Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/863a05ba-f109-3085-82e8-8450f49642ea.roa
File:                     863a05ba-f109-3085-82e8-8450f49642ea.roa (raw, json)
Hash identifier:          jpjk4CmfK/PjMi7a5k4y7X3WBirbW+dBQ1Nl7fCC4Aw=
Subject key identifier:   56:45:82:93:63:0D:ED:54:7F:98:E0:5B:18:E6:7C:25:FA:BA:8D:74
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F43285848E18963BE1B1A05245146B680
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/863a05ba-f109-3085-82e8-8450f49642ea.roa
Signing time:             Fri 14 Feb 2025 15:00:35 +0000
ROA not before:           Fri 14 Feb 2025 15:00:35 +0000
ROA not after:            Thu 15 May 2025 14:00:35 +0000
asID:                     23304
IP address blocks:        207.226.161.0/24 maxlen: 27
                          207.226.164.0/27 maxlen: 27
                          207.226.165.0/24 maxlen: 27
                          207.226.166.0/24 maxlen: 27
                          207.226.170.0/26 maxlen: 26
                          207.226.176.0/24 maxlen: 27
                          207.226.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:89:63:be:1b:1a:05:24:51:46:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Feb 14 15:00:35 2025 GMT
            Not After : May 15 14:00:35 2025 GMT
        Subject: CN=ee15bc61-e2b1-43bf-94e4-db76e5d73ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d0:f7:c4:4a:00:00:f6:f4:57:04:7f:47:c0:
                    ac:7d:f2:d9:94:c3:9c:d6:96:03:47:14:51:1b:60:
                    e6:3f:7e:f6:82:13:a4:a0:39:c3:e0:04:4d:2f:e6:
                    79:cd:45:91:a4:4d:23:5b:3c:5e:c3:ca:78:fd:54:
                    ba:ff:63:06:49:c9:50:27:f6:52:18:fa:b2:e6:a6:
                    52:da:9e:7a:93:6f:a7:24:ab:6a:32:21:83:d6:44:
                    8c:aa:6e:fc:8f:57:2b:93:3b:65:7a:8e:52:e6:5c:
                    55:07:b1:94:23:32:27:63:ce:7e:19:29:8b:ed:ae:
                    1a:df:af:07:b7:47:fd:f6:c8:b0:5c:2d:4a:fc:bb:
                    0e:35:14:8d:cb:cf:d8:eb:58:65:d2:e9:d0:20:dc:
                    3b:86:c4:37:1c:5d:1f:00:d2:cd:8b:36:93:4b:5c:
                    1c:b6:16:d5:37:7c:f7:5e:1a:9e:0e:9c:66:95:cb:
                    eb:4e:50:ea:d5:53:ae:68:21:e9:bc:1c:20:bb:27:
                    28:0f:ba:17:ec:71:c4:af:be:05:37:4d:88:c2:64:
                    a4:77:ae:41:56:67:43:aa:1b:56:24:9a:3d:a3:3e:
                    66:72:47:25:18:2a:d9:64:2b:cc:8e:02:64:15:f6:
                    9b:3d:04:bb:e9:a2:94:f7:7d:d1:65:98:54:4f:c2:
                    c6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:45:82:93:63:0D:ED:54:7F:98:E0:5B:18:E6:7C:25:FA:BA:8D:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/863a05ba-f109-3085-82e8-8450f49642ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.226.161.0/24
                  207.226.164.0/27
                  207.226.165.0-207.226.166.255
                  207.226.170.0/26
                  207.226.176.0/24
                  207.226.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:da:e6:a6:a0:2f:ab:c5:cc:84:aa:6c:a0:be:fd:f7:65:87:
         79:64:27:03:96:77:17:18:de:76:60:83:93:e5:b8:00:79:b2:
         2c:52:ab:7b:33:ef:5c:87:cb:0a:d7:e0:66:44:12:30:c5:c5:
         f9:41:fb:b2:cc:7a:69:c6:e4:bc:f9:d8:bc:29:21:ca:18:60:
         e0:15:00:cd:71:bc:e6:8a:20:64:c1:77:45:00:fa:59:f0:7e:
         55:3f:62:7a:4f:95:92:43:15:1b:10:7f:47:b4:a0:cb:1f:ad:
         89:16:87:f6:8a:7d:10:e0:dd:37:af:3b:c7:31:e9:be:1e:b6:
         1a:a7:5f:4c:71:a2:1c:09:6d:a5:d8:1f:02:8a:12:85:d5:37:
         65:32:10:78:0e:b0:41:ff:af:7b:65:92:79:94:6b:f2:b3:03:
         64:e6:73:79:af:93:fd:87:a3:b3:e0:71:87:f0:d5:0b:60:fc:
         f0:0b:97:67:6f:79:e8:93:f5:37:1e:2a:aa:04:80:79:d1:1c:
         77:b5:42:e9:44:2b:2c:85:58:a9:8a:ad:c1:58:76:d8:b6:05:
         5e:06:9b:d8:a7:98:78:66:c8:10:d6:14:fc:de:a9:ba:81:a3:
         11:c8:ce:1e:c3:c1:68:48:94:27:9c:63:cb:31:43:fd:90:88:
         8d:b2:a1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:35:10 2025 by rpki-client