Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee028edb-9e33-45f7-b0cf-c014e2010825/9f0c2946-1408-318b-8471-4ca32d89ac0f.roa
File:                     9f0c2946-1408-318b-8471-4ca32d89ac0f.roa (raw, json)
Hash identifier:          fZ/zjD02GiBtefJeMrpIn/u5ISW1TSNoTfRSiDVqwCA=
Subject key identifier:   8B:FE:7F:83:DE:49:7A:BA:40:77:7D:92:75:B2:22:87:49:82:A3:42
Certificate issuer:       /CN=ee028edb-9e33-45f7-b0cf-c014e2010825
Certificate serial:       010D0C9F4328584A374AD3DB81150CD5401C3F20
Authority key identifier: 64:D6:4F:90:FA:6A:5C:F8:ED:7E:F8:15:23:EC:55:15:25:0A:CE:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee028edb-9e33-45f7-b0cf-c014e2010825.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee028edb-9e33-45f7-b0cf-c014e2010825/9f0c2946-1408-318b-8471-4ca32d89ac0f.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     53745
IP address blocks:        140.235.52.0/22 maxlen: 24
                          2602:811:f000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee028edb-9e33-45f7-b0cf-c014e2010825/ee028edb-9e33-45f7-b0cf-c014e2010825.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee028edb-9e33-45f7-b0cf-c014e2010825/ee028edb-9e33-45f7-b0cf-c014e2010825.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee028edb-9e33-45f7-b0cf-c014e2010825.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:d3:db:81:15:0c:d5:40:1c:3f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee028edb-9e33-45f7-b0cf-c014e2010825
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=9254cea4-dd59-4fb7-8c49-b7e9791b466e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2c:d8:27:15:24:7b:e9:49:90:2e:58:e0:11:
                    13:06:44:79:0c:5c:03:fd:a5:20:a6:49:e7:c6:22:
                    a5:f6:fb:fe:86:04:fd:e7:f6:f5:4c:ab:dc:96:16:
                    e5:a6:e9:1f:5f:ca:ce:73:15:82:6e:81:b8:af:34:
                    1c:3e:6f:95:0e:a1:a4:70:4b:56:0c:98:31:9a:ee:
                    67:71:b8:4e:76:5c:b7:fd:05:26:aa:0b:0b:a6:9e:
                    78:04:6f:8a:1b:30:b8:da:fd:b9:cf:ba:ed:45:fa:
                    0d:1f:ce:ed:41:80:f9:0b:61:dd:1f:15:9e:b5:ca:
                    da:79:8a:94:28:17:7d:11:9b:3f:67:bc:c0:12:f7:
                    07:1a:dd:cc:a8:ce:df:5a:8c:8f:72:d6:c7:1f:3e:
                    5a:36:65:2f:62:0d:4b:22:5f:f9:24:8b:dd:70:15:
                    dd:98:68:1b:22:eb:ef:8f:46:f9:b2:e4:23:24:eb:
                    e1:3b:56:e6:26:c1:c7:28:3a:87:b7:55:8c:69:03:
                    74:ed:8b:b1:2c:bd:b3:5f:95:78:50:0f:f5:35:ad:
                    08:86:5d:15:82:3d:d6:41:47:7f:10:74:8a:9d:28:
                    e1:a8:b9:fc:64:4b:29:49:c9:d8:46:ab:b6:d6:2f:
                    53:e6:6a:cd:68:c6:8f:31:a3:7a:41:3b:86:b8:80:
                    ac:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:FE:7F:83:DE:49:7A:BA:40:77:7D:92:75:B2:22:87:49:82:A3:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee028edb-9e33-45f7-b0cf-c014e2010825/9f0c2946-1408-318b-8471-4ca32d89ac0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee028edb-9e33-45f7-b0cf-c014e2010825/ee028edb-9e33-45f7-b0cf-c014e2010825.crl

            X509v3 Authority Key Identifier:
                keyid:64:D6:4F:90:FA:6A:5C:F8:ED:7E:F8:15:23:EC:55:15:25:0A:CE:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee028edb-9e33-45f7-b0cf-c014e2010825.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.52.0/22
                IPv6:
                  2602:811:f000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:fc:bd:76:4b:3e:fc:91:c7:39:0d:e6:57:06:ce:0e:10:fb:
         93:88:e3:bf:3f:23:40:68:92:a5:7e:c7:9d:83:3c:a5:2a:ce:
         f2:ee:ff:64:a7:69:67:3c:95:ba:d5:f3:31:9b:a5:6e:c0:d2:
         93:96:01:3b:7e:d5:d0:f8:eb:d1:5a:95:b5:0e:64:bd:9a:d8:
         78:98:31:24:0d:8f:f1:f9:d9:b0:7a:00:72:bc:c4:e2:48:a3:
         d8:4c:f2:cd:fb:b8:bb:cd:00:0f:dc:d5:e6:a4:6f:1a:ac:92:
         aa:ce:6a:93:5c:52:37:de:ed:3f:a7:bd:b0:e6:c7:39:cd:12:
         91:19:95:00:51:44:f3:1a:d2:59:27:05:ff:e0:6a:9e:9f:7b:
         3d:79:75:b2:63:b9:b0:7e:87:fc:7f:22:d0:65:86:fb:21:f9:
         00:25:86:8d:3c:ff:04:aa:04:09:74:cf:c9:5e:fc:94:d2:f1:
         42:57:a4:4c:3e:d7:b2:10:89:49:2d:26:76:a9:39:8b:13:7a:
         da:6f:68:77:0f:c8:9f:6c:11:e0:2b:1a:f7:d5:34:ad:b6:ca:
         60:ea:83:2b:05:a5:f2:ba:5d:ca:93:87:b8:49:18:38:bd:41:
         08:cc:cd:ea:20:7f:db:51:1b:62:e2:fd:9b:5f:32:af:00:95:
         00:97:02:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:53:25 2025 by rpki-client