Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/90fd9139-7715-3ddf-a4a9-89eb09710801.roa
File:                     90fd9139-7715-3ddf-a4a9-89eb09710801.roa (raw, json)
Hash identifier:          0niMHNRGsCPBewWP5kQo/XhDUftXZndn2VFbuUM2050=
Subject key identifier:   5B:A3:DF:68:8F:87:4D:80:AA:1D:A2:85:45:6C:AA:29:92:B0:F6:44
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584A3CE02ED011C1E71491CE1900
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/90fd9139-7715-3ddf-a4a9-89eb09710801.roa
Signing time:             Thu 19 Jun 2025 01:00:50 +0000
ROA not before:           Thu 19 Jun 2025 01:00:50 +0000
ROA not after:            Wed 17 Sep 2025 01:00:50 +0000
asID:                     31898
IP address blocks:        169.224.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3c:e0:2e:d0:11:c1:e7:14:91:ce:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jun 19 01:00:50 2025 GMT
            Not After : Sep 17 01:00:50 2025 GMT
        Subject: CN=a74f10b2-a97b-47e5-ad0b-e4e1bfe679e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0b:7b:34:21:67:c5:8f:92:b7:1a:8c:1e:51:
                    30:eb:bc:9f:b9:85:ac:fe:cb:31:3f:26:e7:7c:47:
                    a0:7b:4d:ac:7a:cf:67:b8:c9:c4:ce:c6:de:8a:9a:
                    ae:9a:85:5e:f6:11:83:6f:a3:0a:3d:2e:ad:56:4f:
                    a6:bd:2b:9b:53:a6:49:69:75:81:eb:97:a1:f7:c0:
                    c8:b5:b2:78:60:1e:86:ed:6c:b5:20:c3:00:4f:a6:
                    8b:e8:35:85:0a:24:1b:75:3b:28:01:8c:d7:a1:40:
                    05:ed:bb:9e:32:f4:c6:68:e9:ab:66:b3:25:40:7d:
                    a5:0e:ce:4a:b3:1c:d3:7d:99:94:4a:8a:19:66:9c:
                    4e:34:2d:c0:9c:4a:b5:6a:8a:55:a0:52:93:d2:9e:
                    cf:2b:1d:b6:bc:b5:9c:de:5a:77:0a:95:8b:7d:40:
                    2b:45:40:fa:7d:94:9f:79:b6:8f:3e:01:81:91:a2:
                    96:6e:9f:da:8c:87:b7:1f:62:c8:c8:17:52:55:68:
                    ed:44:e2:a6:17:51:b0:bf:6f:a4:49:ec:b9:5c:79:
                    ad:b5:44:38:27:c5:0c:e3:ad:e9:ac:f5:97:e7:bd:
                    ae:3b:0f:d0:d2:42:2b:a9:5b:f5:4d:22:8a:ff:ed:
                    25:3a:38:07:2f:65:cf:e7:ab:ae:e8:17:50:e7:aa:
                    a3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A3:DF:68:8F:87:4D:80:AA:1D:A2:85:45:6C:AA:29:92:B0:F6:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/90fd9139-7715-3ddf-a4a9-89eb09710801.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.224.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:de:3e:fd:62:2e:df:df:99:01:06:2f:5b:e5:31:c7:99:2a:
         8f:82:5d:95:65:15:e0:ff:a2:b2:e0:45:33:5b:51:89:c9:93:
         f8:e9:28:67:e3:34:38:87:8e:a1:79:8e:88:dd:0b:b5:7b:e9:
         06:af:a4:a6:63:1f:0b:a4:f4:2d:e5:ca:89:e9:7b:5c:5a:c8:
         0f:b3:c1:63:5d:a5:fc:30:92:76:77:47:7e:66:03:26:74:cd:
         83:80:18:95:54:8e:18:50:38:3c:bc:da:41:19:0c:70:b4:3d:
         33:67:c0:ea:45:8b:0a:c7:4a:d1:40:38:f6:ad:fb:97:d0:4c:
         67:34:1b:c4:b8:ae:e5:f5:1a:ea:85:d4:b8:46:c0:16:f9:e1:
         b9:cf:d9:f3:7d:68:6a:0e:bf:92:b8:bd:f6:19:d5:35:8c:59:
         ae:85:dc:25:d7:f1:90:da:2f:c0:12:25:ca:ca:72:30:9a:ea:
         57:be:1e:f4:e0:a8:12:23:99:f5:60:f9:24:b9:95:ae:0f:e5:
         12:d8:7f:c6:ca:83:3d:d1:50:f3:2a:92:d1:78:f3:d6:66:5e:
         1e:b7:b8:85:da:43:72:99:c0:1f:e2:aa:76:a4:c8:07:69:00:
         de:a8:66:4a:2a:8e:47:52:24:d4:5c:3c:a5:f6:5f:39:30:bc:
         e7:c3:a2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:13:04 2025 by rpki-client