Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/05d7b731-ce40-32bc-8ab4-8af6aa41f180.roa
File:                     05d7b731-ce40-32bc-8ab4-8af6aa41f180.roa (raw, json)
Hash identifier:          A0aEUyFRTS1kMO636mPYvR2/RFfOn3ipZrEfD350MgU=
Subject key identifier:   4D:98:6A:A6:42:27:73:00:0A:44:A9:62:85:87:34:FE:48:AC:1B:4F
Certificate issuer:       /CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
Certificate serial:       010D0C9F4328584AB91B95DD51F8F69D1ACF1C80
Authority key identifier: 10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/05d7b731-ce40-32bc-8ab4-8af6aa41f180.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     16509
IP address blocks:        104.192.137.0/24 maxlen: 24
                          104.192.140.0/24 maxlen: 24
                          104.192.141.0/24 maxlen: 24
                          104.192.142.0/24 maxlen: 24
                          104.192.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:95:dd:51:f8:f6:9d:1a:cf:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=6fdadee5-f6ca-4eb4-87f7-68db5e8fa5fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:25:41:8d:b2:f5:67:e3:46:cb:1d:b7:3e:55:
                    f2:dc:7b:25:90:67:5e:0b:38:27:59:18:97:39:e1:
                    93:b7:f9:57:2e:18:11:7e:ac:0e:f0:44:25:de:6d:
                    b7:e6:81:b1:82:7c:f3:77:ce:a3:fa:a6:e9:75:de:
                    7f:98:96:d0:93:ba:55:66:5b:3f:e9:6b:97:44:d2:
                    13:9d:22:53:08:99:97:29:53:1c:e2:bf:e9:25:3d:
                    9c:ce:59:01:c3:25:8b:b8:b9:f6:94:1f:2e:51:af:
                    e8:22:4d:f8:65:ed:06:28:23:e2:ca:2b:d7:82:ba:
                    93:9d:4d:fd:db:d2:6a:72:88:45:76:b3:b6:b4:d5:
                    51:12:18:e7:0f:76:a9:d4:60:64:69:b3:39:ce:a8:
                    dd:93:ef:2f:bc:62:ea:1f:61:9a:5e:b5:23:d7:53:
                    b3:5d:7e:24:dd:35:3f:aa:bb:19:85:7c:20:7c:c3:
                    f5:7b:99:d7:e7:40:f5:87:ad:b9:a2:7f:32:0a:b4:
                    c4:1f:87:a3:c9:95:6b:a2:4a:12:04:5e:54:08:b8:
                    de:ff:16:0f:fb:83:cc:45:10:f9:29:f2:db:c2:a5:
                    ae:0c:29:92:5e:19:ed:7f:3b:9b:27:9b:6a:c2:3c:
                    53:a3:cf:9e:e6:20:b8:9d:5b:a0:30:c7:65:6d:a2:
                    2f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:98:6A:A6:42:27:73:00:0A:44:A9:62:85:87:34:FE:48:AC:1B:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/05d7b731-ce40-32bc-8ab4-8af6aa41f180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl

            X509v3 Authority Key Identifier:
                keyid:10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.137.0/24
                  104.192.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:b3:fd:37:bd:da:56:b5:ce:96:60:c9:06:83:2d:30:7e:6f:
         e6:63:62:a6:50:23:9e:16:03:b4:77:02:21:66:4f:60:2f:16:
         a4:90:84:03:dc:f5:b9:3b:96:f0:cf:29:77:43:14:7b:29:6b:
         8a:33:7c:19:d3:e4:1b:c1:2f:87:d0:7e:00:cb:1c:9c:25:5b:
         1e:c6:3d:25:42:b7:3c:05:24:93:c7:1d:c8:9c:41:af:73:9c:
         98:18:0d:95:d1:5f:d5:b5:1f:98:97:92:3f:f0:f6:01:e2:58:
         fb:22:45:1e:62:44:8b:5b:b5:81:ac:cf:57:89:76:bd:99:e8:
         18:fd:73:77:2e:35:fa:aa:d9:fe:0d:cb:82:13:33:38:83:e9:
         a8:08:04:ad:31:bf:3b:d9:92:4b:45:fb:ec:c9:1f:d7:83:d1:
         d8:45:9d:60:54:53:df:09:04:1b:0a:58:75:36:0a:af:c3:19:
         2c:a8:01:16:02:07:b6:74:c2:ed:57:37:98:d3:d1:90:92:47:
         61:d0:b4:61:f1:7b:b4:c6:5d:7e:e4:ae:8b:58:49:a4:b8:48:
         b2:97:e2:cc:63:ed:5a:06:35:a8:ca:df:c2:f2:4c:a3:0b:0f:
         5c:77:ee:98:06:23:66:b0:96:f6:c9:77:7a:4c:4d:bd:fb:4e:
         f1:01:94:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:18:59 2025 by rpki-client