Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4eee8bff-89e5-3089-83b6-30c63cae0ec4.roa
File:                     4eee8bff-89e5-3089-83b6-30c63cae0ec4.roa (raw, json)
Hash identifier:          wKchRAfAMI68PyQ9inl2tdQVYM666N/P3lsWDPA4tVA=
Subject key identifier:   16:14:96:AE:3F:AA:84:D0:82:9B:5D:43:2D:E5:4F:DE:92:53:1F:A4
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584A88409E8C4035B759A1793100
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4eee8bff-89e5-3089-83b6-30c63cae0ec4.roa
Signing time:             Wed 16 Jul 2025 01:00:49 +0000
ROA not before:           Wed 16 Jul 2025 01:00:49 +0000
ROA not after:            Tue 14 Oct 2025 01:00:49 +0000
asID:                     13347
IP address blocks:        69.91.162.0/23 maxlen: 23
                          69.91.174.0/23 maxlen: 23
                          149.143.144.0/22 maxlen: 22
                          149.143.152.0/22 maxlen: 22
                          149.143.164.0/22 maxlen: 22
                          149.143.172.0/22 maxlen: 22
                          149.143.180.0/22 maxlen: 22
                          149.143.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:88:40:9e:8c:40:35:b7:59:a1:79:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Jul 16 01:00:49 2025 GMT
            Not After : Oct 14 01:00:49 2025 GMT
        Subject: CN=75cd8719-4ba9-4e15-b407-0ac2b23af54d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f0:47:47:ef:0f:40:95:db:3f:76:b9:60:8f:
                    6b:5d:76:22:53:ef:6a:7d:9e:21:52:ca:8e:8d:35:
                    b0:25:60:bd:b2:6e:54:fa:81:d4:57:a3:2a:ee:91:
                    5e:2e:1d:7f:83:23:47:e5:08:7e:cb:16:82:4a:60:
                    f4:08:0f:ad:c4:6c:6f:8d:be:d6:a2:a4:61:53:7a:
                    a0:d2:38:95:3b:27:b3:90:39:79:0e:7f:ed:b5:72:
                    aa:47:2b:de:88:9f:77:82:af:d8:a1:69:1c:62:78:
                    b4:3a:18:54:04:6a:ae:38:e4:3c:ce:5a:e6:0a:c1:
                    6e:0b:d0:ad:59:e6:1f:af:e6:aa:1e:8a:10:fa:d0:
                    04:61:53:d8:cf:63:dc:eb:ce:f7:7f:f1:2a:dc:fc:
                    a9:33:6f:83:0e:23:d1:7c:ef:78:59:da:5b:d6:f0:
                    7c:65:6c:88:e5:83:29:f5:04:2a:7a:4b:d2:17:ee:
                    07:cb:87:fc:d9:c6:4f:3a:8e:7e:ce:34:54:59:0b:
                    a5:d8:a7:4a:55:6c:31:b7:f0:c5:e0:e2:67:78:31:
                    13:2a:bf:f1:e6:5b:c0:c9:07:f4:41:c7:2a:64:a9:
                    b9:2f:26:fd:29:30:1a:58:d9:ae:34:03:61:42:65:
                    2b:6e:b7:ac:cf:82:fa:33:20:65:2d:8e:78:27:95:
                    8c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:14:96:AE:3F:AA:84:D0:82:9B:5D:43:2D:E5:4F:DE:92:53:1F:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4eee8bff-89e5-3089-83b6-30c63cae0ec4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.91.162.0/23
                  69.91.174.0/23
                  149.143.144.0/22
                  149.143.152.0/22
                  149.143.164.0/22
                  149.143.172.0/22
                  149.143.180.0/22
                  149.143.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:f7:dc:88:05:5b:29:56:2c:80:e7:c2:8b:9c:27:31:1f:8d:
         7e:cd:10:51:21:0f:ef:7d:02:53:13:96:38:96:0e:d6:d4:20:
         0c:c3:78:5a:41:e3:7f:52:89:e8:3c:f3:af:db:24:d9:53:bd:
         ec:0b:1f:59:08:8f:85:ac:2a:03:d2:eb:d3:96:ab:95:28:46:
         c5:20:45:5e:9f:02:d1:4d:98:86:9e:43:c1:8e:d4:9a:9a:80:
         7f:00:27:4b:0a:3f:d7:c4:e3:4e:5c:10:90:56:18:f3:0a:6f:
         04:2b:a0:3a:47:be:38:87:01:4b:73:1d:6d:c8:47:7b:e5:db:
         9b:67:9f:ac:36:5f:c3:a1:b2:8c:93:5c:cc:0e:e7:9d:a7:bd:
         a9:d7:23:36:8f:79:44:c9:f1:d2:1c:36:4f:a8:52:5f:6d:53:
         0c:47:d5:d4:9a:52:d6:1f:a6:d7:5c:d4:00:e1:e9:98:22:58:
         a4:48:08:89:0f:42:ce:90:d8:9a:31:65:a1:f0:74:3d:99:38:
         f6:ae:ba:9c:b4:e1:59:ef:a0:91:25:f9:37:d8:09:af:4d:ef:
         fe:c9:a5:c0:0d:c5:ef:8f:42:e3:1c:7e:f3:31:e8:43:6f:de:
         7f:3c:69:77:1a:7d:aa:64:2b:38:89:28:f9:c7:15:66:c9:7b:
         f4:4a:d9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:54:11 2025 by rpki-client