Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/08780fc2-df88-3de5-b147-ed57d81f5382.roa
File:                     08780fc2-df88-3de5-b147-ed57d81f5382.roa (raw, json)
Hash identifier:          a775Envpy1Nc3o3GBQffu2WepAUtriL0ZZN2J6l2Cl0=
Subject key identifier:   FE:7D:D7:38:5F:E4:A6:C7:FF:42:BD:A9:B8:D4:51:84:4A:9A:BE:94
Certificate issuer:       /CN=1c5b9809-1c38-4760-b9bf-096829114292
Certificate serial:       010D0C9F4328584A94D0D2CC51EE20864CC31300
Authority key identifier: D6:43:1E:5E:EA:50:DB:7F:7F:D5:3B:12:3F:7C:9A:05:E5:DC:49:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/08780fc2-df88-3de5-b147-ed57d81f5382.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     32524
IP address blocks:        66.244.128.0/20 maxlen: 24
                          100.42.192.0/23 maxlen: 24
                          100.42.194.0/24 maxlen: 24
                          100.42.196.0/22 maxlen: 24
                          100.42.200.0/21 maxlen: 24
                          162.208.112.0/22 maxlen: 24
                          192.30.176.0/21 maxlen: 24
                          199.38.200.0/22 maxlen: 24
                          199.87.184.0/21 maxlen: 24
                          199.255.24.0/22 maxlen: 24
                          208.82.136.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/1c5b9809-1c38-4760-b9bf-096829114292.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/1c5b9809-1c38-4760-b9bf-096829114292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:d2:cc:51:ee:20:86:4c:c3:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5b9809-1c38-4760-b9bf-096829114292
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=7fb465e3-9db9-47a4-824b-bdc3398b300d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:97:0f:00:18:33:3e:eb:11:5c:d0:f4:4c:45:
                    f5:e1:4f:d9:e8:54:bf:8b:04:76:31:f4:aa:b9:31:
                    84:0e:67:0c:93:18:01:92:c3:bb:f9:e3:e9:f4:e2:
                    fe:a1:84:2f:04:aa:ab:cc:d0:88:e2:0b:14:e5:13:
                    28:f5:85:7d:16:f7:8a:2c:74:88:c5:3e:ea:f8:34:
                    30:a8:af:af:cc:5c:35:06:f6:dd:f8:72:27:f2:e0:
                    1b:6a:5f:bb:91:20:60:ee:54:0a:6c:78:7f:52:ae:
                    60:7e:c9:18:81:02:20:92:c6:88:cf:78:47:54:de:
                    e1:07:43:1a:c6:68:bc:48:b7:9a:d4:47:fe:98:d9:
                    32:c4:32:cf:6d:80:df:fc:bc:f1:86:a3:c6:0a:1b:
                    28:38:a7:7c:1e:f9:4b:03:2f:73:ca:3f:a1:86:df:
                    98:29:f9:05:b1:36:52:44:79:b9:2e:d9:1e:bd:18:
                    ca:cc:25:31:c1:b6:e4:15:37:92:81:26:f1:f7:d9:
                    77:a3:a8:1d:ee:94:8c:02:6b:38:e5:cf:81:2e:55:
                    36:dd:37:76:15:fa:ff:b4:00:0b:88:f6:e1:17:ab:
                    d2:86:48:61:07:cd:1d:02:36:59:88:ad:94:ac:d2:
                    5a:42:8f:bc:22:26:f9:80:61:8d:2f:c5:d2:73:57:
                    62:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7D:D7:38:5F:E4:A6:C7:FF:42:BD:A9:B8:D4:51:84:4A:9A:BE:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/08780fc2-df88-3de5-b147-ed57d81f5382.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/1c5b9809-1c38-4760-b9bf-096829114292.crl

            X509v3 Authority Key Identifier:
                keyid:D6:43:1E:5E:EA:50:DB:7F:7F:D5:3B:12:3F:7C:9A:05:E5:DC:49:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.244.128.0/20
                  100.42.192.0-100.42.194.255
                  100.42.196.0-100.42.207.255
                  162.208.112.0/22
                  192.30.176.0/21
                  199.38.200.0/22
                  199.87.184.0/21
                  199.255.24.0/22
                  208.82.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:a4:a3:d0:f0:d8:71:b5:3f:9a:c2:44:f0:9a:9a:89:c4:76:
         7d:fc:84:b8:22:d4:a0:c8:f4:bb:a6:84:db:54:61:de:e2:0a:
         cb:98:c3:9c:f2:7d:66:71:ae:73:de:f5:6a:8b:0f:1a:3a:1c:
         37:9e:77:ff:47:b3:ca:f4:5b:f6:3a:15:d9:85:fa:8b:96:df:
         4c:0a:9a:99:bb:a0:b3:94:05:15:16:e8:04:0b:38:ec:87:38:
         ce:fb:c4:1d:0a:b7:1c:19:c4:8a:08:7a:1b:df:d6:96:0c:c6:
         e4:ce:70:d4:51:ba:b3:28:8c:81:77:17:59:41:43:e1:db:a5:
         fc:d1:fe:ad:92:cd:8d:b3:c2:ca:5b:87:a6:fd:22:6d:83:e1:
         92:ad:62:90:0d:49:48:7f:53:fc:84:8d:39:8a:9b:1a:3c:c1:
         cf:b8:f7:98:53:ec:35:a3:f2:3c:ea:4e:1a:e3:15:72:7e:93:
         ec:0b:6e:8f:83:67:2c:b6:29:9c:aa:d7:06:87:f9:79:70:cd:
         fc:ec:3f:37:f7:74:fa:a8:9e:d8:da:66:8a:b8:7a:91:83:f7:
         37:5e:c8:cd:24:c2:11:b5:cd:39:82:24:b6:97:19:a4:33:33:
         e8:dc:69:0a:9d:fd:7e:01:68:62:f4:8d:70:87:b0:f8:8e:fb:
         1a:c4:d5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:53:09 2025 by rpki-client