Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/b413cd71-bff2-345b-b513-fd6b5bedc8f4.roa
File:                     b413cd71-bff2-345b-b513-fd6b5bedc8f4.roa (raw, json)
Hash identifier:          UvM4pYLTZaXdXiLc1Uvxtm4WvI5xLE0eSCoJjFqPJ5Y=
Subject key identifier:   8D:C5:65:5B:45:8B:6B:F6:5A:FB:95:E8:22:13:19:47:FC:54:8C:8D
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584A8575F64E0D9CB83962681F90
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/b413cd71-bff2-345b-b513-fd6b5bedc8f4.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     46606
IP address blocks:        50.87.0.0/16 maxlen: 24
                          66.147.240.0/20 maxlen: 24
                          67.20.64.0/18 maxlen: 24
                          69.195.64.0/18 maxlen: 24
                          70.40.192.0/19 maxlen: 24
                          74.220.192.0/19 maxlen: 24
                          162.144.0.0/16 maxlen: 24
                          162.214.0.0/15 maxlen: 24
                          162.240.0.0/15 maxlen: 24
                          173.254.0.0/17 maxlen: 24
                          198.57.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:f6:4e:0d:9c:b8:39:62:68:1f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=253d4f46-7b38-4592-87b5-fd915efbdaaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:00:5c:40:01:38:b4:84:78:83:31:51:b0:d4:
                    9e:c8:95:41:1f:1c:66:77:04:b2:02:af:f7:d2:cb:
                    6e:f2:41:07:f5:c5:c7:7e:1a:d3:d8:86:6b:78:5a:
                    5b:48:b7:57:9b:db:ac:a5:80:b3:eb:cc:30:23:b0:
                    0f:e1:88:4c:af:ca:4c:e9:04:eb:b7:4a:5e:20:1d:
                    d8:28:ab:8d:92:86:d2:11:3e:53:da:d6:1d:d1:3e:
                    2b:55:80:cf:58:90:c4:80:c9:f7:78:a8:ec:33:c2:
                    a9:7c:07:8f:a2:fd:65:dc:5d:ff:80:a1:4a:ba:a2:
                    8f:ba:9a:b6:77:ff:ef:7e:c0:61:6b:c4:ac:9e:3d:
                    8c:d1:f2:ed:b5:91:47:ce:3c:9e:71:1a:f0:50:22:
                    9c:25:a3:92:4c:9e:30:38:b2:98:95:92:ac:13:2f:
                    a4:76:62:6b:fb:cb:32:44:46:cb:ad:a1:09:8c:90:
                    88:91:53:93:68:42:69:4b:b1:6f:a3:8a:3d:75:19:
                    78:c8:32:40:33:36:cb:3d:dc:ea:e0:5e:ef:a8:b2:
                    b0:c9:fe:fa:e0:52:d9:50:66:9a:7f:f2:84:1c:04:
                    d1:e9:aa:ff:cb:13:31:3a:b8:94:08:a2:6b:7a:5c:
                    19:80:bd:2f:e3:19:25:05:34:77:62:3c:b7:c1:38:
                    da:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C5:65:5B:45:8B:6B:F6:5A:FB:95:E8:22:13:19:47:FC:54:8C:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/b413cd71-bff2-345b-b513-fd6b5bedc8f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.87.0.0/16
                  66.147.240.0/20
                  67.20.64.0/18
                  69.195.64.0/18
                  70.40.192.0/19
                  74.220.192.0/19
                  162.144.0.0/16
                  162.214.0.0/15
                  162.240.0.0/15
                  173.254.0.0/17
                  198.57.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:3d:ea:9f:f8:c4:b6:6a:2e:c3:e0:31:74:5d:7e:1f:ed:1b:
         14:0b:b8:1a:50:62:37:a9:49:6d:42:90:af:fb:a0:51:4e:f0:
         db:30:97:5a:82:2a:35:84:27:9c:6f:00:ba:c4:80:55:b9:20:
         a8:f1:86:7c:a3:cb:0b:de:5d:38:d6:bd:0f:ca:3a:29:fa:be:
         99:c1:c2:61:a5:61:2d:f8:8a:55:5a:54:81:35:1f:8e:9d:12:
         59:a2:4c:94:46:9d:72:8f:1c:15:08:04:1a:30:28:12:a2:bd:
         1e:ad:6d:fd:46:a2:c1:38:c0:1c:8b:d7:2a:3e:a5:be:fd:3c:
         f3:30:c2:bc:7d:00:d2:9c:dd:e0:33:cd:d2:97:31:1a:e2:57:
         5d:08:65:9b:b9:6c:64:8e:a5:8f:35:fa:02:e3:ed:5a:93:cd:
         7e:57:e3:4a:51:5b:2d:10:51:01:50:19:ac:80:7a:78:db:fc:
         a1:93:17:95:97:5e:61:58:1f:f2:fd:67:3f:31:d6:f9:51:b9:
         b8:c4:23:2b:44:50:37:53:2b:eb:87:db:95:9e:cb:1c:23:73:
         45:77:d1:67:05:1e:4f:f5:42:bf:cf:4d:48:22:69:3e:99:c9:
         98:33:f5:fa:c4:66:35:83:a5:bd:54:d6:f3:60:9e:7f:a1:99:
         27:0d:bb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:06:11 2025 by rpki-client