Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/452d737c-1940-3b07-912f-e2cacd96cbec.roa
File:                     452d737c-1940-3b07-912f-e2cacd96cbec.roa (raw, json)
Hash identifier:          ZuP71qAlpJEDxRiIhjvXubgNzkVb16WxpqVcvgKanYU=
Subject key identifier:   39:DD:77:59:AF:CF:4D:91:F1:10:37:D9:E9:D0:9B:7E:1C:2B:AA:5F
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584A1F90251B10A287920952A5C0
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/452d737c-1940-3b07-912f-e2cacd96cbec.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     212238
IP address blocks:        98.159.40.0/24 maxlen: 24
                          173.239.200.0/23 maxlen: 24
                          173.244.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:25:1b:10:a2:87:92:09:52:a5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=81c2a640-5b8e-4f65-93f0-d25320d0afba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:88:ef:3f:6a:81:ad:68:f0:b3:e8:6c:77:57:
                    56:ee:17:e1:5f:df:fb:38:69:54:11:a5:98:3e:b8:
                    7e:4d:8d:ee:06:e9:ba:a7:16:a3:62:19:a5:ad:1d:
                    e7:9a:13:37:02:04:d0:ee:04:01:df:94:45:35:7a:
                    41:d8:f4:46:c7:81:5f:20:dc:6d:f0:7c:93:fb:80:
                    4a:f3:58:6e:7f:eb:5a:ef:be:ad:77:9e:a0:29:3c:
                    78:90:59:a1:ca:43:52:2b:1a:42:2b:24:10:bf:4a:
                    01:0a:58:33:b0:3e:d6:a2:35:e3:13:c3:e1:55:d0:
                    b0:1f:3f:07:46:8c:2f:3c:4b:54:b9:4a:55:54:c3:
                    9f:b8:fb:3f:fb:72:97:14:b0:4f:fc:94:a5:b9:6a:
                    c2:f3:8a:16:04:e4:6b:32:84:db:f4:06:f7:41:39:
                    68:83:ac:46:23:30:7e:f2:21:57:7d:76:89:26:5d:
                    cc:bb:b7:fc:23:06:bb:0f:1f:5a:98:20:dc:14:e9:
                    b7:e7:c7:95:29:44:f7:25:64:3c:b9:ad:5c:74:90:
                    ea:c3:d6:ab:e4:6c:f8:15:b4:93:cf:de:c9:fa:fb:
                    e4:9b:3d:e9:74:55:d7:45:7a:6d:6a:e1:7b:12:33:
                    47:c6:58:8d:6c:f0:23:d5:12:26:63:b2:15:2a:ad:
                    c5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:DD:77:59:AF:CF:4D:91:F1:10:37:D9:E9:D0:9B:7E:1C:2B:AA:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/452d737c-1940-3b07-912f-e2cacd96cbec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.159.40.0/24
                  173.239.200.0/23
                  173.244.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:7b:07:02:04:3b:38:f2:01:0a:2a:69:f1:7b:fc:1e:1e:e2:
         5b:9b:1f:59:ae:cb:5c:b0:71:4f:87:48:a5:c7:34:7c:92:5b:
         9d:a2:e6:7a:d9:07:49:83:11:84:eb:93:d2:a4:85:6d:ce:88:
         ec:dc:76:5e:d5:7e:93:01:73:c5:8a:28:ea:cc:f7:93:cc:c9:
         2b:d1:cd:46:7e:a1:23:29:f8:fc:8e:ae:69:34:13:69:20:e3:
         fa:1d:70:b9:8e:35:a3:b5:18:5a:86:65:95:9f:66:e2:ed:83:
         ad:96:5d:ba:55:f5:82:0b:87:07:d6:2d:e0:01:7c:2a:a7:5b:
         b1:11:f2:e6:9e:46:f2:61:a3:6b:53:4d:78:07:66:0e:2a:1e:
         94:6a:22:ce:03:89:98:ef:c0:6f:7b:49:d8:d5:0c:f3:1d:7d:
         61:6e:4d:f7:d2:11:6c:27:0d:ab:58:88:2a:f7:bc:10:2e:d5:
         bf:6e:c3:55:57:ae:e2:c6:ec:0f:2c:cc:8d:16:bc:54:f7:dc:
         37:62:de:98:e5:cb:92:f7:4d:63:af:4d:8b:13:e8:3e:13:38:
         ef:14:e4:54:58:ee:97:3d:54:5d:c1:67:08:11:8f:de:4f:04:
         54:ed:85:86:5a:26:37:3c:64:33:bc:fd:26:70:b9:19:9d:00:
         e1:32:7f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:30:11 2025 by rpki-client