Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/0bb4a0d3-795a-3daf-b536-e6adaa95796a.roa
File:                     0bb4a0d3-795a-3daf-b536-e6adaa95796a.roa (raw, json)
Hash identifier:          y7BX0rvRsI93T1VUs5JEAftWWPUHeCIDf5bE7kUcjoc=
Subject key identifier:   1A:E3:F1:FC:4E:2D:17:DC:9F:4A:A2:EF:B0:45:57:BB:BB:DE:9F:BD
Certificate issuer:       /CN=05ec8359-4ede-4036-8702-23e5dd37a9ba
Certificate serial:       010D0C9F43285849B14A0AE10ACE40560B439580
Authority key identifier: 36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/0bb4a0d3-795a-3daf-b536-e6adaa95796a.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     912
IP address blocks:        64.72.224.0/24 maxlen: 24
                          64.72.226.0/23 maxlen: 24
                          67.21.192.0/24 maxlen: 24
                          67.226.190.0/24 maxlen: 24
                          72.15.144.0/20 maxlen: 24
                          74.122.128.0/21 maxlen: 24
                          162.213.8.0/22 maxlen: 24
                          173.212.191.0/24 maxlen: 24
                          192.69.132.0/22 maxlen: 24
                          199.7.232.0/21 maxlen: 24
                          199.68.176.0/22 maxlen: 24
                          199.68.181.0/24 maxlen: 24
                          199.68.182.0/24 maxlen: 24
                          199.188.70.0/24 maxlen: 24
                          207.54.126.0/24 maxlen: 24
                          208.66.0.0/22 maxlen: 24
                          208.83.208.0/24 maxlen: 24
                          208.83.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:0a:e1:0a:ce:40:56:0b:43:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ec8359-4ede-4036-8702-23e5dd37a9ba
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=51452aab-2b1f-4a20-ae15-6c678ef2efbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9a:2f:7a:04:2f:d7:b3:f3:f8:9f:83:bb:7b:
                    13:25:d5:a7:7c:87:d0:c8:6c:65:62:6a:6e:90:f7:
                    2f:fe:33:b9:5f:65:20:34:3a:23:d6:a7:0d:27:b3:
                    68:85:0a:f3:3e:1d:e5:27:d6:91:a2:39:e4:2f:30:
                    f1:d8:c1:f3:fe:30:aa:75:0c:6d:45:99:dd:ea:e4:
                    a3:ff:63:ba:e2:6c:31:a9:0a:8a:57:63:4a:0e:ce:
                    b2:81:15:9f:73:c4:13:c6:ed:1c:9b:50:3c:59:65:
                    f9:c1:a6:61:e9:1c:05:94:de:55:a3:46:8f:54:9a:
                    2f:cb:35:bd:d4:33:96:04:5f:b3:83:d4:7d:e7:c1:
                    67:ce:8d:78:ab:8e:11:17:13:57:45:b7:8a:fb:bb:
                    e3:89:3d:88:b8:e8:21:c8:09:8f:01:60:26:7f:02:
                    5f:95:d5:b7:0c:a0:ba:db:ea:3f:36:83:34:8d:1b:
                    1b:fb:0d:00:6d:9f:21:7b:a7:bb:1f:a1:ac:76:7b:
                    f5:af:ed:dc:d4:9d:4b:e0:d2:79:2f:58:86:24:7c:
                    6e:19:61:7b:21:f0:d3:8e:43:9c:13:a6:4c:50:12:
                    a5:ac:d1:3a:1f:71:03:34:6f:f3:41:bf:3e:e0:33:
                    2e:a2:0f:46:e8:61:4a:87:fa:3d:3e:d3:28:c5:23:
                    26:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E3:F1:FC:4E:2D:17:DC:9F:4A:A2:EF:B0:45:57:BB:BB:DE:9F:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/0bb4a0d3-795a-3daf-b536-e6adaa95796a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.crl

            X509v3 Authority Key Identifier:
                keyid:36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.72.224.0/24
                  64.72.226.0/23
                  67.21.192.0/24
                  67.226.190.0/24
                  72.15.144.0/20
                  74.122.128.0/21
                  162.213.8.0/22
                  173.212.191.0/24
                  192.69.132.0/22
                  199.7.232.0/21
                  199.68.176.0/22
                  199.68.181.0-199.68.182.255
                  199.188.70.0/24
                  207.54.126.0/24
                  208.66.0.0/22
                  208.83.208.0/24
                  208.83.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:81:62:61:f3:8a:37:1b:dd:4a:8e:71:61:54:ec:db:f8:56:
         50:a6:5f:b9:fd:bd:bb:b4:22:69:2d:b7:3f:15:f1:c7:08:c4:
         d3:f5:0d:75:9f:60:fa:07:a4:07:5a:da:36:b9:4c:81:65:f1:
         9f:44:67:22:86:e4:36:87:6c:48:72:3b:9a:5a:c9:38:11:06:
         67:e8:56:6e:27:4b:95:11:c9:6e:6f:f2:9f:bd:a0:a5:6a:60:
         cd:bf:2b:cb:88:ed:a0:27:72:a3:8e:d3:39:42:d4:20:f3:98:
         fe:84:24:d3:89:ae:33:83:a5:40:80:97:6a:45:c3:5d:11:6e:
         5e:a7:c3:be:44:74:e3:17:6f:4e:fd:d3:63:a5:e0:43:55:37:
         d4:de:44:32:62:63:61:d5:91:25:0a:ab:5a:bf:fe:fc:f5:59:
         0b:a1:a0:73:69:18:66:54:1f:04:9d:95:c3:2d:8a:9c:4f:b2:
         ae:0a:27:99:00:90:4a:61:08:00:c4:ba:0e:51:00:e7:b5:d2:
         8c:6c:bf:3a:47:f2:50:d6:cc:f3:f4:62:77:ee:41:48:26:99:
         84:e0:3b:9b:77:a6:7f:13:a1:d1:23:bd:5f:91:30:fc:1a:d3:
         ce:2f:7a:8d:e3:82:92:4f:68:30:16:14:3e:7a:ad:a7:96:52:
         0a:4d:b3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:47:23 2025 by rpki-client