Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/8088690c-4cf8-3714-8e44-a0f04aa5010a.roa
File:                     8088690c-4cf8-3714-8e44-a0f04aa5010a.roa (raw, json)
Hash identifier:          3gBiRPx8XaS2cRY/UpHpY92xIPnK3DtdRIYXb7/yhJ8=
Subject key identifier:   DD:12:AE:4D:60:04:2F:65:67:77:4D:80:18:4D:E0:C2:7D:6A:6D:C1
Certificate issuer:       /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
Certificate serial:       010D0C9F43285849B0F9A65A3108DBC0F9CE3F00
Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/8088690c-4cf8-3714-8e44-a0f04aa5010a.roa
Signing time:             Tue 29 Apr 2025 22:19:06 +0000
ROA not before:           Tue 29 Apr 2025 22:19:06 +0000
ROA not after:            Mon 28 Jul 2025 22:19:06 +0000
asID:                     26858
IP address blocks:        75.101.64.0/19 maxlen: 24
                          76.191.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b0:f9:a6:5a:31:08:db:c0:f9:ce:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
        Validity
            Not Before: Apr 29 22:19:06 2025 GMT
            Not After : Jul 28 22:19:06 2025 GMT
        Subject: CN=2724b945-bb35-46da-8ec7-e9da6ea0a872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fd:75:81:2a:72:d0:7b:3b:33:39:71:36:ef:
                    14:de:ff:dd:01:6f:96:9a:2d:56:45:42:b4:e7:37:
                    90:cc:58:00:52:31:aa:8f:e1:52:d3:c0:a4:1b:6a:
                    2e:78:85:d0:00:f3:88:4b:bf:1b:ca:8f:24:23:a6:
                    23:79:02:98:15:00:25:6d:d1:73:30:50:d9:01:e1:
                    9c:b2:e9:54:ab:94:8c:1c:15:ff:f5:0c:1f:43:43:
                    9d:9f:71:b0:b5:bb:a6:64:b6:15:20:c8:cc:d4:b9:
                    39:0d:09:49:02:69:57:ed:0a:0f:77:7e:e0:00:45:
                    8b:90:7e:97:41:72:bb:05:d6:03:4e:85:95:b0:ad:
                    e9:4e:15:d5:c7:f8:a5:f1:9d:c0:0a:bd:28:db:ea:
                    4f:ec:e4:29:bb:16:9b:57:34:55:f1:92:ae:97:f8:
                    03:cb:31:1a:16:ee:2e:47:89:9b:b9:19:4c:56:91:
                    07:8b:b2:21:9c:19:05:67:81:f4:1c:51:cc:7e:ac:
                    2c:2f:cd:6e:66:24:b7:96:b5:b5:11:64:51:5a:e4:
                    33:91:3e:cd:f6:e8:68:06:85:57:5e:ed:b8:51:9f:
                    ee:c5:be:0c:34:64:6b:c2:fb:1d:54:03:80:2c:51:
                    bb:93:1e:b9:a3:01:ea:eb:4e:b2:98:69:19:8b:48:
                    f3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:12:AE:4D:60:04:2F:65:67:77:4D:80:18:4D:E0:C2:7D:6A:6D:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/8088690c-4cf8-3714-8e44-a0f04aa5010a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl

            X509v3 Authority Key Identifier:
                keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.101.64.0/19
                  76.191.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:ed:d8:9b:42:8e:e0:ab:72:ee:cf:37:e2:7e:fc:8a:af:41:
         1d:0f:f9:f4:97:82:3d:69:7b:64:2f:9c:c3:fe:ef:d8:ce:84:
         cf:04:b6:8f:d7:b8:6f:fe:99:e1:ff:10:8a:01:3d:97:ec:b3:
         22:86:56:f1:76:04:aa:0a:05:9e:f7:fe:70:49:8c:af:98:69:
         31:7b:bf:52:41:49:ca:8f:34:67:92:22:20:59:47:92:da:95:
         32:c8:00:0f:49:6c:c5:46:71:1a:0a:b8:36:88:0f:13:a0:b8:
         da:98:20:d9:3d:2d:b5:f2:13:33:18:fd:67:60:f9:3f:e5:69:
         a5:03:36:c5:45:93:ef:21:52:e1:4e:9b:e3:e1:fe:f9:82:bd:
         0c:f3:fd:7d:e8:24:f4:8e:06:ee:c7:3c:aa:8b:27:0d:e3:6e:
         3a:4d:0a:0f:b9:43:31:da:9c:c5:fb:ff:31:96:e4:4b:13:89:
         8a:85:06:11:08:f8:ac:6c:1e:92:00:20:32:3f:0c:bc:09:3a:
         6d:56:f1:7e:40:65:ba:3c:33:07:32:9d:33:fe:43:63:c7:2b:
         15:19:5d:d9:a8:71:ac:6f:56:35:da:40:d9:5f:b7:6c:2b:fd:
         be:aa:d0:fd:04:bd:d1:1e:8c:68:ce:8a:db:04:78:ae:26:97:
         66:5d:08:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:44:47 2025 by rpki-client