Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd/9bf274ce-2c9e-309c-a931-39f8f234c3e1.roa
File:                     9bf274ce-2c9e-309c-a931-39f8f234c3e1.roa (raw, json)
Hash identifier:          FTyJAFvd15brneLLqu6sHmkK6qFSaFusruVqNMay7vU=
Subject key identifier:   13:78:9A:68:B6:F8:C5:C2:3C:F5:25:49:C3:99:30:F2:A3:EC:72:05
Certificate issuer:       /CN=7a0989b0-8687-4d60-83b7-e970d69df0bd
Certificate serial:       010D0C9F4328584A5CFB2EF789F065E2CB2E4380
Authority key identifier: F8:CA:A5:AC:DB:FE:18:AE:CF:0D:ED:3B:37:65:40:C3:8D:BD:8C:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd/9bf274ce-2c9e-309c-a931-39f8f234c3e1.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     401307
IP address blocks:        142.54.8.0/22 maxlen: 23
                          142.54.8.0/23 maxlen: 23
                          142.54.10.0/23 maxlen: 23
                          142.54.12.0/22 maxlen: 23
                          142.54.12.0/23 maxlen: 23
                          142.54.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd/7a0989b0-8687-4d60-83b7-e970d69df0bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd/7a0989b0-8687-4d60-83b7-e970d69df0bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:2e:f7:89:f0:65:e2:cb:2e:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0989b0-8687-4d60-83b7-e970d69df0bd
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=7fdc2934-c7b7-4907-817c-e804d27041cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:73:16:ad:0d:a5:6c:ef:b9:a3:1e:9d:f1:14:
                    a2:73:e5:6a:4c:95:2d:b5:46:a7:f4:c1:d3:e9:a4:
                    da:30:84:2c:39:9d:e7:dc:b0:7e:23:5f:aa:a2:94:
                    a5:22:87:06:38:fc:71:28:ca:4f:b5:7f:b4:e4:fc:
                    5d:84:91:65:e0:0e:98:ea:95:03:0b:86:48:2c:16:
                    50:7a:bf:60:e2:de:dc:d8:91:a2:3e:83:1d:9d:a7:
                    ae:94:d4:c9:c4:bc:03:4e:12:97:50:ee:88:60:ce:
                    43:ad:be:4d:67:04:af:71:33:eb:2e:9d:52:d6:da:
                    fe:b3:53:9a:90:9f:16:94:5a:9b:46:95:54:30:90:
                    64:62:9f:5c:79:33:3c:24:a8:e2:01:26:6a:30:82:
                    3c:bd:b5:70:ee:62:23:5e:ac:84:4d:1f:4b:f0:a2:
                    3d:25:5b:8b:ae:8c:14:72:df:bb:99:b9:54:f1:36:
                    db:cc:18:13:a5:61:37:a1:7a:1b:ba:7c:fc:14:cc:
                    dd:3c:87:8e:1d:ba:a5:a5:34:98:99:b0:e4:03:a7:
                    25:f5:23:3b:4f:5f:0f:d8:9e:3b:33:62:1b:aa:5e:
                    c7:b0:91:46:c5:ca:3f:d6:58:07:e0:58:c7:ae:f2:
                    16:19:34:83:60:9b:55:ec:54:77:05:89:d3:5c:65:
                    2f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:78:9A:68:B6:F8:C5:C2:3C:F5:25:49:C3:99:30:F2:A3:EC:72:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd/9bf274ce-2c9e-309c-a931-39f8f234c3e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd/7a0989b0-8687-4d60-83b7-e970d69df0bd.crl

            X509v3 Authority Key Identifier:
                keyid:F8:CA:A5:AC:DB:FE:18:AE:CF:0D:ED:3B:37:65:40:C3:8D:BD:8C:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7a0989b0-8687-4d60-83b7-e970d69df0bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.54.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:cd:ad:7b:68:d2:14:9f:17:a9:dc:fe:1b:38:8a:ae:f9:cf:
         76:38:d5:0c:2a:56:30:45:7d:75:5c:71:34:67:d4:05:c2:23:
         84:a8:bb:59:7d:6f:74:4a:8b:32:d4:4c:d9:3d:ac:10:1f:6a:
         02:0d:fa:af:18:4e:1d:c7:da:4c:9f:0b:34:ed:b1:b7:05:d2:
         81:53:59:7a:c4:55:1e:4b:19:2b:14:73:b3:a6:24:2b:50:e1:
         63:88:1c:39:7c:53:b0:f0:59:bf:ac:ff:6c:01:4d:5f:a8:66:
         f9:e2:bc:c3:c6:1d:43:bb:fe:7b:98:fa:aa:55:fb:c7:0a:9c:
         f0:28:98:1a:6c:e8:9c:c5:c3:67:31:70:8c:ff:e0:78:a2:7f:
         53:74:7f:e4:44:fe:66:f0:32:5f:92:c4:1c:29:59:eb:24:d9:
         67:1a:45:69:c5:cf:f6:cd:93:b8:ee:02:3c:d8:6a:61:ab:7b:
         a3:b7:6b:46:4d:56:e7:47:70:b2:46:3a:bd:a3:10:cf:d0:3a:
         f6:10:b7:86:46:1c:10:3c:ab:7a:b6:a9:7d:fd:15:90:b7:be:
         39:ba:2e:4d:bb:c0:f6:90:d9:5f:cd:49:1e:62:ab:fb:cf:5c:
         19:ae:cd:bc:eb:55:f8:00:65:95:68:43:79:2f:65:17:5c:f7:
         9f:6c:16:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 14:08:50 2025 by rpki-client