-4edaa2b39e9f.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     6629
IP address blocks:        140.90.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ef:04:e3:33:22:ce:35:ab:c8:c8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=07342217-82f0-4fa5-a3d2-e335303ab137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e9:2f:6a:bd:fb:6e:a7:9e:ff:26:8d:f9:c0:
                    55:bd:2b:bc:1d:55:73:62:78:c5:dc:99:1b:0b:25:
                    f4:7e:ff:ef:61:df:8d:13:a6:ff:e6:d5:c9:b7:c2:
                    df:d2:48:27:66:27:ee:56:1b:7a:c1:f8:2f:e5:bd:
                    a1:33:28:97:9b:87:6b:9e:fe:8b:bf:e3:1d:12:3a:
                    b4:df:31:41:60:fe:e4:f2:6a:6f:c6:71:14:ad:8e:
                    bb:e9:f3:8c:e3:02:65:af:e4:28:ce:45:4c:24:4e:
                    97:7a:ba:cd:82:3d:64:b6:6f:37:4c:b2:42:25:23:
                    44:dd:ad:94:97:26:3a:c0:c7:12:ea:7c:73:a8:1c:
                    c1:d1:50:b1:e6:d7:83:3e:de:fc:17:eb:31:0c:fa:
                    01:66:04:06:a9:e6:3a:36:1f:ae:86:e7:a8:72:e0:
                    33:b3:04:03:c4:1d:b1:79:a2:91:92:37:dc:68:9a:
                    02:b7:cc:ce:78:a4:c4:37:a3:79:e6:a6:40:5e:52:
                    46:cf:96:0b:a2:ff:67:e0:8d:d3:a5:57:36:48:9c:
                    6a:c9:1a:3d:be:cd:de:3f:1f:4e:2b:e6:86:91:71:
                    05:f5:08:23:77:f1:e5:51:c8:9f:4d:d4:59:ca:17:
                    b6:e0:db:dc:be:6a:01:81:fe:5f:90:f2:b3:b8:2a:
                    ed:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:15:72:2B:4F:23:88:76:A1:CC:07:07:A4:30:F0:C2:9F:78:58:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/d503a515-ed7a-39e2-b200-4edaa2b39e9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.90.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:dc:0f:da:7c:f5:a4:7b:49:50:92:2b:98:2b:a8:54:f2:dc:
         cc:09:67:4b:a8:95:65:f2:f3:c5:50:25:9a:fa:82:4a:c1:49:
         62:08:9c:16:18:64:f7:3e:ac:5a:7d:63:dc:ec:1e:5d:ae:4f:
         a0:38:aa:7c:fe:0d:59:bf:a7:5e:84:aa:a8:ee:a9:51:bb:75:
         32:ac:ba:b4:ae:cf:e5:86:68:f3:a1:8b:66:d3:7f:62:46:20:
         f8:97:b7:f6:d2:30:ac:fe:3b:39:92:a4:cf:0c:15:57:91:49:
         60:8b:02:d4:56:4b:be:7d:20:b2:af:9b:55:01:b8:67:77:90:
         06:20:f0:c2:50:d2:da:ad:03:51:f8:9f:4d:fc:d6:b8:8b:d3:
         3b:e9:c7:a2:8b:12:a7:f6:82:f1:96:a2:2f:e1:f3:34:b0:da:
         d1:05:d0:dd:81:85:4a:92:a1:04:66:5e:82:6b:ac:f8:26:05:
         14:e8:f0:e0:95:3e:e4:4f:e7:82:fd:a4:da:ba:14:1d:9b:90:
         c6:74:fd:8c:61:98:62:df:34:89:93:0f:fc:33:c0:12:1f:0e:
         e7:38:db:5c:3f:e1:d0:08:8c:d1:08:06:11:24:3b:92:2e:00:
         af:5b:8f:f5:20:b6:82:4e:a9:0e:c3:58:b8:7f:81:1b:c7:8e:
         17:5a:69:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:11:18 2025 by rpki-client