Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/d3fbdcd8-72b0-324d-ad1b-1b0496e7cdb1.roa
File:                     d3fbdcd8-72b0-324d-ad1b-1b0496e7cdb1.roa (raw, json)
Hash identifier:          ZA293kcBgWjaJDZojPpEXRO6Y3hdNy/DQrZMh9/5QvQ=
Subject key identifier:   B8:01:54:45:DF:4C:54:A7:ED:76:E3:C2:17:C0:C0:17:76:81:E2:7C
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F4328584A58CB019A90986DFA4D0B25A0
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/d3fbdcd8-72b0-324d-ad1b-1b0496e7cdb1.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     396949
IP address blocks:        43.231.235.0/24 maxlen: 24
                          78.138.46.0/24 maxlen: 24
                          78.138.51.0/24 maxlen: 24
                          83.229.5.0/24 maxlen: 24
                          83.229.35.0/24 maxlen: 24
                          104.129.130.0/24 maxlen: 24
                          104.129.131.0/24 maxlen: 24
                          104.225.140.0/24 maxlen: 24
                          104.225.141.0/24 maxlen: 24
                          138.128.242.0/24 maxlen: 24
                          138.128.243.0/24 maxlen: 24
                          138.128.244.0/24 maxlen: 24
                          162.251.146.0/24 maxlen: 24
                          162.251.147.0/24 maxlen: 24
                          199.19.74.0/24 maxlen: 24
                          213.255.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:cb:01:9a:90:98:6d:fa:4d:0b:25:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=b5a2d3b3-b770-40de-bc1c-37a6e6509a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d1:ac:b0:63:dd:b2:c2:32:72:7f:d4:fb:07:
                    e4:28:2e:48:53:67:8e:86:2d:a5:f6:5d:74:f0:04:
                    94:d0:d4:f4:58:c9:67:1a:0f:bc:d2:2e:78:f4:91:
                    f9:c8:4b:b0:81:5e:31:e3:e7:90:f3:1d:1a:9f:97:
                    fc:39:de:c4:19:2c:db:46:cd:be:94:f8:db:7a:7b:
                    17:49:d7:6d:b7:d0:96:4d:52:eb:70:80:56:aa:c5:
                    d4:e3:c7:bc:2e:3c:40:1c:2a:29:e7:43:23:03:aa:
                    eb:8e:f9:99:c9:5b:93:5b:ec:b9:ae:fc:12:43:a1:
                    eb:26:e5:2d:68:d6:9c:b1:eb:ed:13:07:f8:e7:a4:
                    93:5f:80:28:65:9d:d3:f0:d8:bf:ab:f0:6c:cd:b8:
                    eb:cf:7a:5d:1c:7b:be:13:18:d0:c7:68:e7:22:c4:
                    a9:a2:e9:8a:a6:66:4f:20:e7:28:ee:7d:b1:e8:63:
                    d1:d4:e7:70:e5:74:0b:cc:19:ab:3a:c6:fe:20:be:
                    40:c6:3c:52:e6:7b:f7:9c:0b:86:96:08:6c:0f:6f:
                    ef:d1:6c:3d:03:15:be:05:95:23:14:51:eb:75:ed:
                    e1:7e:57:0e:9b:42:1b:47:c6:c2:fd:30:1c:f4:d5:
                    55:9f:38:ab:70:96:16:11:59:94:62:b0:4d:83:b4:
                    8c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:01:54:45:DF:4C:54:A7:ED:76:E3:C2:17:C0:C0:17:76:81:E2:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/d3fbdcd8-72b0-324d-ad1b-1b0496e7cdb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.231.235.0/24
                  78.138.46.0/24
                  78.138.51.0/24
                  83.229.5.0/24
                  83.229.35.0/24
                  104.129.130.0/23
                  104.225.140.0/23
                  138.128.242.0-138.128.244.255
                  162.251.146.0/23
                  199.19.74.0/24
                  213.255.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:9c:92:a1:e6:84:b5:33:ed:a4:d3:16:fd:f2:53:a8:bf:51:
         61:cd:e3:14:65:46:f0:63:05:1f:1a:ff:08:55:26:de:91:0a:
         98:cf:80:27:5e:89:9a:d4:49:28:5e:dc:50:b2:56:79:78:35:
         f8:25:f9:ee:56:80:58:cb:5d:77:ac:74:c0:d9:95:cc:f2:cc:
         ba:ae:94:8d:38:17:2e:6c:02:eb:bc:ec:24:3e:ab:d2:06:45:
         63:ff:14:3c:e4:4e:3a:02:de:48:5f:8d:f2:53:fe:08:c2:5b:
         60:30:2d:0f:55:6d:44:b8:2f:37:e6:99:2d:61:2e:1b:cf:1d:
         cc:57:4e:a6:b2:ba:9e:69:de:e3:e0:bc:a3:9f:d8:89:e8:7e:
         13:14:3d:da:93:e5:da:b0:04:5d:96:01:19:80:50:04:9d:87:
         0f:c6:a9:7c:73:3e:fd:fc:6c:6f:d5:a3:13:ed:8e:6c:75:c7:
         2d:e4:83:ef:1e:b3:eb:8e:c1:be:3b:a8:dc:85:6c:ba:ac:0e:
         2b:ca:51:99:34:59:cf:6f:73:16:b2:e3:a7:82:1b:43:8c:63:
         e9:ce:67:2f:71:bb:23:e5:9a:d5:68:d7:a9:f6:3b:a0:d2:e8:
         3f:33:e5:5d:76:54:73:34:8b:f1:0f:03:5a:4e:03:44:63:db:
         2a:56:b1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 04:24:04 2025 by rpki-client