Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/790fd7eb-d2ac-3288-8e67-ffeac0fa3912.roa
File:                     790fd7eb-d2ac-3288-8e67-ffeac0fa3912.roa (raw, json)
Hash identifier:          XJoc/pu99/NDZu4M7YmAisHqbbYlusJZTXzEyd5oLvc=
Subject key identifier:   C7:21:C2:53:F9:27:AB:12:81:AE:81:B7:D8:B0:AB:3F:AD:EB:48:83
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A00DAF18B54192B7EE06FC6D0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/790fd7eb-d2ac-3288-8e67-ffeac0fa3912.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     22394
IP address blocks:        141.207.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:f1:8b:54:19:2b:7e:e0:6f:c6:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=43a0c814-1c6a-4209-ab27-d05920f4eb30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b4:1d:44:1f:05:5e:c8:4b:21:0c:4f:10:27:
                    3d:dd:4d:d5:55:aa:82:c4:86:f3:69:5e:7b:ec:c5:
                    ed:31:23:c5:ca:e7:6f:fd:3c:c4:45:e9:8a:92:7e:
                    c6:98:6e:d1:c6:b9:05:de:7d:53:c4:f8:46:43:58:
                    65:2b:02:0e:1a:13:68:ea:46:e7:ea:93:c9:43:de:
                    0f:12:ef:3c:86:bd:78:56:0a:ba:1c:a3:75:d3:55:
                    2b:18:f6:d2:ca:3f:04:de:12:0b:bd:57:88:4a:7c:
                    c1:f9:a9:38:f6:87:6e:f5:72:22:84:d4:4a:77:07:
                    1f:74:ed:29:2e:24:09:90:ed:87:c7:78:8b:cb:4f:
                    27:8a:c3:e6:47:d2:3d:b4:ee:f6:f0:d2:04:db:10:
                    5e:52:56:a8:e8:c3:70:de:44:40:0f:be:2d:8b:01:
                    87:81:0f:6a:1c:08:c7:68:20:25:b4:77:c4:d7:2d:
                    c6:2b:31:94:9b:67:41:e2:60:29:97:32:1b:62:4e:
                    d4:60:ad:21:c2:33:0e:c0:cb:ed:33:f9:97:fc:65:
                    c9:97:98:c3:ec:5b:45:c6:f0:19:9d:11:61:22:4e:
                    c7:f4:9f:ed:ab:57:87:f9:a3:51:75:67:0a:1f:df:
                    00:12:74:ac:d5:ed:a3:07:12:4d:00:f4:cd:68:63:
                    fd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:21:C2:53:F9:27:AB:12:81:AE:81:B7:D8:B0:AB:3F:AD:EB:48:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/790fd7eb-d2ac-3288-8e67-ffeac0fa3912.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.207.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:91:a0:a9:16:08:c7:4e:e7:69:c2:c5:0a:24:46:92:5c:b6:
         d2:97:41:59:c2:fd:ce:af:7a:32:21:30:3e:18:ea:fc:d9:05:
         0b:b4:e7:50:e8:f9:bb:71:b3:2f:6f:12:41:d1:18:c6:7c:31:
         42:17:42:df:96:ad:c8:cd:3e:19:fb:1b:87:fd:7c:69:c5:86:
         4a:27:a0:f4:8d:4d:64:db:8b:be:d3:08:77:03:e1:34:34:a8:
         33:24:c4:39:8d:b2:50:d2:4c:b7:a0:d5:a4:ba:6e:4d:f8:fa:
         4f:1b:03:7e:34:8b:7b:5c:61:d2:ec:17:0b:be:69:84:12:bc:
         7c:57:84:d2:05:4e:03:02:f9:88:d3:82:4c:66:07:2d:95:cc:
         29:f9:e7:06:8a:11:b6:73:57:60:56:53:52:ef:27:5d:68:5c:
         f2:09:53:e9:11:9c:74:37:8d:34:a5:4d:81:18:13:c1:06:96:
         03:1c:82:22:2c:72:8d:0f:c8:07:b2:be:be:59:7a:22:d0:06:
         a1:89:93:dd:c7:91:5d:39:2c:8f:b8:2a:16:2f:cf:25:17:42:
         72:35:9d:cf:60:7e:c4:70:9f:21:8a:bd:ef:e6:00:a6:c9:aa:
         b3:ef:aa:ae:1e:b0:87:0f:a9:7b:e2:0f:2c:62:ab:a3:40:1a:
         4a:49:33:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:52:17 2025 by rpki-client