Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/dc028e64-2955-3844-8f5c-a4e9288d62cd.roa
File:                     dc028e64-2955-3844-8f5c-a4e9288d62cd.roa (raw, json)
Hash identifier:          OyThhmK7qtNva/2DyiZ8a0BW2FpNu2sletDvNRjvAvE=
Subject key identifier:   4C:F4:72:9F:E7:5C:76:2B:43:00:9B:9E:44:9E:07:4E:BF:09:F0:F2
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584A74B5D393D89A6F7014D21DC0
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/dc028e64-2955-3844-8f5c-a4e9288d62cd.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     209
IP address blocks:        207.3.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:d3:93:d8:9a:6f:70:14:d2:1d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=f585124c-0509-4af1-93ca-730c37b4ed25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:41:6b:e8:34:02:42:0e:91:aa:0d:65:25:88:
                    78:61:38:f5:01:54:bf:a1:0d:6c:0b:3c:f3:d2:51:
                    5b:76:00:a1:2a:97:55:c0:7c:4f:b8:b2:00:dc:a1:
                    e6:74:37:a4:5b:e2:55:19:65:44:49:50:7d:f0:8f:
                    10:2b:7e:e3:d8:ed:43:92:b4:d1:2b:d4:fc:c9:0c:
                    6f:06:9a:2c:60:44:fd:d6:1e:9a:78:68:70:4e:fa:
                    d2:c4:87:84:7d:1e:cb:c4:34:74:e4:23:62:2f:d7:
                    fe:ed:cf:e4:ca:d0:e6:54:13:4f:35:05:57:1a:a2:
                    f4:43:aa:2d:08:52:4a:bd:b6:fc:d4:3f:67:70:98:
                    82:52:d6:e0:a1:ce:7d:b9:2a:89:3f:01:62:77:7a:
                    b5:d3:2d:34:c9:e7:99:8d:ff:72:79:15:a9:a7:46:
                    22:ef:68:31:62:0d:95:99:0c:c3:19:51:12:e3:45:
                    f8:f1:8c:99:38:ba:0e:83:bf:65:44:12:cc:38:cf:
                    31:40:a2:06:d5:35:23:23:65:04:9c:9b:4a:ba:d8:
                    cc:be:0b:d1:b0:8a:3a:0a:60:3f:80:45:29:ea:7c:
                    32:6c:ea:2a:3c:12:a0:fc:89:b4:51:1f:3b:c2:83:
                    14:ae:c0:0e:66:e5:8d:a5:40:c1:31:21:45:81:9f:
                    a8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F4:72:9F:E7:5C:76:2B:43:00:9B:9E:44:9E:07:4E:BF:09:F0:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/dc028e64-2955-3844-8f5c-a4e9288d62cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.3.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:16:a6:94:21:2d:f0:70:03:60:ca:f0:55:2d:d2:98:60:40:
         cb:c9:9c:ed:b3:5e:41:a6:d7:cd:63:04:7b:58:ea:19:14:73:
         ce:06:7b:ab:da:b1:be:e8:12:9d:d7:24:80:bc:34:b5:1f:82:
         b3:ba:1e:e4:e6:f8:70:bd:66:89:a4:67:1b:a8:98:59:00:c1:
         bd:a5:57:19:51:57:cc:8e:d9:f3:ae:34:6f:e7:e0:aa:44:78:
         1d:e3:c3:9d:ae:9b:5f:a1:fc:63:e9:b2:fc:43:e4:43:f0:9a:
         37:1b:07:14:54:b6:c2:73:f5:39:85:eb:b8:1a:cb:fa:05:84:
         72:fa:ed:3f:1a:93:45:b8:d7:3c:50:f7:aa:18:3d:33:55:24:
         bb:49:0c:5f:be:4a:61:ad:b6:13:81:6c:d6:4f:e6:ed:73:a8:
         f0:5f:c6:df:f2:c4:27:8c:d6:da:59:95:34:7e:1f:42:cb:4e:
         24:5d:08:92:40:ed:e7:2c:68:7a:2d:7d:16:91:76:7a:f4:cd:
         a7:b2:b3:e4:27:1d:54:d7:7d:25:3d:0b:e4:6c:0a:06:0b:ab:
         ea:88:5d:d6:95:8c:5b:a6:cd:45:36:bd:1d:01:f0:43:e1:8f:
         3f:df:82:55:01:c8:9b:56:d3:71:60:43:bd:6a:21:06:ff:1f:
         37:e9:97:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 07:48:29 2025 by rpki-client