Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/fabfdb2c-1bc1-3011-93df-f915b6ccdd91.roa
File:                     fabfdb2c-1bc1-3011-93df-f915b6ccdd91.roa (raw, json)
Hash identifier:          8719O7tpDiqxeox+7X64ses6ifxu6qxg+q+/Zc625Ow=
Subject key identifier:   42:BD:A1:21:B3:D5:CD:2C:5B:08:4F:5C:8E:3A:99:85:34:5B:83:88
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F43285849F2E53E417969A0145A32BA80
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/fabfdb2c-1bc1-3011-93df-f915b6ccdd91.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     7018
IP address blocks:        141.140.65.0/24 maxlen: 24
                          141.140.68.0/24 maxlen: 24
                          141.140.71.0/24 maxlen: 24
                          141.140.74.0/24 maxlen: 24
                          141.140.77.0/24 maxlen: 24
                          141.140.80.0/24 maxlen: 24
                          141.140.83.0/24 maxlen: 24
                          141.140.86.0/24 maxlen: 24
                          141.140.89.0/24 maxlen: 24
                          141.140.92.0/24 maxlen: 24
                          141.140.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:3e:41:79:69:a0:14:5a:32:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=2320d3c5-59be-4249-8b78-1af3ee490cce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c4:eb:3b:0d:f9:95:bf:92:95:44:74:c1:f3:
                    6c:76:3f:ee:6b:99:6b:79:8e:9a:79:2a:88:d2:78:
                    16:e2:7f:9e:aa:9b:29:b5:1a:9b:48:4f:97:6f:a4:
                    01:b7:77:29:5f:66:29:f2:2a:db:c5:3b:4b:7f:05:
                    b4:26:2e:7d:d4:ab:bb:fe:1d:33:ce:5b:8f:77:f2:
                    2e:53:3f:76:ed:30:5e:6d:c4:51:2b:64:8f:09:2e:
                    c3:52:1b:b4:ef:19:6f:da:cb:81:0c:83:a6:fe:2c:
                    cf:65:b3:7b:ca:80:f4:78:61:c4:16:7c:ff:52:19:
                    c6:6d:24:57:9f:bb:f6:3d:35:73:7b:6a:10:d0:f9:
                    fa:e0:fb:ec:b9:06:0f:e3:8b:66:c5:13:67:5c:34:
                    c2:33:bf:92:14:5e:e5:0d:fc:cb:24:6d:b8:86:f1:
                    37:3c:46:e6:db:19:47:cb:db:43:dd:f8:59:42:13:
                    aa:7d:17:23:ae:5a:c3:c9:39:e4:00:62:0b:9a:4d:
                    c5:9b:92:f9:43:d8:76:3d:3e:bc:ff:18:e4:5c:e7:
                    b8:1e:a7:72:2d:58:0c:f2:b5:d0:4d:11:8a:44:4a:
                    ca:45:7e:71:b4:0a:99:a1:19:22:9e:5b:56:cc:a0:
                    c4:a6:8c:65:41:83:76:73:11:85:0f:d0:78:c0:45:
                    fb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:BD:A1:21:B3:D5:CD:2C:5B:08:4F:5C:8E:3A:99:85:34:5B:83:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/fabfdb2c-1bc1-3011-93df-f915b6ccdd91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.65.0/24
                  141.140.68.0/24
                  141.140.71.0/24
                  141.140.74.0/24
                  141.140.77.0/24
                  141.140.80.0/24
                  141.140.83.0/24
                  141.140.86.0/24
                  141.140.89.0/24
                  141.140.92.0/24
                  141.140.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:41:e4:c5:7a:e4:e6:ed:a7:27:88:91:c5:86:74:e0:bc:7c:
         9c:c6:12:3e:ea:41:3a:87:e6:b9:53:a4:ab:6f:5e:e4:37:58:
         16:e5:0d:00:eb:20:24:dc:3d:23:78:7c:a0:69:9c:85:28:f2:
         e4:84:81:37:79:54:b5:50:af:90:61:92:80:01:a4:2f:b3:8a:
         4f:b6:09:9a:81:e7:d5:95:54:79:7f:ee:a2:c1:e7:00:09:2d:
         86:5d:53:57:ff:a3:b8:11:9b:32:97:7c:c1:5a:10:4d:b1:e0:
         cb:ed:51:b8:27:1b:03:2c:f7:c3:35:e2:11:98:89:a6:df:f2:
         f8:f3:f0:df:04:e7:b3:43:4b:9c:ec:3e:42:b0:f1:02:34:cc:
         4e:3d:cb:01:ba:a8:17:38:cf:68:f8:37:e9:df:50:6b:f3:a2:
         a6:23:ce:77:bb:cb:92:76:b1:55:75:fd:e9:81:f7:49:da:af:
         a4:c9:5c:92:54:a4:25:fe:63:ca:ba:a5:e0:b4:a8:85:e9:e9:
         b7:6a:32:9a:c3:16:34:51:52:ac:3e:e7:3d:c5:85:c8:45:a7:
         7c:85:29:a7:3a:7e:f0:88:66:d2:e1:59:94:08:4d:28:17:7d:
         f8:32:c5:10:87:1e:a5:03:68:30:ad:a3:60:df:7e:06:43:b7:
         b7:15:48:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:09:13 2025 by rpki-client