Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c0feab81-3133-338c-8361-cd3813ce13bb.roa
File:                     c0feab81-3133-338c-8361-cd3813ce13bb.roa (raw, json)
Hash identifier:          JPB2dtjNdJAyR3pehrbWbRBcPa8TjMUULoHdELwaYzU=
Subject key identifier:   CE:40:08:5C:75:42:AB:EB:47:8F:3D:E5:3C:44:8C:1D:C0:17:3D:31
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285849FCAA91076721FCF25C2A8000
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c0feab81-3133-338c-8361-cd3813ce13bb.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     7029
IP address blocks:        75.90.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:91:07:67:21:fc:f2:5c:2a:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=fe01cfbe-e1e0-4f90-a632-e39b0aaf2b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9f:0e:19:ef:1a:c6:8e:2f:d4:2b:3e:d9:b3:
                    23:ee:13:e6:ff:84:17:31:51:2f:c0:e5:ae:1a:35:
                    c7:ab:cc:6d:ed:86:28:a6:3c:ae:c2:67:7b:80:01:
                    a2:31:59:ff:13:eb:36:f6:9c:d2:19:6f:60:ed:71:
                    f5:a5:05:e6:af:eb:c2:60:73:43:55:75:36:1c:bd:
                    21:33:44:5a:d3:02:55:ab:a0:1e:f6:1a:41:bf:00:
                    6d:55:12:d8:3f:d3:00:55:2f:ca:42:a5:9e:e9:3e:
                    73:7a:8d:37:cb:0d:cb:a3:9f:05:ff:e1:2d:a3:13:
                    c7:0f:62:e8:33:39:16:90:e1:c1:57:a4:ad:cc:fd:
                    16:77:d0:93:6f:f1:d7:81:9e:24:3b:c8:15:35:2a:
                    13:7f:83:6b:33:2e:61:cb:6f:f6:c6:d8:85:cc:db:
                    56:1a:a3:e6:a9:ae:2e:f8:bf:1d:ae:06:c9:e2:9c:
                    8d:d1:3c:ed:2a:da:df:84:ff:29:5e:52:66:c5:59:
                    63:63:36:7b:ee:6f:3d:73:fe:a8:08:86:a3:73:4e:
                    43:5c:c9:bb:c6:6b:a0:ce:e2:67:84:32:ed:c5:bf:
                    ec:99:d5:41:2f:22:92:61:8b:1a:ae:8b:b1:de:17:
                    77:34:8c:51:76:b7:91:a9:57:5c:01:ef:54:42:0f:
                    cc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:40:08:5C:75:42:AB:EB:47:8F:3D:E5:3C:44:8C:1D:C0:17:3D:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c0feab81-3133-338c-8361-cd3813ce13bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.90.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:31:91:27:1f:a6:80:ac:d0:bb:53:54:f9:50:50:ff:ee:e5:
         c7:d6:d0:29:66:fb:be:61:76:61:93:6a:d7:13:11:46:21:32:
         47:26:db:5a:06:09:36:96:79:d9:f5:1a:b2:af:58:68:e9:fa:
         7b:ff:4d:c8:76:3e:10:e9:ac:36:d3:e2:9a:82:89:9c:1a:84:
         48:24:69:fa:13:86:3a:3f:e5:a6:43:a7:4d:27:4d:b7:fd:6c:
         e1:f0:f3:dc:6f:8b:c1:eb:2f:7e:70:fb:30:5a:89:f9:68:56:
         de:d9:74:02:a3:8e:11:21:87:ff:c2:10:d9:2f:53:92:96:78:
         c5:3c:a7:83:f3:63:60:33:26:94:2d:25:28:e9:7c:a2:b2:ad:
         7a:70:2a:2d:30:2f:c0:70:df:d5:4c:34:33:3e:6a:30:c1:95:
         e9:65:3a:12:dd:57:56:32:9c:e8:10:87:bc:6b:a5:84:c2:64:
         62:2a:76:41:79:d0:c3:a2:38:72:3c:38:0a:e6:3c:33:66:b5:
         f9:5c:68:9b:dc:98:8b:08:f0:c3:74:b2:3b:1c:29:a8:d0:f0:
         80:17:ac:4a:a1:c0:b8:26:28:62:d4:49:fe:aa:2e:45:ac:00:
         a5:d8:49:eb:a8:b9:59:bf:a6:f9:1c:05:ca:f1:ce:33:90:96:
         82:f8:1b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:48:09 2025 by rpki-client