Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/ec82f193-b8be-335f-bdac-a5d0ba8df2d7.roa
File:                     ec82f193-b8be-335f-bdac-a5d0ba8df2d7.roa (raw, json)
Hash identifier:          3aHX33yB+JQGqJL7Pkjp0BnbFVXCK2TRIl8JN9UPOrY=
Subject key identifier:   E8:9D:55:D7:24:17:77:60:A7:70:E6:47:0C:36:5D:B6:32:70:44:53
Certificate issuer:       /CN=e2b04e47-5052-4735-8ac7-6c3f429b939a
Certificate serial:       010D0C9F4328584A82AB528C9330CBB6CBC3F4E0
Authority key identifier: FF:44:F9:53:6E:FE:5B:AF:C1:37:8B:F1:9A:9E:C6:3B:66:69:69:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/ec82f193-b8be-335f-bdac-a5d0ba8df2d7.roa
Signing time:             Mon 14 Jul 2025 01:00:50 +0000
ROA not before:           Mon 14 Jul 2025 01:00:50 +0000
ROA not after:            Sun 12 Oct 2025 01:00:50 +0000
asID:                     397332
IP address blocks:        23.90.88.0/22 maxlen: 22
                          45.115.204.0/22 maxlen: 22
                          75.119.180.0/22 maxlen: 22
                          152.228.36.0/22 maxlen: 22
                          168.203.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/e2b04e47-5052-4735-8ac7-6c3f429b939a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/e2b04e47-5052-4735-8ac7-6c3f429b939a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:82:ab:52:8c:93:30:cb:b6:cb:c3:f4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2b04e47-5052-4735-8ac7-6c3f429b939a
        Validity
            Not Before: Jul 14 01:00:50 2025 GMT
            Not After : Oct 12 01:00:50 2025 GMT
        Subject: CN=b401915e-a8f3-4e63-81c5-4e622aa97485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0d:d4:87:6c:30:41:b6:d5:3b:19:8d:34:a7:
                    46:b7:fb:e3:32:c5:71:f9:b4:fb:e4:77:55:6c:25:
                    e8:2b:04:df:c8:71:d7:67:7f:f0:38:bc:02:72:7a:
                    ed:0c:c4:a9:55:d4:bd:0b:33:39:95:79:ef:6d:18:
                    23:f2:90:11:79:81:ca:cc:d0:c5:6e:48:58:b5:b1:
                    a4:5b:db:8e:a0:45:db:ae:be:00:1a:b2:c9:ea:86:
                    97:c3:f2:a3:45:e9:03:af:f1:11:b7:05:d2:5b:d4:
                    e5:6d:02:e5:1d:21:83:a8:11:aa:b0:ad:d0:5d:93:
                    34:86:48:81:fb:b4:f3:c3:75:1d:94:b3:6f:47:58:
                    48:94:fd:c9:00:d9:32:6b:77:25:71:fd:de:43:cb:
                    29:54:f6:3c:92:60:8c:17:9b:b5:b6:ca:e7:a1:63:
                    a9:2e:00:f3:48:1c:4a:75:ad:98:f1:cf:8c:a3:5e:
                    b7:86:da:48:46:fb:8e:bb:11:1c:f2:23:75:27:4c:
                    4f:25:85:ba:70:57:d4:b8:b2:28:41:8c:49:08:ce:
                    bb:7d:9b:41:c0:ab:c2:16:55:87:d1:a0:74:9b:b4:
                    c1:1d:ba:2b:7b:4a:41:bd:38:85:1c:7b:ae:34:6e:
                    e0:09:f3:d0:1e:86:d0:04:29:8b:25:11:a2:af:57:
                    82:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9D:55:D7:24:17:77:60:A7:70:E6:47:0C:36:5D:B6:32:70:44:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/ec82f193-b8be-335f-bdac-a5d0ba8df2d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/e2b04e47-5052-4735-8ac7-6c3f429b939a.crl

            X509v3 Authority Key Identifier:
                keyid:FF:44:F9:53:6E:FE:5B:AF:C1:37:8B:F1:9A:9E:C6:3B:66:69:69:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.90.88.0/22
                  45.115.204.0/22
                  75.119.180.0/22
                  152.228.36.0/22
                  168.203.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:c0:61:de:15:27:b1:ec:15:37:46:6c:22:90:88:97:a1:25:
         df:95:cc:e0:9a:1d:e0:85:ba:f8:b6:95:b9:95:09:32:21:08:
         2d:5e:77:e2:0f:e0:0d:13:b2:f8:60:55:61:e6:94:18:59:ec:
         a3:3e:42:bf:e8:5d:4d:76:2c:21:ea:43:c4:fc:a7:57:51:84:
         f2:99:a0:96:4f:8a:f6:43:7b:48:86:18:b7:90:90:d3:d4:47:
         b5:02:45:c1:db:e9:e5:31:50:55:ae:b2:b0:0f:03:f0:88:82:
         a9:51:ce:1e:50:6b:fa:81:16:56:0b:1c:4f:83:95:4f:cc:c2:
         c6:88:55:b3:d4:06:1f:5e:30:ea:b6:26:31:48:99:dd:e7:c3:
         9b:81:0f:d2:2a:d6:b8:95:99:87:e4:4c:79:c8:60:3d:4a:3d:
         5b:cd:88:fb:1d:02:21:78:51:02:1f:41:46:3d:30:82:09:97:
         00:f1:16:3a:59:97:ce:af:f7:7a:7c:9c:63:65:ae:99:2a:7c:
         a7:34:de:0c:ef:11:fb:72:97:48:f5:49:3f:c8:e4:48:69:dc:
         13:f7:1a:38:2f:a4:c7:ed:c8:78:a9:70:f5:7f:c3:5a:08:10:
         f5:0a:2e:44:3d:7d:dd:94:cb:b5:b9:d4:93:03:2d:20:02:2e:
         f2:89:68:e1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Aug 7 23:55:23 2025 by rpki-client