Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/ef450639-e6ba-33a7-8d48-aec62dc91a89.roa
File:                     ef450639-e6ba-33a7-8d48-aec62dc91a89.roa (raw, json)
Hash identifier:          fLNm7cPE/t0VzdKWgEcC0TpA618U1xp9aW3bUD9X98Q=
Subject key identifier:   AF:9E:F2:A6:E6:B6:32:EF:C7:AB:83:6E:D3:80:B1:17:15:57:7C:84
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584A78E5F42EA41C03327BE9D300
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/ef450639-e6ba-33a7-8d48-aec62dc91a89.roa
Signing time:             Thu 10 Jul 2025 13:01:02 +0000
ROA not before:           Thu 10 Jul 2025 13:01:02 +0000
ROA not after:            Wed 08 Oct 2025 13:01:02 +0000
asID:                     394089
IP address blocks:        128.77.0.0/18 maxlen: 24
                          128.77.64.0/19 maxlen: 24
                          130.41.0.0/18 maxlen: 24
                          130.41.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:78:e5:f4:2e:a4:1c:03:32:7b:e9:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jul 10 13:01:02 2025 GMT
            Not After : Oct  8 13:01:02 2025 GMT
        Subject: CN=aa84b925-5c31-4c76-8bd3-8e965d5583b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:15:4a:8b:b7:dc:94:99:25:eb:c8:02:8a:2a:
                    8d:b9:40:80:26:6e:f8:7b:04:8c:4d:2d:a7:94:29:
                    70:ee:dc:64:ad:5b:ca:60:d7:27:cf:98:7d:27:6d:
                    b0:d8:fd:7e:93:40:e3:be:01:68:19:06:06:0a:8c:
                    32:83:d2:d6:06:c8:57:2a:18:31:b4:42:b4:05:47:
                    9b:bf:25:50:61:48:bd:d4:91:39:d3:d1:39:02:ee:
                    eb:5d:fb:2e:5f:6e:c6:18:78:e3:a9:a0:fc:ff:56:
                    d1:a6:ca:dd:e7:85:4b:da:92:73:bf:6c:2a:3a:2d:
                    6f:fd:0d:d8:20:fa:f7:17:b3:75:a0:ce:02:52:db:
                    2a:e8:35:21:ca:f7:05:36:56:bd:67:69:84:0b:8f:
                    17:6a:9d:42:a4:8a:68:99:b5:4a:bb:a5:69:ab:50:
                    83:6b:97:0e:fb:2c:54:c8:1d:33:92:6f:eb:5f:53:
                    86:08:9d:29:ea:48:42:35:20:dc:16:36:9c:e0:91:
                    7a:35:a0:5a:03:9e:39:dd:ed:00:e5:d4:7b:a1:1b:
                    a1:f1:92:c9:52:77:db:1e:94:7c:5a:0e:22:13:00:
                    0e:93:4b:cf:29:01:3c:17:c9:3c:e9:c7:a1:cd:03:
                    02:64:f0:79:3f:0f:cd:a9:44:a6:0b:d3:60:05:e7:
                    0c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9E:F2:A6:E6:B6:32:EF:C7:AB:83:6E:D3:80:B1:17:15:57:7C:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/ef450639-e6ba-33a7-8d48-aec62dc91a89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.77.0.0-128.77.95.255
                  130.41.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:18:04:6d:89:6b:f4:94:9c:cb:bf:7f:56:fa:b2:ae:a8:70:
         94:78:42:d9:e6:0c:21:91:c9:11:44:f8:85:e3:ac:6f:db:0c:
         01:31:07:aa:c2:9e:81:09:34:5d:a6:10:99:7b:b3:12:ed:a1:
         b2:fa:c9:75:64:0b:f6:09:e0:31:bf:66:7e:d8:53:9f:09:da:
         34:0a:cd:cb:26:10:d1:87:ba:59:20:7a:79:53:fd:08:5e:90:
         7d:76:84:3f:cc:be:ba:90:83:cd:5a:a4:99:2e:e0:c9:87:7d:
         bb:f9:1a:69:3f:aa:fe:63:69:28:e7:87:ad:99:2d:e9:c6:73:
         73:09:4d:09:e4:c5:8f:da:d9:e2:09:91:18:f0:6b:a3:50:8d:
         95:94:45:70:dc:d2:2f:ac:42:5f:b9:93:a1:b1:6d:d8:6a:41:
         0e:04:f4:86:18:b9:92:05:55:87:ef:25:dd:5c:02:a0:47:84:
         2e:d3:b9:91:06:7c:cb:3b:30:3f:78:ca:07:7d:b8:46:dd:50:
         41:3a:dc:83:e0:45:b4:c9:71:f6:41:3d:f5:5d:f1:43:17:c2:
         d6:99:bd:f9:f5:4f:6b:fe:e6:ac:07:18:8e:bb:b7:36:46:9a:
         48:0f:27:b0:e5:79:12:d4:87:fc:e3:61:bc:0c:4f:0c:77:d3:
         5c:f6:7c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:52:17 2025 by rpki-client