Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/563e4146-93d5-346d-b331-7b58a7727771.roa
File:                     563e4146-93d5-346d-b331-7b58a7727771.roa (raw, json)
Hash identifier:          SXI5r3QgSQ5VNN1XP1pijxW3ZXG7yonLtN+i7qI9sXc=
Subject key identifier:   7A:6B:E3:9B:5A:5D:8D:93:90:73:09:78:EF:3E:4B:8E:62:F0:87:0E
Certificate issuer:       /CN=719038d9-6923-4e29-8b36-f45b06ce12f8
Certificate serial:       010D0C9F43285849CE9A55565D081A86129FAEC0
Authority key identifier: 77:B0:ED:77:A7:4B:CF:DD:67:4A:BA:E9:67:66:F8:1D:2E:6F:6D:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/563e4146-93d5-346d-b331-7b58a7727771.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     393238
IP address blocks:        162.253.44.0/22 maxlen: 24
                          192.154.14.0/23 maxlen: 24
                          192.199.180.0/22 maxlen: 24
                          192.236.0.0/24 maxlen: 24
                          199.10.4.0/22 maxlen: 24
                          199.188.64.0/22 maxlen: 24
                          199.189.228.0/22 maxlen: 24
                          205.143.47.0/24 maxlen: 24
                          207.191.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:55:56:5d:08:1a:86:12:9f:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=719038d9-6923-4e29-8b36-f45b06ce12f8
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=d273e5d5-56ac-4996-aaa4-aa44f0cf9c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ce:4a:b5:72:2c:92:c6:4b:5c:76:2d:6c:bd:
                    72:0e:cb:3a:d1:43:56:2f:71:ab:1f:38:53:f1:ed:
                    49:ee:0d:df:f1:93:b4:37:25:f2:6e:18:fa:a5:4b:
                    21:99:1a:60:b8:77:63:95:7f:cf:2d:b4:60:6e:87:
                    00:90:e8:21:7f:21:92:07:01:f4:4c:72:e5:df:e1:
                    ad:82:a6:94:e1:a4:6d:83:d7:06:14:b6:cb:0c:61:
                    1b:0f:d8:a1:e9:0c:df:bf:3f:5c:92:8a:66:ef:f2:
                    3a:be:f9:d4:ad:52:01:07:18:2e:50:34:fb:00:8a:
                    63:73:5f:06:2a:65:38:f7:2c:d3:ed:b4:85:c0:21:
                    85:b7:3d:37:c0:d8:bf:ba:ec:d4:36:cb:b7:ae:df:
                    5e:c8:b1:15:b2:b2:9a:cc:ea:f4:f4:3b:f5:55:03:
                    15:0f:1d:14:51:59:96:42:32:16:10:cf:a1:1d:3f:
                    cc:00:a3:5f:f6:14:7f:98:d0:05:fd:c6:0b:a1:7c:
                    06:af:cd:99:d2:43:aa:c6:ef:f3:6a:1b:17:09:47:
                    cc:35:93:cd:3d:e5:dd:0e:f6:c1:bc:9f:85:50:2c:
                    b8:67:79:f3:8a:cb:6e:f2:a9:75:6c:17:b6:95:04:
                    5b:02:6a:4a:18:44:45:94:4d:28:c3:53:96:4a:03:
                    6e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:6B:E3:9B:5A:5D:8D:93:90:73:09:78:EF:3E:4B:8E:62:F0:87:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/563e4146-93d5-346d-b331-7b58a7727771.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.crl

            X509v3 Authority Key Identifier:
                keyid:77:B0:ED:77:A7:4B:CF:DD:67:4A:BA:E9:67:66:F8:1D:2E:6F:6D:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.253.44.0/22
                  192.154.14.0/23
                  192.199.180.0/22
                  192.236.0.0/24
                  199.10.4.0/22
                  199.188.64.0/22
                  199.189.228.0/22
                  205.143.47.0/24
                  207.191.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:d1:61:cf:e8:f1:8b:fa:74:d8:42:17:07:6a:95:a2:4c:03:
         83:e5:9b:85:30:d0:31:8c:3c:2d:55:2e:b7:fa:19:f2:e8:4a:
         e4:d7:4a:84:7b:6e:ab:4c:f7:56:e7:06:f8:55:57:e4:29:ad:
         93:00:2f:bc:5d:98:e9:46:26:11:00:39:d1:df:8e:4c:28:2c:
         3d:37:29:50:c9:0f:8b:ae:36:07:cb:22:e7:a0:c4:14:5b:fd:
         76:d3:e8:33:69:55:e8:19:4d:5b:ab:d9:de:57:e9:08:eb:9e:
         cc:bf:a2:0c:bc:d6:33:2d:98:41:52:14:48:8b:d7:d5:92:86:
         a4:94:dc:37:a0:c2:4d:04:5d:0a:d1:6a:7a:19:7a:72:ae:13:
         1e:6e:d8:f5:94:76:f8:d0:18:65:c9:e8:3d:86:e6:d5:b1:e6:
         7c:b2:6f:0b:4d:9b:8a:4f:b4:1a:f9:bc:50:73:b5:67:ca:2b:
         72:3b:89:e7:26:d5:6f:27:c9:12:56:9c:9d:32:ba:7b:f7:2e:
         08:63:1a:5f:f6:1b:1d:50:3f:72:e8:5c:2a:88:3b:72:7e:99:
         cb:4c:db:0d:64:54:25:0f:e4:fb:99:5d:0b:af:36:3a:ed:99:
         79:25:36:62:ca:c8:a0:51:65:26:0b:3b:cf:16:7b:ba:9f:6f:
         f8:d6:83:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:40:46 2025 by rpki-client