Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/3e90970f-dd28-30ac-83fd-9f25160e4d92.roa
File:                     3e90970f-dd28-30ac-83fd-9f25160e4d92.roa (raw, json)
Hash identifier:          cGeWg9ojW+SwjBlgptHwnCWOZkQfV/jVmTd1kgqHiYs=
Subject key identifier:   8C:05:D5:EC:39:76:0A:3D:53:56:01:1C:2A:88:BD:A6:B6:51:6B:5E
Certificate issuer:       /CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
Certificate serial:       010D0C9F43285849F17FAFCB7D56027FE2365500
Authority key identifier: FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/3e90970f-dd28-30ac-83fd-9f25160e4d92.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     26863
IP address blocks:        64.40.8.0/23 maxlen: 32
                          104.143.2.0/23 maxlen: 32
                          104.238.229.0/24 maxlen: 32
                          168.100.160.0/22 maxlen: 32
                          208.52.152.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:af:cb:7d:56:02:7f:e2:36:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=e895c55f-a205-4350-a776-4612afb78249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3b:3d:e1:94:2a:73:38:af:0e:55:b4:d6:d6:
                    50:73:cd:4c:0e:f4:a1:cd:07:03:80:d8:7f:92:b1:
                    cc:29:b4:65:66:01:e0:c8:61:ef:4f:ec:58:a8:40:
                    72:ca:60:8d:52:63:79:4a:3c:e9:3a:ae:11:f7:32:
                    93:05:8d:31:35:64:15:c9:19:3c:9d:7f:6f:ff:d8:
                    ad:3f:d3:ab:19:e5:64:d7:1c:29:8e:0e:f4:ba:48:
                    d7:01:3a:78:e7:9f:4d:3d:c5:86:25:51:d0:5d:ec:
                    09:1f:5a:9d:71:dc:36:7a:88:2c:bf:62:ef:d0:41:
                    1a:40:53:92:fc:4a:a5:37:8e:cc:b9:e4:8f:b0:c7:
                    7c:cf:11:5d:2d:77:ce:cf:30:57:06:aa:07:ef:13:
                    62:f6:a0:57:12:31:fb:b7:07:54:7f:2b:04:be:ac:
                    a1:0e:3e:9b:5e:90:5a:13:f6:98:d7:51:36:f4:c8:
                    2f:b4:39:66:5c:6b:1b:3e:19:b9:0b:88:3d:61:1b:
                    9a:a5:b5:07:44:f5:ad:37:bb:65:d6:a0:1f:74:e3:
                    01:4d:be:5e:64:2e:e4:8f:95:d6:d1:39:9c:8c:98:
                    3d:20:11:98:1c:ba:e9:c7:84:0f:72:1d:37:ed:3f:
                    44:9a:77:87:b5:5f:eb:af:bb:3f:2a:fa:dd:96:34:
                    ca:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:05:D5:EC:39:76:0A:3D:53:56:01:1C:2A:88:BD:A6:B6:51:6B:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/3e90970f-dd28-30ac-83fd-9f25160e4d92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl

            X509v3 Authority Key Identifier:
                keyid:FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.8.0/23
                  104.143.2.0/23
                  104.238.229.0/24
                  168.100.160.0/22
                  208.52.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:a5:5e:40:ad:3e:f9:e8:70:3b:1a:69:60:c4:bc:2b:b5:57:
         9b:c1:61:17:b3:0c:8b:4e:83:a0:f4:dc:a2:51:13:17:81:47:
         48:da:85:e1:c5:25:70:84:0e:39:f8:eb:3c:3b:04:ca:8e:16:
         d2:fb:c4:fb:bd:3a:84:b4:8f:db:9b:a0:ab:4c:26:a8:02:fb:
         c0:0d:3c:17:b7:25:0c:7e:34:87:59:a7:75:6f:fe:e3:1a:a2:
         bb:60:ed:1b:8c:1b:a6:6e:23:ec:9a:b2:05:13:f9:49:84:ad:
         fe:ec:88:e6:a7:18:90:81:8e:8a:68:09:65:cb:cf:de:3a:8c:
         7b:8a:de:b4:6c:63:d3:9a:a1:ea:f5:5b:fa:77:8b:84:82:cb:
         b4:15:2b:ea:ce:56:bc:6d:dc:c9:fd:13:c0:da:15:4f:fd:16:
         ff:5c:b8:e0:8c:78:af:a6:e5:fd:6a:81:c8:fb:e6:7b:87:30:
         f8:45:d0:30:f9:4a:09:03:ce:ce:69:44:60:18:37:f4:c5:d9:
         c9:d4:04:de:aa:8d:e1:75:99:2c:64:d2:57:d3:cf:1d:42:ab:
         03:31:1e:7a:60:7a:69:6f:5b:31:54:fd:ca:6c:b9:ba:48:cb:
         a3:8c:5e:51:3f:81:f2:8a:39:dc:9a:61:5b:4b:8e:3e:bb:83:
         4b:d0:46:6e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:46:50 2025 by rpki-client