Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/ec82f193-b8be-335f-bdac-a5d0ba8df2d7.roa
File:                     ec82f193-b8be-335f-bdac-a5d0ba8df2d7.roa (raw, json)
Hash identifier:          1q6MUgV7Y+vSCLVYn921gk4CsrfoDlYokDfYh+7gMLQ=
Subject key identifier:   A6:EB:45:07:2E:5A:62:55:E3:AD:3C:BB:C0:ED:3F:7A:98:DA:01:10
Certificate issuer:       /CN=e2b04e47-5052-4735-8ac7-6c3f429b939a
Certificate serial:       010D0C9F43285849A3547E0DDCFA1D8028CDA900
Authority key identifier: FF:44:F9:53:6E:FE:5B:AF:C1:37:8B:F1:9A:9E:C6:3B:66:69:69:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/ec82f193-b8be-335f-bdac-a5d0ba8df2d7.roa
Signing time:             Fri 25 Apr 2025 01:00:47 +0000
ROA not before:           Fri 25 Apr 2025 01:00:47 +0000
ROA not after:            Thu 24 Jul 2025 01:00:47 +0000
asID:                     397332
IP address blocks:        23.90.88.0/22 maxlen: 22
                          45.115.204.0/22 maxlen: 22
                          75.119.180.0/22 maxlen: 22
                          168.203.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/e2b04e47-5052-4735-8ac7-6c3f429b939a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/e2b04e47-5052-4735-8ac7-6c3f429b939a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a3:54:7e:0d:dc:fa:1d:80:28:cd:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2b04e47-5052-4735-8ac7-6c3f429b939a
        Validity
            Not Before: Apr 25 01:00:47 2025 GMT
            Not After : Jul 24 01:00:47 2025 GMT
        Subject: CN=6b589d53-0d09-4f2e-8301-9af4fe704aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:84:07:3d:5a:27:8f:7a:69:5c:54:35:f0:12:
                    fb:e7:af:b6:97:a5:1f:15:29:43:7f:fe:86:1f:77:
                    f6:df:b2:28:ee:93:d2:1e:5f:ba:6e:6c:37:ea:1b:
                    71:e7:03:aa:a8:2b:5f:24:10:9a:76:51:74:b1:ca:
                    cd:15:dc:63:ed:3c:26:90:cc:85:b8:f6:a2:93:54:
                    c1:d4:57:87:41:d4:54:b0:9e:05:42:1b:c7:dc:63:
                    89:e0:b0:6b:d3:d2:50:93:4a:f7:35:d4:17:74:92:
                    12:f9:83:12:1f:a5:e5:7b:f2:8f:59:2a:d0:25:7f:
                    81:12:76:6c:60:4c:c4:97:6f:34:46:e1:28:fb:d0:
                    70:2b:9e:d9:90:aa:8f:21:a7:b1:b7:31:22:27:79:
                    22:eb:75:90:c1:53:5a:af:98:d5:31:f5:08:4e:af:
                    30:c3:77:96:1a:6d:bb:4d:71:eb:9e:2c:b7:e3:f5:
                    35:2b:6f:89:62:7a:83:1b:0a:47:d6:28:10:95:dc:
                    a1:87:d5:20:81:f5:05:b0:4e:fd:0e:aa:d7:e6:fb:
                    51:3f:0d:74:49:a1:35:2a:bd:27:f1:3d:4f:86:92:
                    09:f9:aa:39:f4:81:db:d2:52:da:35:6d:59:16:79:
                    0e:18:51:53:fc:81:08:c6:89:42:a1:cd:02:cc:30:
                    fc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:EB:45:07:2E:5A:62:55:E3:AD:3C:BB:C0:ED:3F:7A:98:DA:01:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/ec82f193-b8be-335f-bdac-a5d0ba8df2d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a/e2b04e47-5052-4735-8ac7-6c3f429b939a.crl

            X509v3 Authority Key Identifier:
                keyid:FF:44:F9:53:6E:FE:5B:AF:C1:37:8B:F1:9A:9E:C6:3B:66:69:69:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2b04e47-5052-4735-8ac7-6c3f429b939a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.90.88.0/22
                  45.115.204.0/22
                  75.119.180.0/22
                  168.203.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:93:96:6e:8f:d9:5e:3a:e1:35:92:cd:51:55:a8:2b:2c:b7:
         a0:78:5c:7b:4c:a3:ae:39:83:80:6d:f3:19:6f:21:e1:3e:90:
         a9:87:12:41:cf:2b:57:77:4f:85:3c:6d:b0:82:20:b8:4a:9d:
         80:a5:40:09:b9:c6:eb:f7:4f:ef:33:ce:3b:44:b7:bd:89:d1:
         6d:3c:53:4a:d7:15:15:43:15:b0:a9:19:0f:b5:c2:10:14:10:
         c9:1e:87:4b:3e:25:10:d1:9b:22:c6:bb:b2:35:20:86:81:32:
         f8:9b:71:ac:b3:3f:2f:6c:88:bc:19:3a:d2:3f:8b:cb:59:2e:
         5c:16:17:20:34:e3:e8:43:45:c2:95:57:a9:d9:cc:c3:96:16:
         25:8e:48:df:75:01:e9:51:b6:41:56:cf:2e:b0:fd:e0:f9:2c:
         1b:f9:8e:0b:fd:23:2c:b5:94:9e:6f:42:95:69:ad:5f:90:2d:
         02:d8:b1:5c:71:5d:60:c3:e1:b7:a9:44:cd:cb:43:11:4a:f6:
         43:6f:45:3f:73:ab:ed:f9:c1:86:ad:ac:2f:28:d5:38:80:bc:
         98:2f:8d:77:fe:98:bc:fa:d8:9d:95:f2:77:d5:11:0e:0c:01:
         5d:eb:6e:a9:a9:1e:f6:0c:0c:c5:c2:42:99:d1:fd:f6:b8:24:
         a3:25:29:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:44:48 2025 by rpki-client