Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/5740e15c-07e5-36df-9e46-fa5c298b8d0e.roa
File:                     5740e15c-07e5-36df-9e46-fa5c298b8d0e.roa (raw, json)
Hash identifier:          6RjDUcSOwYY+KdxxAH81c8z+iBccX/jnxi/lHdzWxuY=
Subject key identifier:   1E:54:FB:4A:AC:8E:D8:30:6C:6A:62:B9:3C:F4:59:4D:1D:D5:90:2B
Certificate issuer:       /CN=41b3b885-79da-40ed-ab0b-ce4a30f770db
Certificate serial:       010D0C9F4328584A7A4B3E7AF6CC2850FEF42700
Authority key identifier: D0:86:28:4A:65:DA:2D:21:42:61:27:16:EE:AE:44:F7:29:E6:DB:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/5740e15c-07e5-36df-9e46-fa5c298b8d0e.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     35280
IP address blocks:        192.136.176.0/22 maxlen: 24
                          192.136.180.0/22 maxlen: 24
                          192.136.184.0/23 maxlen: 24
                          192.136.186.0/24 maxlen: 24
                          192.136.187.0/24 maxlen: 24
                          204.10.44.0/23 maxlen: 24
                          204.10.46.0/24 maxlen: 24
                          204.10.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:3e:7a:f6:cc:28:50:fe:f4:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41b3b885-79da-40ed-ab0b-ce4a30f770db
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=573c97bc-cb16-4bf3-95db-f27c75a618ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e4:87:50:16:c9:71:74:17:03:a6:ad:39:d0:
                    7d:c8:33:1f:d7:38:06:90:01:b9:68:76:dc:a2:32:
                    80:28:c9:0e:fc:28:7b:75:1c:a2:b3:21:85:c8:c7:
                    af:0c:f2:49:1b:93:c7:b5:6d:ff:eb:3a:76:8a:84:
                    cc:05:e4:cc:71:bd:2c:85:c4:95:05:e1:b6:bf:90:
                    e3:d7:7a:bf:6d:ff:32:72:38:e1:ae:a4:5a:5c:fd:
                    ac:19:47:b5:b3:6d:80:14:85:d8:b6:ee:d0:a6:13:
                    d9:33:97:3e:92:17:88:33:af:d5:e1:23:15:92:52:
                    2b:b8:1f:7b:5f:d1:07:db:67:8a:45:cf:52:26:0a:
                    90:17:07:f4:d6:4a:b7:32:6c:28:f2:bd:28:81:c2:
                    86:14:62:85:b0:a4:2e:53:ca:0f:1a:97:56:7d:a7:
                    53:68:8e:52:03:f6:3b:7d:b8:21:2c:39:b2:68:4b:
                    c6:bb:6b:7e:a2:b6:28:12:3e:65:bd:86:d8:92:9d:
                    e3:ef:cf:5c:0a:0d:c8:57:3b:cf:3c:36:e4:a4:35:
                    b9:01:be:42:75:b5:b1:22:81:e9:1b:5a:2a:5a:15:
                    20:ed:ae:05:b7:4b:1c:02:2d:0e:4e:75:75:3a:6e:
                    b5:66:c1:f5:6b:39:b1:de:dd:dc:d8:98:bb:8d:78:
                    bc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:54:FB:4A:AC:8E:D8:30:6C:6A:62:B9:3C:F4:59:4D:1D:D5:90:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/5740e15c-07e5-36df-9e46-fa5c298b8d0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.crl

            X509v3 Authority Key Identifier:
                keyid:D0:86:28:4A:65:DA:2D:21:42:61:27:16:EE:AE:44:F7:29:E6:DB:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.136.176.0-192.136.187.255
                  204.10.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:8b:39:d2:a6:5a:22:08:53:8b:dd:aa:b6:78:89:9f:fa:6e:
         54:3a:04:22:6e:e4:1e:34:c2:48:f1:62:d1:44:2e:4d:4e:09:
         c7:d8:b6:1a:a3:31:06:8f:31:2a:80:f2:78:6c:20:eb:6f:b1:
         71:5a:92:67:50:c8:c1:b9:f4:b6:64:ae:85:33:b8:40:21:65:
         49:87:c3:ad:5b:80:15:79:32:aa:f4:90:f4:2e:c2:ee:61:1d:
         2c:c8:bd:bf:09:10:f8:91:49:66:1c:d4:80:41:7b:99:31:50:
         7a:2c:0d:b4:b4:25:23:d9:0b:f2:a3:b9:e9:90:c6:3c:f3:9a:
         3f:df:74:5a:05:3b:33:b4:d8:17:74:fb:df:64:c8:7c:72:31:
         96:f3:f7:03:a6:01:ae:10:8d:8c:16:fb:54:78:29:93:3b:55:
         5b:77:5b:74:1a:be:33:b4:8e:29:99:ba:d9:8e:81:37:31:b6:
         c4:9a:d5:d1:ce:25:e1:72:16:5e:5e:b3:ab:b9:42:07:50:7d:
         1d:ee:90:1b:8d:d9:1f:b6:10:b4:fd:d7:a1:d6:ff:7a:88:4b:
         eb:9c:ad:eb:e0:5d:75:f2:c4:df:11:68:20:62:e1:d8:0f:15:
         92:7f:5f:da:75:51:ee:3b:c7:36:a8:8f:32:bd:e5:ed:26:3a:
         f9:1d:7c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:48:29 2025 by rpki-client