Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/bcaa27c7-bc51-3093-a5ee-031b2635ed1c.roa
File:                     bcaa27c7-bc51-3093-a5ee-031b2635ed1c.roa (raw, json)
Hash identifier:          3bdclZAUSezPgKceRoRBuNE1eQLwIwsLYjP2x7gK8j0=
Subject key identifier:   47:3A:EB:F3:3B:AD:09:8D:59:28:C4:96:FF:B8:A6:BE:0C:6B:62:18
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285849E7BA7147DA1CD2D47DAF7B80
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/bcaa27c7-bc51-3093-a5ee-031b2635ed1c.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        165.1.172.0/22 maxlen: 24
                          165.1.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:71:47:da:1c:d2:d4:7d:af:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=0d7d8c09-8512-41d4-b3db-111e4a82189a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:12:e7:08:ed:9b:c0:04:05:3f:c3:5a:f9:b4:
                    8e:69:27:7c:b1:4a:c1:11:ed:a9:40:40:23:43:ce:
                    3f:19:c5:03:be:f3:fd:43:12:92:d9:d1:ea:7b:06:
                    2c:7e:44:6d:84:c7:44:5e:46:2f:dd:2c:8a:e0:9c:
                    07:e7:bf:72:5c:28:df:f7:a8:f3:d0:cd:f3:09:14:
                    99:ff:34:9c:a5:2e:18:70:fc:ca:f1:37:50:08:d4:
                    70:14:39:25:44:fe:2e:94:ad:23:c5:69:cf:d0:b5:
                    a0:ec:c7:1f:35:67:af:1a:54:23:29:a9:7a:91:22:
                    fa:ad:0e:49:65:d0:76:1e:b2:e6:83:6a:40:8c:8d:
                    ac:99:08:88:85:b3:b9:63:f1:6a:2f:d6:37:a4:27:
                    87:a5:55:70:46:98:d3:47:04:84:16:6d:62:94:d7:
                    70:e7:35:f3:58:67:9b:05:df:28:e2:0f:61:8f:84:
                    5a:77:7c:20:d6:e1:af:79:19:5f:05:7d:74:b6:0f:
                    d8:93:1c:b1:db:fe:4d:b8:37:6f:3d:6e:80:ef:1d:
                    7a:a6:81:9f:46:6a:cb:87:92:4e:26:87:fb:37:e8:
                    4d:61:1b:c5:7b:46:a8:d2:c1:3b:e5:17:6d:c3:d0:
                    87:a1:eb:8e:fa:49:1c:ba:ab:99:fb:0e:26:0e:ab:
                    e2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:3A:EB:F3:3B:AD:09:8D:59:28:C4:96:FF:B8:A6:BE:0C:6B:62:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/bcaa27c7-bc51-3093-a5ee-031b2635ed1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.1.172.0-165.1.191.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:66:9e:5f:63:53:c5:f6:3e:4f:79:f4:32:5a:c0:35:6b:5c:
         4f:6a:41:18:e7:89:f5:aa:2d:65:16:99:9f:46:d8:dc:64:c2:
         dc:fd:36:99:4a:f1:2c:21:fa:8c:52:46:3e:21:d9:e4:f7:4e:
         60:83:94:e5:f0:6b:c9:83:d6:d9:85:b6:eb:60:f8:e5:26:46:
         4b:36:1c:d3:ba:52:9e:db:4f:e3:40:2b:23:11:4f:b2:45:bf:
         37:ce:42:51:d8:69:c1:d0:48:a1:c3:f2:70:0a:72:d3:f0:3d:
         7f:d5:b0:c0:56:41:78:cb:67:98:3b:68:d4:ec:9f:6e:e4:3c:
         7f:77:d8:31:8f:c2:ac:44:20:a0:e9:28:03:e6:a5:c1:48:8a:
         0b:aa:52:44:ab:6e:90:bc:31:a7:0c:be:2b:47:fc:8f:f2:d6:
         43:74:e7:51:05:2f:5e:88:8d:35:c7:eb:af:dc:35:97:df:91:
         85:51:55:e0:68:00:0d:7e:13:d3:3d:9f:d9:97:5a:15:69:48:
         d5:b8:9c:40:80:be:87:f9:af:bd:b5:5e:03:54:41:63:02:25:
         d7:8c:65:de:59:97:cc:cd:ec:93:75:3e:3a:12:08:2b:cb:81:
         74:8f:2c:8e:0d:d9:1c:0e:f4:01:dc:8d:87:1c:55:93:8c:26:
         41:e7:f5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:13:48 2025 by rpki-client