Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/07f404c3-fb1f-3c8c-80a7-4cde44636b4b.roa
File:                     07f404c3-fb1f-3c8c-80a7-4cde44636b4b.roa (raw, json)
Hash identifier:          tC31gLT5Qi13yX0IW1sEeaAIlrspcseuKUlIyQmQ/Ps=
Subject key identifier:   D3:3F:6A:0D:67:58:29:2F:31:02:F2:2E:D1:92:FA:9B:96:12:AD:87
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584A3B7AF3367B16686DF77E5F40
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/07f404c3-fb1f-3c8c-80a7-4cde44636b4b.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     396982
IP address blocks:        130.41.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7a:f3:36:7b:16:68:6d:f7:7e:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=3800e86f-3531-4567-a7ad-20936a01f9d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:49:22:a2:8e:b6:58:a2:28:79:18:7f:74:e1:
                    f7:9a:c3:49:18:fd:50:fa:97:73:0e:a6:aa:c3:74:
                    e0:2d:97:f3:b3:26:21:0d:87:f7:ce:99:55:ff:8e:
                    3c:06:3d:20:52:37:5a:ae:32:fb:e1:7e:c3:d2:36:
                    59:4e:0e:c6:1d:bf:eb:f7:5c:a3:b5:b0:65:0c:fc:
                    37:b8:37:da:aa:47:8b:73:60:9d:a5:f7:fc:01:c3:
                    f4:48:ca:23:fa:6b:f4:c1:8d:b4:b2:ab:f2:ed:e0:
                    98:d7:d8:7d:ba:30:cb:e7:58:ea:06:19:36:70:43:
                    fa:64:5d:65:63:a1:c0:ad:c6:d0:14:be:ed:51:f8:
                    e3:a4:7f:7c:74:13:78:d3:45:9c:b2:5b:dc:a8:11:
                    7c:ad:e2:6a:f1:b7:e6:fb:ee:11:cf:6a:94:8e:33:
                    98:8a:61:38:8a:83:aa:c7:bd:0a:35:39:9b:db:17:
                    3e:14:9e:28:b0:df:16:f6:d4:c1:74:a0:51:74:2e:
                    80:17:27:fd:5f:6c:46:1b:d4:91:bc:8b:24:50:a6:
                    be:2e:0a:09:f6:a2:25:07:59:19:a1:82:e4:53:86:
                    e2:f3:42:f7:aa:45:d1:33:8a:c1:9d:15:94:60:ca:
                    d2:bf:47:a9:97:4c:87:c9:91:8e:33:4c:04:aa:8f:
                    eb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3F:6A:0D:67:58:29:2F:31:02:F2:2E:D1:92:FA:9B:96:12:AD:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/07f404c3-fb1f-3c8c-80a7-4cde44636b4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.41.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:06:75:0d:a2:f3:41:62:d9:98:8f:97:1e:0d:0a:c0:69:dc:
         38:e3:bf:df:46:6a:ce:dd:89:dc:bb:f1:b2:4a:56:9c:ce:3b:
         81:70:ac:5e:cc:a8:4b:e2:40:c0:1c:e8:1f:74:e6:f3:ea:fc:
         3a:fb:8d:bb:32:aa:ca:81:82:22:15:94:1d:fd:96:78:7a:12:
         ea:d8:b9:3b:72:34:f5:5c:2f:02:1d:f3:61:87:5c:78:01:0f:
         0e:77:68:35:2d:3f:97:42:5c:bb:0e:c8:c0:1f:05:17:aa:c3:
         82:28:04:ec:dc:1c:38:5c:41:7f:eb:b1:5c:a1:f0:4d:5a:6c:
         86:f7:e2:9b:9a:98:9d:33:d4:6a:62:5b:58:12:ed:55:a1:49:
         c7:c3:83:ee:20:56:a1:fa:c2:62:c5:86:c1:5e:ee:8b:97:8d:
         e8:02:6d:6f:ea:6a:cc:7f:a1:e3:db:a0:3c:7b:5a:b5:e6:76:
         2d:e0:58:aa:10:52:c0:0c:b3:c0:d0:55:42:f7:e8:7e:10:b7:
         4f:7e:e2:eb:26:7d:f2:6b:93:da:b1:69:b0:89:77:3f:df:20:
         f1:bd:0e:cb:6d:b8:c3:4c:2c:f6:21:ee:9d:7b:31:51:68:04:
         0a:c4:0a:7b:c7:24:c2:9d:7a:b9:57:97:1f:69:01:2a:46:f9:
         58:19:81:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:48:03 2025 by rpki-client