Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/00621ba6-99e5-4a17-9087-51ef82e92263/92e9ca67-b54e-3009-b93c-5a603a77d633.roa
File:                     92e9ca67-b54e-3009-b93c-5a603a77d633.roa (raw, json)
Hash identifier:          E2hDJEfSvKyb/yDFt/M98HL2g4XjmLmYHsUwiFD1DsI=
Subject key identifier:   9E:79:54:9B:1E:86:F4:67:90:18:E4:9F:C2:9C:3A:A5:2F:54:C5:41
Certificate issuer:       /CN=00621ba6-99e5-4a17-9087-51ef82e92263
Certificate serial:       010D0C9F4328584A1B5FF6607B02A51729499580
Authority key identifier: E2:D4:D4:B7:38:3B:4B:DF:D4:9A:F8:9D:17:6D:B3:29:A0:68:EF:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/00621ba6-99e5-4a17-9087-51ef82e92263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/00621ba6-99e5-4a17-9087-51ef82e92263/92e9ca67-b54e-3009-b93c-5a603a77d633.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     36210
IP address blocks:        199.115.240.0/22 maxlen: 22
                          199.115.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/00621ba6-99e5-4a17-9087-51ef82e92263/00621ba6-99e5-4a17-9087-51ef82e92263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/00621ba6-99e5-4a17-9087-51ef82e92263/00621ba6-99e5-4a17-9087-51ef82e92263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/00621ba6-99e5-4a17-9087-51ef82e92263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:5f:f6:60:7b:02:a5:17:29:49:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00621ba6-99e5-4a17-9087-51ef82e92263
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=c2316ac9-7029-434c-becd-3309d2ef4f44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9e:f3:f4:22:2d:ee:d9:66:fe:17:62:a7:a9:
                    e6:8e:a4:b4:37:1e:2c:9d:ad:ef:e1:75:a5:68:36:
                    f6:90:1c:99:0b:b4:2d:2b:7c:8a:00:43:69:eb:5b:
                    58:ac:2d:c8:d9:7f:a9:f1:b7:ec:69:c3:34:af:63:
                    ed:96:df:d5:49:e1:71:67:3a:ec:e9:be:c9:07:99:
                    c3:45:54:10:c5:bd:2b:ac:9f:25:a1:3a:2d:51:4a:
                    e2:53:1f:d8:ae:7b:5b:b6:2e:63:ad:59:7b:fc:ab:
                    e4:29:80:b8:1d:f9:fb:21:3c:78:9c:30:fd:72:e6:
                    e1:94:5b:fa:3c:31:47:db:12:36:8b:02:2d:02:27:
                    f7:95:df:e0:7e:da:ea:bc:43:9b:a8:83:02:1f:ed:
                    38:05:3a:fc:87:a2:16:2a:8d:f2:cb:1c:65:c3:42:
                    be:03:c7:6d:07:d3:95:16:8b:8f:62:db:12:81:73:
                    48:ba:3b:39:24:39:a5:ec:cc:c2:1e:94:38:c9:d0:
                    07:ac:bd:45:1e:46:68:db:5d:41:8b:81:e6:4f:08:
                    5a:37:46:46:19:de:2d:30:95:e3:ff:f7:c4:03:e1:
                    58:23:07:dc:cb:de:9f:41:05:8c:ff:22:bc:7a:9b:
                    91:e5:4c:ce:24:42:03:f2:e6:fe:8f:54:5f:68:74:
                    37:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:79:54:9B:1E:86:F4:67:90:18:E4:9F:C2:9C:3A:A5:2F:54:C5:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/00621ba6-99e5-4a17-9087-51ef82e92263/92e9ca67-b54e-3009-b93c-5a603a77d633.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/00621ba6-99e5-4a17-9087-51ef82e92263/00621ba6-99e5-4a17-9087-51ef82e92263.crl

            X509v3 Authority Key Identifier:
                keyid:E2:D4:D4:B7:38:3B:4B:DF:D4:9A:F8:9D:17:6D:B3:29:A0:68:EF:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/00621ba6-99e5-4a17-9087-51ef82e92263.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.115.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:f3:1a:06:c3:2e:84:62:58:55:85:2c:7c:1d:be:4c:12:3c:
         96:65:81:36:e6:09:6a:21:62:73:76:70:d1:d6:ca:dd:b4:02:
         d1:cc:ef:f2:f1:2a:a4:3b:a5:79:4d:56:4d:08:d7:7c:58:ae:
         85:44:4e:ca:d1:b9:8d:3f:5d:8f:0d:14:28:73:fb:d4:ce:ea:
         05:a9:d2:ae:ca:39:84:61:6b:f1:85:f1:b1:fb:6a:14:44:df:
         a2:85:60:47:9e:a1:7a:84:23:69:f1:49:a3:75:d1:11:17:c1:
         bd:c1:73:a5:9c:9f:f0:0b:5e:d6:fc:8d:eb:65:54:cd:d5:1a:
         82:bb:83:3e:f6:1f:ff:b9:17:2b:90:26:18:58:ef:05:dc:ec:
         05:37:34:e3:79:17:bc:fb:a8:93:33:6e:a7:8f:75:be:04:8d:
         14:b3:ea:98:c4:cf:31:16:1a:1f:d8:1a:b9:89:88:4c:fc:85:
         19:55:fa:4c:4e:25:d0:b6:c6:9d:4d:42:8d:ef:82:0e:1b:57:
         d1:63:39:6d:3f:22:61:ca:33:c4:59:ac:d9:43:1f:68:bf:df:
         6a:a3:9d:54:56:fd:5c:7b:5b:7b:57:40:f2:2a:3a:0e:42:5e:
         77:5b:6c:4b:be:c2:2f:16:2e:87:c7:a1:a4:68:b1:da:e4:67:
         53:ed:e6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 05:42:09 2025 by rpki-client