Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/c655fc5a-2609-3240-abf3-7db143f47639.roa
File:                     c655fc5a-2609-3240-abf3-7db143f47639.roa (raw, json)
Hash identifier:          XOTl+Q3g9kK95WDS+MLfm7wJJLmiAJ4zrmp197bU9gE=
Subject key identifier:   75:37:F5:F4:ED:60:32:06:87:FC:BF:7A:B6:AC:3D:E9:04:8B:D4:7E
Certificate issuer:       /CN=e4592d18-89a2-4b31-a14b-b5ea3eae2c4a
Certificate serial:       010D0C9F43285849E8BB6980630E45048A9DD200
Authority key identifier: 87:5F:A2:FF:E5:93:3B:B5:16:DE:44:BF:B9:3E:AF:BF:FD:FD:59:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/c655fc5a-2609-3240-abf3-7db143f47639.roa
Signing time:             Sun 20 Apr 2025 01:00:47 +0000
ROA not before:           Sun 20 Apr 2025 01:00:47 +0000
ROA not after:            Sat 19 Jul 2025 01:00:47 +0000
asID:                     3223
IP address blocks:        23.226.64.0/20 maxlen: 32
                          104.161.16.0/20 maxlen: 32
                          104.161.32.0/19 maxlen: 32
                          104.161.64.0/18 maxlen: 32
                          107.167.64.0/19 maxlen: 32
                          107.178.64.0/18 maxlen: 32
                          107.189.128.0/18 maxlen: 32
                          148.163.0.0/17 maxlen: 32
                          162.213.208.0/22 maxlen: 32
                          162.218.112.0/21 maxlen: 32
                          184.164.64.0/19 maxlen: 32
                          192.30.136.0/22 maxlen: 32
                          192.110.160.0/21 maxlen: 32
                          199.231.84.0/22 maxlen: 32
                          2604:6280::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e8:bb:69:80:63:0e:45:04:8a:9d:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4592d18-89a2-4b31-a14b-b5ea3eae2c4a
        Validity
            Not Before: Apr 20 01:00:47 2025 GMT
            Not After : Jul 19 01:00:47 2025 GMT
        Subject: CN=5c2f9b9e-9c56-4c11-8954-85bcc865dedf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a5:db:ed:05:79:e8:23:f6:4e:43:e7:8e:57:
                    3f:a8:cb:47:dd:de:8b:8d:ff:d4:43:13:e1:22:62:
                    65:0d:a7:3e:a6:b0:f4:e3:fc:7f:1f:b5:1c:92:38:
                    46:7d:75:13:e5:6d:0d:51:8e:bb:8c:ea:e5:2a:1c:
                    ca:7c:79:c2:d9:db:1a:13:b2:e5:b4:84:ad:d8:6f:
                    1e:ba:39:1a:b4:13:c5:a9:73:14:14:ab:44:99:27:
                    33:1d:a6:ad:52:83:a0:52:d9:4b:bd:b1:d1:69:07:
                    df:46:04:2a:d5:94:3d:1e:ac:1b:98:51:02:36:02:
                    6b:52:2f:e2:76:e2:8b:f2:bc:0a:06:ab:27:84:41:
                    27:43:2b:22:d5:87:73:6b:29:67:cb:6b:79:fb:9a:
                    b7:61:b2:34:a6:8c:bc:36:b4:39:c1:4f:9b:7c:56:
                    ea:8c:9e:fa:32:48:6c:40:26:94:29:62:e8:57:80:
                    29:e9:18:ff:0b:9d:12:31:21:29:20:65:b1:35:a8:
                    a7:97:14:68:33:b9:d0:21:e2:9a:84:be:08:e9:07:
                    d1:c0:06:04:08:79:70:3c:08:bd:32:b9:ab:b4:35:
                    a1:00:59:0d:73:4d:52:e8:a4:aa:5e:1d:81:4e:42:
                    6a:28:9e:0b:fc:9c:39:a2:d0:8c:99:05:89:44:fc:
                    0a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:37:F5:F4:ED:60:32:06:87:FC:BF:7A:B6:AC:3D:E9:04:8B:D4:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/c655fc5a-2609-3240-abf3-7db143f47639.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.crl

            X509v3 Authority Key Identifier:
