Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/bde05709-005d-31ad-8a26-803bd42a4c25.roa
File:                     bde05709-005d-31ad-8a26-803bd42a4c25.roa (raw, json)
Hash identifier:          P2Am3MSoEqfraip2/tV5HIUjtKehCmqcKmLxN4ioOa0=
Subject key identifier:   B6:1E:15:6C:CC:CF:2C:66:34:7B:31:BF:51:BA:DA:20:7A:E4:CC:D6
Certificate issuer:       /CN=05ec8359-4ede-4036-8702-23e5dd37a9ba
Certificate serial:       010D0C9F43285849CD34BF907D1AB8323275FCD4
Authority key identifier: 36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/bde05709-005d-31ad-8a26-803bd42a4c25.roa
Signing time:             Sat 10 May 2025 01:00:47 +0000
ROA not before:           Sat 10 May 2025 01:00:47 +0000
ROA not after:            Fri 08 Aug 2025 01:00:47 +0000
asID:                     912
IP address blocks:        64.46.32.0/20 maxlen: 24
                          64.46.48.0/20 maxlen: 24
                          69.10.128.0/20 maxlen: 24
                          69.10.144.0/20 maxlen: 24
                          192.197.212.0/24 maxlen: 24
                          192.197.213.0/24 maxlen: 24
                          209.97.192.0/20 maxlen: 24
                          209.97.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cd:34:bf:90:7d:1a:b8:32:32:75:fc:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ec8359-4ede-4036-8702-23e5dd37a9ba
        Validity
            Not Before: May 10 01:00:47 2025 GMT
            Not After : Aug  8 01:00:47 2025 GMT
        Subject: CN=84b3ed45-1769-4c5a-a702-22ac0acdf3e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f4:4c:9b:e1:44:ae:55:13:ea:0b:1b:18:22:
                    59:a1:29:33:36:86:ec:7c:76:bf:b4:53:1f:0a:37:
                    45:25:2a:c3:15:60:a8:7c:33:25:be:df:cb:00:b4:
                    31:5d:a8:1b:87:56:b0:92:ea:b3:4d:7c:dc:e2:91:
                    78:8f:b3:f4:37:1f:39:5f:92:19:6d:ad:09:ef:4e:
                    9e:cb:76:f4:78:63:d6:79:ab:2e:a1:9f:cd:9d:a1:
                    13:42:69:ff:bf:11:04:cd:26:0f:74:6a:c9:76:19:
                    13:9f:f2:01:36:90:4e:6a:f0:4a:bb:04:96:74:99:
                    cc:70:78:82:e8:00:f4:c0:31:ea:57:25:97:f2:73:
                    b8:be:71:95:b0:ea:c9:b0:e1:df:c9:36:5f:9f:7c:
                    40:b8:a9:de:7b:27:89:f1:9c:52:74:30:ee:8d:33:
                    09:ed:d0:66:87:bf:d5:6c:e5:f4:fb:6b:82:ff:ef:
                    12:74:48:24:9e:7c:fd:b6:b9:99:29:43:68:47:0a:
                    01:aa:dd:f7:e7:2f:fb:86:b0:37:ca:40:f6:de:38:
                    aa:f2:d0:23:70:cb:71:24:93:60:b5:54:92:fc:b4:
                    00:84:58:a0:16:14:96:2b:b1:6e:a3:44:f9:d0:84:
                    1b:73:9d:5e:b9:d6:31:f9:96:67:c2:3b:66:6e:24:
                    90:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:1E:15:6C:CC:CF:2C:66:34:7B:31:BF:51:BA:DA:20:7A:E4:CC:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/bde05709-005d-31ad-8a26-803bd42a4c25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.crl

            X509v3 Authority Key Identifier:
                keyid:36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.46.32.0/19
                  69.10.128.0/19
                  192.197.212.0/23
                  209.97.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:dc:ee:e6:91:d6:19:c0:c0:f2:82:45:d5:08:73:b4:56:82:
         5a:d7:e8:02:f2:1f:73:b4:e2:7e:1a:47:10:6a:86:f8:07:f6:
         d3:56:9e:ce:83:87:f2:a1:a5:35:ca:1a:00:f5:80:90:3f:81:
         9e:46:9f:da:70:e6:70:f9:31:ec:0f:3e:72:2d:be:cc:1a:a6:
         3c:3f:c9:eb:50:ce:96:7c:11:44:b0:f1:b8:84:bc:68:f2:d3:
         c5:23:31:42:ea:81:44:0b:47:6c:c9:01:11:6e:d3:9a:d2:60:
         77:a4:14:1e:a0:b4:6e:7b:1d:92:4e:f3:d2:38:f4:9c:2f:e7:
         e1:b3:62:ca:5d:1c:91:1e:22:37:85:39:c1:ee:0b:8a:4b:99:
         b1:14:0c:8e:28:8e:64:bb:c2:8f:4e:b2:ff:56:ed:12:b9:80:
         68:bf:35:4b:c9:f7:1f:33:88:3a:3a:8c:94:be:4e:5f:0f:de:
         7a:25:3d:3f:6f:9f:2e:b1:f4:9a:0f:81:d9:46:1e:71:8b:7e:
         12:fd:ea:4f:4a:41:bd:8f:20:56:29:31:2f:83:00:f9:8f:9b:
         a6:60:05:51:70:cc:68:31:90:f2:9e:3a:83:09:06:8a:6e:b9:
         84:d8:91:1b:49:3f:5d:15:c7:ab:e0:6c:86:44:fc:3d:ee:e6:
         4d:3d:2f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:47:14 2025 by rpki-client