Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/03b401ca-d902-3849-accc-bd68ffcb57e8.roa
File:                     03b401ca-d902-3849-accc-bd68ffcb57e8.roa (raw, json)
Hash identifier:          jqykKntej5d/tOsAZlFaqC2lAuM2yiFRaVxwKkpMGg0=
Subject key identifier:   C2:78:A8:D0:CC:DE:A4:8B:E4:80:6D:20:20:9D:1E:BA:5C:D6:0F:25
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F43285849F17FC5352FF8EAFF1E03FE50
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/03b401ca-d902-3849-accc-bd68ffcb57e8.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     398787
IP address blocks:        45.40.144.0/22 maxlen: 24
                          45.40.148.0/22 maxlen: 24
                          45.40.152.0/22 maxlen: 24
                          104.238.68.0/22 maxlen: 24
                          166.62.104.0/22 maxlen: 24
                          166.62.108.0/22 maxlen: 24
                          166.62.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:c5:35:2f:f8:ea:ff:1e:03:fe:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=b6836d19-a1ba-472d-a30f-e8c7ae60eac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:de:5e:be:33:b0:cb:90:6b:ca:15:e9:72:d5:
                    56:87:65:85:3b:a8:d0:d3:62:3d:55:62:ab:34:68:
                    d0:e9:22:0c:23:96:60:3b:60:6b:7c:fa:b2:f7:ec:
                    01:0a:09:f3:ab:ae:59:05:bf:09:6c:ac:4d:5c:7a:
                    71:e5:16:5a:f8:f2:87:92:ac:52:63:6a:ab:b0:0c:
                    dc:a6:8d:bf:6e:c8:b7:44:62:f8:18:88:7d:1c:b5:
                    25:8e:5a:f1:43:02:9b:f4:91:61:d9:53:b3:23:97:
                    d3:8a:aa:58:6f:e2:44:57:36:08:ff:38:fc:2d:ab:
                    62:6c:5a:71:86:8c:fc:b6:06:9b:68:b4:23:0d:0c:
                    b5:13:b7:ff:30:d6:21:1e:30:72:fa:73:41:d5:39:
                    3d:ff:87:53:15:97:c5:0a:dc:b6:0d:91:85:bd:d1:
                    d6:30:ef:fd:3d:fd:de:3e:7b:4e:e0:f5:10:0f:84:
                    3c:6f:31:96:f7:eb:7f:a2:ea:e4:b6:1a:f4:04:55:
                    a7:cb:ec:d2:66:ab:02:fc:50:b9:d1:05:49:fb:14:
                    3a:75:73:ba:cd:9a:a9:36:33:49:5f:82:08:b2:58:
                    35:fb:0c:4a:fd:8b:c0:d0:7f:52:db:4d:d4:2a:5d:
                    0c:72:b2:61:01:8c:d8:38:85:50:4e:bb:8b:1f:10:
                    06:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:78:A8:D0:CC:DE:A4:8B:E4:80:6D:20:20:9D:1E:BA:5C:D6:0F:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/03b401ca-d902-3849-accc-bd68ffcb57e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.144.0-45.40.155.255
                  104.238.68.0/22
                  166.62.104.0-166.62.115.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:f5:da:32:06:13:b0:e2:a3:66:e7:f1:54:20:ef:f3:18:fd:
         96:39:71:42:e9:b3:5a:44:0d:21:7c:4a:4e:5c:05:37:70:dc:
         77:cb:d0:31:3b:0a:6f:da:a8:e3:d1:95:b5:44:6e:c4:7b:04:
         ae:01:f6:99:c8:42:8b:62:59:4b:e8:36:cf:1f:a9:23:60:ab:
         55:8d:bd:1d:20:e6:c0:ac:be:b1:84:07:a4:b5:1d:08:43:a2:
         dd:9d:6d:7d:c5:81:fa:66:eb:08:6a:75:1d:e6:65:e2:dd:29:
         3e:93:92:b4:ce:11:76:ba:c7:bb:eb:80:5f:30:2b:c9:37:fe:
         f5:aa:89:e2:15:31:b1:66:be:25:85:f3:f9:5d:10:3c:35:e4:
         9f:81:ad:7f:c4:98:d1:d4:a8:7d:c9:67:60:4b:71:c8:1d:a9:
         01:d8:67:1d:3f:9d:83:0b:b9:e7:82:f7:6b:d9:73:61:df:f3:
         c0:c7:bf:f6:18:8c:d8:01:20:b2:a5:3e:d8:7c:23:8d:fd:ab:
         5c:1c:12:dc:fa:87:c6:36:e2:8f:4c:98:73:fb:98:1e:13:ea:
         22:02:17:12:86:30:e8:0b:bf:f8:ba:c7:8a:72:37:b9:0b:6d:
         dc:52:86:6a:15:3c:f8:be:3c:1b:51:93:b4:8e:68:0f:58:45:
         4e:5b:63:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:29:37 2025 by rpki-client