Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/f5923c19-7db4-3e21-8a1b-9f543e9c953e.roa
File:                     f5923c19-7db4-3e21-8a1b-9f543e9c953e.roa (raw, json)
Hash identifier:          FqmOH74nDY3osLlNFjDljxXPIsw4LMkAoDTURVMghPE=
Subject key identifier:   DE:91:78:7C:20:EC:9C:2D:C3:9C:E4:C0:06:CE:67:C0:E7:3A:B9:71
Certificate issuer:       /CN=e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596
Certificate serial:       010D0C9F43285849CBCF98A269759AC61DE55F80
Authority key identifier: ED:4B:46:DC:16:7F:90:97:72:93:5F:B5:77:41:50:FD:92:5C:C3:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/f5923c19-7db4-3e21-8a1b-9f543e9c953e.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     394977
IP address blocks:        139.138.224.0/19 maxlen: 24
                          209.204.240.0/20 maxlen: 24
                          2620:132:f000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:98:a2:69:75:9a:c6:1d:e5:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=76b9612e-1816-42e5-acda-1827a970e833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:35:e9:69:1d:f1:52:a5:1a:22:c7:db:94:9c:
                    a9:94:be:58:c6:39:de:13:6a:b8:44:e3:39:83:99:
                    23:b4:6c:58:de:49:5a:e5:3d:a8:68:0e:2f:7c:5a:
                    aa:75:0c:2f:a3:e3:96:78:95:e2:3f:08:99:40:ba:
                    64:63:0c:6c:ef:f0:ad:20:71:af:97:52:a9:21:a2:
                    11:a2:7e:9e:13:fe:68:13:5c:aa:a6:51:29:d4:d7:
                    74:95:fc:39:b5:81:ae:5d:a7:be:4c:1a:f7:02:d8:
                    71:74:7e:37:11:3c:12:fa:23:f8:1b:1f:5d:32:04:
                    38:d3:c8:7f:c4:ec:ad:e4:e0:c2:40:50:d0:02:4b:
                    9a:69:27:e9:5a:13:d6:c4:30:ad:61:b4:df:10:43:
                    b2:2e:61:48:96:8a:2c:fc:92:97:d4:c7:fd:5e:c6:
                    1e:92:12:16:ae:88:79:63:7c:25:4f:cc:50:6f:62:
                    33:71:6f:08:64:b9:08:b5:0a:0a:56:67:40:93:37:
                    45:2e:59:99:db:07:f5:cc:39:9e:d0:a5:1a:b6:f1:
                    a7:f1:d1:82:df:b0:6c:be:0d:38:7f:bf:55:65:a6:
                    f5:f4:a2:79:a1:9a:67:d6:0d:8b:21:f0:b5:30:d0:
                    7d:44:e8:8f:74:ed:0b:a7:33:63:d6:c5:8e:b1:73:
                    b7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:91:78:7C:20:EC:9C:2D:C3:9C:E4:C0:06:CE:67:C0:E7:3A:B9:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/f5923c19-7db4-3e21-8a1b-9f543e9c953e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.crl

            X509v3 Authority Key Identifier:
                keyid:ED:4B:46:DC:16:7F:90:97:72:93:5F:B5:77:41:50:FD:92:5C:C3:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.138.224.0/19
                  209.204.240.0/20
                IPv6:
                  2620:132:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:b1:f5:af:a5:11:9d:67:f9:d5:17:a7:da:4b:f9:85:86:d8:
         0f:e7:c2:e6:7c:06:85:5e:5e:b7:31:21:f5:d8:ed:27:05:70:
         53:fa:dc:dd:c3:80:e7:a9:43:fb:08:b4:e3:bb:3b:93:9e:1b:
         86:ea:db:94:08:54:22:3b:6d:6c:1f:68:4f:9f:fe:cf:07:15:
         35:bf:43:07:cb:d5:54:ec:6d:87:1f:eb:62:91:a2:43:08:3f:
         dd:d7:d3:98:b2:3b:38:15:bb:9e:4b:d1:6b:4f:3d:bf:d2:6a:
         1b:96:ef:78:ba:39:7f:19:25:a2:89:e8:58:03:da:fb:4c:c4:
         5a:61:4e:28:37:c5:79:b3:b8:d0:92:51:14:3c:27:8a:b0:58:
         29:ce:87:75:0a:c7:7b:63:17:71:dc:ce:69:4c:d4:ad:4c:2b:
         41:db:ee:4b:51:af:ba:87:9c:28:26:fc:4d:71:99:29:d3:69:
         95:58:fe:5d:12:7b:49:de:7c:a7:28:5c:68:1f:27:1c:aa:fd:
         9b:48:90:d5:48:d7:00:e7:94:0e:14:90:51:8d:54:61:c4:6c:
         ba:0a:8d:17:57:d2:6f:ac:e8:d0:76:cc:0b:6d:be:d1:32:14:
         5b:dd:29:19:2c:9e:60:6d:25:31:97:56:0f:2d:6e:4c:bb:92:
         9a:a7:13:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:38:15 2025 by rpki-client