                keyid:87:5F:A2:FF:E5:93:3B:B5:16:DE:44:BF:B9:3E:AF:BF:FD:FD:59:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.64.0/20
                  104.161.16.0-104.161.127.255
                  107.167.64.0/19
                  107.178.64.0/18
                  107.189.128.0/18
                  148.163.0.0/17
                  162.213.208.0/22
                  162.218.112.0/21
                  184.164.64.0/19
                  192.30.136.0/22
                  192.110.160.0/21
                  199.231.84.0/22
                IPv6:
                  2604:6280::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:30:d3:2f:2f:c9:1e:c6:ae:c9:d5:eb:09:a6:b3:a3:11:b0:
         48:00:bf:fd:0f:cf:6e:a9:95:9b:d2:d9:46:01:e8:ad:4f:11:
         ca:4b:2b:7e:0c:90:a3:0f:b5:b6:bd:ae:51:10:44:9a:e2:74:
         e8:e6:51:56:d9:ab:7c:fe:9c:9e:5d:b9:40:f9:fb:5d:a8:e6:
         14:d4:d9:0e:d9:fe:01:16:ad:98:37:f0:45:8e:2e:08:39:a7:
         73:4f:62:06:10:55:4f:6d:a2:cb:70:de:63:19:e3:74:8a:7b:
         c0:c7:ec:97:4c:bb:5c:25:df:75:75:a3:76:b0:2a:57:f4:9b:
         eb:5a:75:de:1c:3e:8f:d1:9a:f6:f6:72:93:cd:6f:f5:2b:e0:
         77:3a:23:25:e6:e5:b0:bc:6b:70:fc:5f:8f:02:9b:26:ad:cd:
         39:42:00:66:0c:9a:fc:31:4a:c8:dd:a6:8d:d3:dc:6f:cc:62:
         5a:bb:71:ce:19:79:f6:32:9f:05:a8:5e:74:8f:51:49:80:53:
         bb:fd:e0:63:b6:e3:25:51:6f:b7:6f:96:34:3a:c7:c9:91:0c:
         5f:aa:de:a6:66:df:c3:0f:5c:2b:71:c7:27:03:08:5f:14:4c:
         5d:cd:8c:e9:98:65:d2:9e:e3:37:73:90:c2:e5:7e:fc:3b:63:
         24:07:f5:b7
-----BEGIN CERTIFICATE-----
MIIGnDCCBYSgAwIBAgIUAQ0Mn0MoWEnou2mAYw5FBIqd0gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTQ1OTJkMTgtODlhMi00YjMxLWExNGItYjVlYTNlYWUy
YzRhMB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk
NWMyZjliOWUtOWM1Ni00YzExLTg5NTQtODViY2M4NjVkZWRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKXb7QV56CP2TkPnjlc/qMtH3d6Ljf/UQxPh
ImJlDac+prD04/x/H7UckjhGfXUT5W0NUY67jOrlKhzKfHnC2dsaE7LltISt2G8e
ujkatBPFqXMUFKtEmSczHaatUoOgUtlLvbHRaQffRgQq1ZQ9HqwbmFECNgJrUi/i
duKL8rwKBqsnhEEnQysi1Ydzaylny2t5+5q3YbI0poy8NrQ5wU+bfFbqjJ76Mkhs
QCaUKWLoV4Ap6Rj/C50SMSEpIGWxNainlxRoM7nQIeKahL4I6QfRwAYECHlwPAi9
MrmrtDWhAFkNc01S6KSqXh2BTkJqKJ4L/Jw5otCMmQWJRPwKiQIDAQABo4IDrjCC
A6owHQYDVR0OBBYEFHU39fTtYDIGh/y/erasPekEi9R+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lNDU5
MmQxOC04OWEyLTRiMzEtYTE0Yi1iNWVhM2VhZTJjNGEvYzY1NWZjNWEtMjYwOS0z
MjQwLWFiZjMtN2RiMTQzZjQ3NjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTQ1OTJkMTgtODlhMi00YjMxLWEx
NGItYjVlYTNlYWUyYzRhL2U0NTkyZDE4LTg5YTItNGIzMS1hMTRiLWI1ZWEzZWFl
MmM0YS5jcmwwHwYDVR0jBBgwFoAUh1+i/+WTO7UW3kS/uT6vv/39WYUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lNDU5MmQxOC04OWEyLTRiMzEtYTE0Yi1iNWVh
M2VhZTJjNGEuY2VyMHgGCCsGAQUFBwEHAQH/BGkwZzBWBAIAATBQAwQEF+JAMAwD
BARooRADBAdooQADBAVrp0ADBAZrskADBAZrvYADBAeUowADBAKi1dADBAOi2nAD
BAW4pEADBALAHogDBAPAbqADBALH51QwDQQCAAIwBwMFACYEYoAwVAYDVR0gAQH/
BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu
Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA
BjDTLy/JHsauydXrCaazoxGwSAC//Q/PbqmVm9LZRgHorU8RyksrfgyQow+1tr2u
URBEmuJ06OZRVtmrfP6cnl25QPn7XajmFNTZDtn+ARatmDfwRY4uCDmnc09iBhBV
T22iy3DeYxnjdIp7wMfsl0y7XCXfdXWjdrAqV/Sb61p13hw+j9Ga9vZyk81v9Svg
dzojJeblsLxrcPxfjwKbJq3NOUIAZgya/DFKyN2mjdPcb8xiWrtxzhl59jKfBahe
dI9RSYBTu/3gY7bjJVFvt2+WNDrHyZEMX6repmbfww9cK3HHJwMIXxRMXc2M6Zhl
0p7jN3OQwuV+/DtjJAf1tw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 18:49:22 2025 by rpki-client