Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/bffef6b6-ccf9-35fe-b95a-1318c36e1cc8.roa
File:                     bffef6b6-ccf9-35fe-b95a-1318c36e1cc8.roa (raw, json)
Hash identifier:          DQK1qj0tmnp6EjxCjktxt74Ukgm+kbysadNdX+w1jcU=
Subject key identifier:   74:C0:66:98:02:49:29:83:DE:2C:98:50:D9:BB:F4:78:77:01:0F:E9
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285849F7150A9CCA4E324FCE836600
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/bffef6b6-ccf9-35fe-b95a-1318c36e1cc8.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     396982
IP address blocks:        134.231.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:0a:9c:ca:4e:32:4f:ce:83:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=74c432a5-797a-4668-bcc1-b3e38d8446fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:3f:5a:bd:82:da:de:9c:4b:51:47:75:63:1a:
                    dc:e3:0e:1e:be:39:22:af:ff:c6:c4:b9:9e:c2:72:
                    02:88:9f:96:fd:95:a1:c6:0f:d6:02:45:41:fb:91:
                    d7:bb:77:36:73:90:f6:fb:60:fb:f2:03:2e:f2:ad:
                    4c:f4:70:a2:76:f7:d1:90:e9:8c:a9:de:48:d2:05:
                    cb:8f:63:30:bb:5e:b6:f4:0e:24:a9:fc:a7:43:9f:
                    d6:d8:5d:df:50:c6:71:ea:77:b0:1f:a3:d6:ad:04:
                    00:44:89:bb:3f:98:1a:d3:16:20:ec:dc:d4:79:c5:
                    f2:c9:88:0b:e7:8d:17:12:44:95:bb:d5:21:01:59:
                    27:5e:e6:99:3d:a9:5e:d1:b7:45:2a:13:0c:b2:35:
                    96:8c:2d:ed:82:5d:7e:e9:d5:4b:a1:c2:e5:11:f5:
                    ae:2f:0f:26:64:71:a7:21:91:38:ee:74:44:53:a2:
                    04:2f:d5:8c:5e:f4:35:0d:f1:68:fb:9d:17:72:a2:
                    87:f0:4b:0e:6d:b5:54:24:58:ff:d7:9e:16:0a:44:
                    92:a6:35:63:3d:4c:bc:87:33:75:07:db:21:39:5c:
                    7e:cd:db:8e:5b:2a:0f:bc:fd:64:68:be:10:02:bc:
                    fe:11:ff:4a:f7:06:17:55:c4:2d:de:35:dc:90:48:
                    3d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C0:66:98:02:49:29:83:DE:2C:98:50:D9:BB:F4:78:77:01:0F:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/bffef6b6-ccf9-35fe-b95a-1318c36e1cc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.231.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e0:f6:b2:d6:45:16:d6:a1:c5:1c:00:1c:9a:c8:b5:74:bb:19:
         f1:1e:71:21:5c:62:e5:b5:1d:d1:b2:e8:45:f5:f8:ca:b2:c3:
         88:3c:d4:69:68:84:c2:8c:a4:42:7b:39:fe:25:16:9d:f8:6d:
         9f:85:36:fc:6e:75:d1:72:b8:ba:10:24:49:07:cc:fb:5f:4e:
         db:87:06:b4:32:5c:1b:78:ac:b3:f0:22:a5:82:0f:dc:d0:54:
         56:0e:01:c7:bb:08:2e:89:56:3d:f5:b5:cb:4d:17:e2:13:35:
         a6:1d:2d:90:c6:38:35:44:50:f9:41:56:e0:eb:24:21:0b:ef:
         7a:48:97:93:ec:55:0e:27:9a:fb:fc:55:75:87:7f:04:c4:4a:
         09:9a:35:d3:91:69:9d:d1:a9:e9:0c:58:78:79:13:05:77:f7:
         b6:b2:ce:9f:e3:b4:ac:23:91:a5:3e:c8:86:89:9d:f2:ca:55:
         63:07:24:0e:af:8d:9e:6b:02:a6:5e:04:1f:b4:f4:55:af:d2:
         9c:78:41:34:c2:a1:ab:c5:34:3f:c3:b6:b4:52:84:9e:81:35:
         33:dd:da:ce:3c:c5:88:8a:a8:d1:19:9b:4a:19:f4:e8:cf:cc:
         48:aa:a3:15:63:4c:6b:0b:78:37:31:c0:ee:b4:c5:76:e1:f4:
         a7:50:5b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:16:26 2025 by rpki-client