Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5139b953-3814-3853-9785-db577a91d327.roa
File:                     5139b953-3814-3853-9785-db577a91d327.roa (raw, json)
Hash identifier:          fu0AJ+m6OLrVJL1AaFQB4mW5+QbVXvJKZ5sBgPAUL7s=
Subject key identifier:   C0:00:D1:0C:1E:1C:E5:FC:E7:43:3B:E0:DB:B0:A9:90:66:3B:F9:EF
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849F87A919100DF8551CD841380
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5139b953-3814-3853-9785-db577a91d327.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     22110
IP address blocks:        208.103.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:91:91:00:df:85:51:cd:84:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=fcd75913-bc12-454a-bb59-61d5d651ca09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:da:c6:06:c7:f5:2c:69:ed:d5:55:38:b5:91:
                    18:95:b1:56:8b:f7:ed:99:b5:fb:ef:1c:7b:8b:8f:
                    0a:f4:42:01:cc:56:21:38:7f:c5:c4:a1:64:6d:ad:
                    47:ff:b7:0b:83:7c:ce:b5:2c:6f:97:3c:f5:fa:1c:
                    a0:e2:61:10:8b:cc:d2:3c:03:ba:4e:b0:3f:a8:6f:
                    00:21:b0:0f:b5:7a:a2:b3:fb:18:01:40:ce:ff:63:
                    11:06:fe:ef:c4:00:52:2f:b9:71:fb:f4:e0:be:d4:
                    3e:c3:68:3e:64:90:45:30:a9:50:ca:d7:4b:0c:94:
                    6d:03:9b:f8:0c:84:82:26:e6:3d:e0:62:80:fa:c8:
                    d7:86:30:91:46:8b:8d:49:07:8f:0b:dc:bb:8d:04:
                    d0:16:4a:63:2c:ac:94:a0:d4:79:7b:5b:7b:1f:3e:
                    53:9f:09:1c:44:c4:80:2f:d6:e9:c4:85:6a:0b:41:
                    b2:d0:3f:f2:56:bf:26:ed:e5:9d:39:71:5c:27:d8:
                    77:77:a7:a1:3f:ff:f5:e8:14:be:fb:ac:ed:2c:6c:
                    2f:cb:be:b0:67:47:2b:24:64:12:78:37:1c:30:fe:
                    c7:24:2f:3b:0d:95:49:6c:e6:9a:4c:79:75:9d:ba:
                    78:d4:4f:9d:8f:93:20:17:b5:91:a4:95:74:e5:40:
                    14:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:00:D1:0C:1E:1C:E5:FC:E7:43:3B:E0:DB:B0:A9:90:66:3B:F9:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5139b953-3814-3853-9785-db577a91d327.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.103.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:ae:2e:51:63:f8:6a:34:3a:0e:fb:3b:80:45:c0:c9:d0:e6:
         9e:05:b9:bd:1b:18:a1:15:39:34:2a:ab:15:9f:ed:9e:f7:09:
         03:60:fc:74:be:bb:c8:13:28:c8:d4:a1:03:2e:a8:47:4c:f9:
         ca:b8:71:f7:33:38:ad:cd:35:6a:71:e0:c9:64:39:ec:17:dc:
         4a:e1:19:33:6e:09:ec:b5:08:8b:10:cd:4b:00:e2:6c:b9:8e:
         0e:a0:38:99:d1:39:87:6e:63:56:ef:56:62:9c:d4:65:9b:7e:
         8f:03:36:88:c4:12:d5:d8:4c:9c:cc:33:b9:0b:14:35:fa:78:
         32:44:03:df:75:e8:37:b2:fc:f2:13:f6:f3:55:2b:e7:13:29:
         cd:cb:f9:2e:2b:ff:33:d1:c6:a6:8c:5a:f2:2a:ee:df:31:9c:
         e3:ff:85:50:44:4a:88:69:4f:93:b9:68:91:b7:24:57:5f:e3:
         92:aa:5b:27:ee:90:1a:42:a0:8f:ab:3b:a5:76:d9:18:f0:9d:
         79:d9:d0:4e:d3:49:82:f2:2c:2f:e3:0d:bc:0b:43:ac:66:6c:
         43:c9:9f:4a:15:e8:af:71:a8:30:5d:57:3c:cc:e9:f3:46:37:
         51:05:61:91:f9:67:af:d2:ba:4a:a7:67:9c:48:7d:54:c2:91:
         a1:c1:11:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:36:46 2025 by rpki-client