Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/75164c3b-1970-34ed-accb-9cfd7a9b3f7a.roa
File:                     75164c3b-1970-34ed-accb-9cfd7a9b3f7a.roa (raw, json)
Hash identifier:          rF8SkbyvXKXC6k8AxmsH3MHew3bg7xCVLWQKVi4CD2E=
Subject key identifier:   26:4A:7F:2D:F0:6A:94:4E:D4:2F:15:06:C3:49:F8:F8:2D:19:9B:66
Certificate issuer:       /CN=a521f5ee-89d2-4088-abb9-f69291655e39
Certificate serial:       010D0C9F4328584AC87633E04CF17D951183F540
Authority key identifier: 14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/75164c3b-1970-34ed-accb-9cfd7a9b3f7a.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     25820
IP address blocks:        23.105.192.0/19 maxlen: 24
                          23.106.128.0/19 maxlen: 24
                          23.252.96.0/20 maxlen: 24
                          45.62.96.0/19 maxlen: 24
                          45.78.0.0/18 maxlen: 24
                          66.112.208.0/20 maxlen: 24
                          67.209.176.0/20 maxlen: 24
                          74.121.148.0/22 maxlen: 24
                          104.128.80.0/20 maxlen: 24
                          104.160.32.0/20 maxlen: 24
                          104.194.64.0/19 maxlen: 24
                          104.224.128.0/18 maxlen: 24
                          107.182.176.0/20 maxlen: 24
                          138.128.192.0/19 maxlen: 24
                          144.168.56.0/21 maxlen: 24
                          162.211.224.0/21 maxlen: 24
                          192.243.112.0/20 maxlen: 24
                          198.35.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:33:e0:4c:f1:7d:95:11:83:f5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a521f5ee-89d2-4088-abb9-f69291655e39
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=98545cd4-f9e1-4527-8432-d260c3b56dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:63:ab:7c:3d:bb:15:97:10:a7:60:7a:07:8f:
                    96:1c:09:ea:9a:88:a6:f7:6a:9a:23:d2:4f:f7:93:
                    8f:c6:19:06:6c:db:d9:b9:dc:52:39:39:e6:df:4f:
                    93:76:b9:21:32:a0:d0:12:e3:42:4e:dc:53:95:db:
                    f3:bc:9e:6f:3e:a9:de:ce:e6:1e:e4:c4:9a:87:27:
                    4c:ec:98:4e:e8:f8:05:38:f0:43:a7:6c:89:55:54:
                    4f:86:ad:9e:4b:11:f5:60:1f:a4:27:25:05:d7:fa:
                    a1:11:0c:f2:12:24:9e:ba:ca:4c:30:9e:5a:63:56:
                    c1:dc:34:9e:f1:78:99:0e:a2:27:6e:ad:38:50:f4:
                    c0:c5:1c:2c:99:d1:53:92:d7:61:10:e6:9f:9e:19:
                    d6:3a:ac:2a:3b:ca:7f:49:ff:d5:10:a2:84:e3:1c:
                    6a:f3:ce:28:f9:2d:ef:22:99:20:78:c1:c5:7a:33:
                    fe:57:7f:47:07:c4:ed:72:b0:42:55:b2:48:55:02:
                    2c:80:77:df:c7:e6:df:17:99:86:27:e7:25:e7:e2:
                    f2:18:32:4c:a4:47:4a:9c:3e:3d:78:c1:a1:10:96:
                    94:ad:d6:4c:2b:ce:e8:20:92:a4:9a:d3:47:9a:f3:
                    3d:1e:12:5d:cf:36:c9:fc:38:f2:ff:a1:a2:7d:a4:
                    72:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4A:7F:2D:F0:6A:94:4E:D4:2F:15:06:C3:49:F8:F8:2D:19:9B:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/75164c3b-1970-34ed-accb-9cfd7a9b3f7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl

            X509v3 Authority Key Identifier:
                keyid:14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.105.192.0/19
                  23.106.128.0/19
                  23.252.96.0/20
                  45.62.96.0/19
                  45.78.0.0/18
                  66.112.208.0/20
                  67.209.176.0/20
                  74.121.148.0/22
                  104.128.80.0/20
                  104.160.32.0/20
                  104.194.64.0/19
                  104.224.128.0/18
                  107.182.176.0/20
                  138.128.192.0/19
                  144.168.56.0/21
                  162.211.224.0/21
                  192.243.112.0/20
                  198.35.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:1a:21:4d:e8:b9:09:4d:d6:59:c1:29:36:4d:cf:3d:9a:8c:
         38:0a:7d:0d:e6:d8:8f:cc:bc:fe:d5:1b:d1:77:92:06:69:a0:
         6e:67:12:3a:9a:d3:74:c0:21:bf:02:1d:80:53:f1:fb:b3:12:
         2e:45:34:c4:e3:9a:e1:3a:56:46:f4:c6:e0:53:22:d0:64:29:
         f3:e8:a5:d6:16:14:64:b0:ec:1c:b3:bd:c5:a7:3d:49:94:0b:
         ff:69:25:8b:5a:4b:17:a6:cf:ad:d0:6d:85:37:32:17:0f:c3:
         97:83:39:41:fa:2c:70:c7:94:b2:fb:bc:c3:6b:6c:f0:a5:20:
         25:2e:ac:90:34:fb:5d:7e:d3:93:2f:f6:31:a4:f2:c3:3e:2c:
         d9:96:36:ac:5c:9c:1c:11:69:de:52:12:7a:c1:f2:9c:07:27:
         78:bb:a3:75:6b:c3:cf:eb:a2:ab:fb:74:0d:5f:2d:bd:b6:b4:
         62:dc:03:49:08:f4:65:d0:42:0d:0a:65:11:a3:65:3d:8d:da:
         af:9f:01:80:8e:4a:2e:a5:24:b1:a7:e3:73:72:94:3b:15:c5:
         47:ae:57:4a:c9:a8:69:9e:79:8c:7f:b5:9b:d3:3c:64:4f:08:
         f3:82:32:8e:43:fd:9a:e4:42:a4:47:0f:69:cb:b0:eb:bd:80:
         1e:42:a3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:32:56 2025 by rpki-client