Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/75164c3b-1970-34ed-accb-9cfd7a9b3f7a.roa
File:                     75164c3b-1970-34ed-accb-9cfd7a9b3f7a.roa (raw, json)
Hash identifier:          hsIElZgZRJEL2mpBqW9+Z4UgkLXH2rjWnkjP4DQA6ow=
Subject key identifier:   49:2C:35:E0:FB:85:26:F2:4B:64:70:B4:6B:17:A7:18:4D:5A:6C:10
Certificate issuer:       /CN=a521f5ee-89d2-4088-abb9-f69291655e39
Certificate serial:       010D0C9F43285849E7BA68F565E85869F9657D00
Authority key identifier: 14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/75164c3b-1970-34ed-accb-9cfd7a9b3f7a.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     25820
IP address blocks:        23.105.192.0/19 maxlen: 24
                          23.106.128.0/19 maxlen: 24
                          23.252.96.0/20 maxlen: 24
                          45.62.96.0/19 maxlen: 24
                          45.78.0.0/18 maxlen: 24
                          66.112.208.0/20 maxlen: 24
                          67.209.176.0/20 maxlen: 24
                          74.121.148.0/22 maxlen: 24
                          104.128.80.0/20 maxlen: 24
                          104.160.32.0/20 maxlen: 24
                          104.194.64.0/19 maxlen: 24
                          104.224.128.0/18 maxlen: 24
                          107.182.176.0/20 maxlen: 24
                          138.128.192.0/19 maxlen: 24
                          144.168.56.0/21 maxlen: 24
                          162.211.224.0/21 maxlen: 24
                          192.243.112.0/20 maxlen: 24
                          198.35.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:68:f5:65:e8:58:69:f9:65:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a521f5ee-89d2-4088-abb9-f69291655e39
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=6777358d-e87e-447f-aee8-2f3f617b6de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:30:6c:5a:9c:16:87:7f:82:ac:4f:6c:f3:cf:
                    59:1b:1c:af:d3:c2:c5:85:c8:38:ac:af:8e:6e:b6:
                    67:e0:8f:86:35:14:98:0c:6c:bb:ea:1a:b9:94:3d:
                    4a:93:48:39:0d:c9:13:bc:b4:05:fe:11:0b:6a:92:
                    ac:c3:fd:b0:e2:c1:24:d3:c1:a4:e1:69:08:6f:bf:
                    13:da:46:08:6c:d3:fa:99:ab:55:e7:ff:c5:fb:fe:
                    fe:6e:79:0e:9c:80:96:0e:7c:22:aa:0a:f8:c0:b9:
                    79:fc:70:9c:22:54:ec:78:03:fe:93:8c:52:35:b7:
                    1e:69:84:ea:41:4d:3e:81:02:55:13:a8:e3:9d:dd:
                    6b:35:a0:30:ec:9c:a2:ba:d8:e9:a2:75:84:a6:d0:
                    b1:66:5f:3d:89:27:cf:26:30:3c:71:c2:68:c6:f3:
                    10:97:76:b4:b5:55:21:c5:f5:de:ac:e8:50:1c:00:
                    6e:81:b5:97:f5:52:ac:3a:e9:fe:af:20:ae:e7:19:
                    0d:22:03:fc:cf:d7:08:7f:75:f0:74:c1:03:b8:86:
                    f3:4b:70:c2:35:e4:f1:e9:1c:8f:ff:a2:03:fc:cd:
                    3c:72:ba:41:d4:89:a5:8d:4b:71:1b:8c:47:3a:ca:
                    ab:67:e4:b6:79:94:fc:24:9a:af:5d:ab:75:d8:4f:
                    da:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2C:35:E0:FB:85:26:F2:4B:64:70:B4:6B:17:A7:18:4D:5A:6C:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/75164c3b-1970-34ed-accb-9cfd7a9b3f7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl

            X509v3 Authority Key Identifier:
                keyid:14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.105.192.0/19
                  23.106.128.0/19
                  23.252.96.0/20
                  45.62.96.0/19
                  45.78.0.0/18
                  66.112.208.0/20
                  67.209.176.0/20
                  74.121.148.0/22
                  104.128.80.0/20
                  104.160.32.0/20
                  104.194.64.0/19
                  104.224.128.0/18
                  107.182.176.0/20
                  138.128.192.0/19
                  144.168.56.0/21
                  162.211.224.0/21
                  192.243.112.0/20
                  198.35.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:0f:c2:e2:97:91:7e:48:ff:dd:a1:b3:8a:ec:b9:74:18:3e:
         7d:cb:ad:dd:b1:3c:b7:59:74:aa:5b:e0:a0:c8:70:74:d8:f1:
         19:40:a5:0e:10:4d:e6:a6:6d:37:53:9d:22:2f:57:67:9b:0f:
         8c:4f:ed:6d:2a:ac:84:69:9c:25:30:20:cf:e4:90:b8:69:9f:
         46:f5:c0:e3:a2:87:b2:f7:79:03:d3:bd:40:fd:ac:21:48:7f:
         d1:d2:22:c7:1b:af:42:e5:e5:d5:ac:17:d2:89:5d:1d:5c:e9:
         bc:a9:27:87:1f:4a:a6:b8:ab:0c:b5:51:a7:16:02:97:1d:96:
         0e:1d:be:4b:29:fa:b1:ff:9c:db:7a:06:84:f7:a8:4b:e9:ba:
         b5:b6:1d:33:ea:3e:7c:fb:ca:06:cc:d5:b2:ca:9f:39:71:17:
         d1:e7:5a:06:a9:31:08:64:04:7a:fe:8d:5b:7c:d4:70:4f:43:
         ab:66:e4:91:ee:90:ad:af:89:7d:9e:4a:bd:e6:d8:e8:cb:c6:
         e8:5f:dc:fd:d5:0f:5d:8f:ee:68:0e:98:c4:df:84:0f:4b:d9:
         f3:d7:84:0f:3d:9b:0b:6f:7c:23:48:27:2f:40:91:e6:2c:ac:
         17:7f:84:69:e3:85:c6:db:90:10:29:ae:f6:e7:dd:8e:7e:67:
         74:52:31:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:48:27 2025 by rpki-client