Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/9d6f3d34-d5ce-3f30-b11a-e8b0df400ed1.roa
File:                     9d6f3d34-d5ce-3f30-b11a-e8b0df400ed1.roa (raw, json)
Hash identifier:          EGFCoccBrPsgFukkweC2kD5xJ7++z90FZFN3LFe+8XI=
Subject key identifier:   53:F1:D0:7B:82:3D:88:22:E0:4A:13:10:66:F2:DB:73:48:7F:16:6A
Certificate issuer:       /CN=91b93de6-6446-4623-a181-5425af4f85cb
Certificate serial:       010D0C9F43285849806F1C80B2C1A0B578377E20
Authority key identifier: FF:17:C4:E9:06:5A:45:02:E5:72:C0:A9:7E:3D:59:08:C6:24:D3:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/9d6f3d34-d5ce-3f30-b11a-e8b0df400ed1.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     36459
IP address blocks:        140.82.112.0/20 maxlen: 24
                          143.55.64.0/20 maxlen: 24
                          192.30.252.0/22 maxlen: 24
                          2620:112:3000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/91b93de6-6446-4623-a181-5425af4f85cb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/91b93de6-6446-4623-a181-5425af4f85cb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:1c:80:b2:c1:a0:b5:78:37:7e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91b93de6-6446-4623-a181-5425af4f85cb
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=618ffaea-c67a-4456-8788-1de42fea38c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:33:f4:0a:6d:cd:27:53:dd:c0:36:ed:bf:49:
                    5a:7e:07:72:cb:ac:5b:92:1d:74:13:5f:59:cf:2c:
                    3c:16:9a:96:3b:b1:56:ed:95:f3:4b:cd:7e:95:74:
                    06:ad:e3:6a:99:24:7b:36:5e:3d:b5:ab:4c:9d:58:
                    80:5b:5a:4c:f3:d3:5c:f7:2e:a8:1e:a8:ee:ee:7c:
                    8e:94:a6:db:5a:03:14:78:6d:4c:b8:38:8a:67:75:
                    24:49:e5:12:cb:e0:79:13:b6:08:44:1c:a9:e6:6f:
                    88:bc:53:8b:b0:cd:e0:90:58:21:b4:48:e4:d1:fb:
                    c0:54:0f:27:d0:db:3a:ad:8b:95:78:37:f4:45:40:
                    e9:c5:cb:ed:1d:3d:c2:e7:8c:8d:79:0e:90:47:da:
                    61:27:e7:f2:2c:8d:72:7c:ca:a3:df:8b:c3:94:ee:
                    10:1c:8d:b5:8f:7a:42:59:db:42:17:29:df:dd:7f:
                    c6:3c:36:c6:45:cc:b7:bc:b0:ab:5c:9c:78:7e:fc:
                    0e:c0:d3:7c:b7:33:7c:9b:ae:ee:02:cd:96:27:06:
                    34:94:ab:2b:14:db:e6:1a:28:e5:83:f8:2e:f2:5f:
                    68:27:9f:59:cc:a7:1d:71:57:93:fa:0c:3d:68:6d:
                    7b:f9:f7:fb:15:05:2d:09:96:30:49:07:4b:54:ce:
                    e1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F1:D0:7B:82:3D:88:22:E0:4A:13:10:66:F2:DB:73:48:7F:16:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/9d6f3d34-d5ce-3f30-b11a-e8b0df400ed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/91b93de6-6446-4623-a181-5425af4f85cb.crl

            X509v3 Authority Key Identifier:
                keyid:FF:17:C4:E9:06:5A:45:02:E5:72:C0:A9:7E:3D:59:08:C6:24:D3:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.82.112.0/20
                  143.55.64.0/20
                  192.30.252.0/22
                IPv6:
                  2620:112:3000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:da:bc:8a:36:08:f6:48:2e:81:c6:2a:df:01:cb:fd:02:ff:
         61:28:0c:66:99:43:11:ed:24:1d:e2:75:0d:53:2b:21:b1:b2:
         5a:ef:82:c6:65:32:ef:ce:3c:69:d7:6c:20:25:fe:1c:b0:c2:
         35:ba:eb:11:95:30:db:75:67:7f:60:0e:87:49:c9:10:4f:8f:
         85:dd:6f:9d:76:1b:7d:58:5b:04:6c:79:5c:e8:70:97:72:c9:
         9a:81:7c:51:ee:1d:c7:3c:ed:50:f9:36:4d:c3:f9:fb:9b:c6:
         8a:38:b8:06:0a:bd:75:46:b9:b6:dc:8b:ac:b9:41:a8:23:7d:
         7b:f6:7f:61:d9:e5:d4:de:9e:10:e8:06:51:66:55:ba:9d:33:
         fc:04:5d:66:82:36:88:34:a8:10:57:02:cf:05:90:33:e6:ed:
         ce:e7:af:63:c2:54:31:a8:42:f0:3a:f7:0e:6d:78:18:c2:3b:
         5a:a6:ee:59:13:57:6e:1a:dc:26:ed:28:49:ad:01:19:2a:a2:
         8a:76:9f:c1:27:4b:08:00:96:62:63:b3:a4:e0:4b:11:c3:fc:
         fb:80:57:57:f1:3c:c5:ad:32:2a:3b:38:b3:91:b1:e2:9f:08:
         0f:a1:e5:31:e3:a6:ce:cd:eb:42:ab:34:77:78:03:47:4b:6a:
         e0:c2:41:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:14:31 2025 by rpki-client