Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e6295432-b7dd-321b-a9e2-1c301059b039.roa
File:                     e6295432-b7dd-321b-a9e2-1c301059b039.roa (raw, json)
Hash identifier:          rzZOrTbkkIUiih5XqAsixzTQYfauLbYbI+CWfSBEyaw=
Subject key identifier:   AF:7A:8B:C5:D7:5A:54:75:50:38:31:4E:E3:92:84:6C:96:48:C5:A2
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F43285849DC8FBB7D210EF87D271DA6C0
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e6295432-b7dd-321b-a9e2-1c301059b039.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     198148
IP address blocks:        207.226.136.0/21 maxlen: 24
                          207.226.144.0/22 maxlen: 24
                          207.226.152.0/21 maxlen: 24
                          207.226.216.0/22 maxlen: 24
                          207.226.244.0/22 maxlen: 24
                          207.226.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:bb:7d:21:0e:f8:7d:27:1d:a6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=27a4a1e4-c181-4af3-9b3d-e0e3d67912b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:44:40:d1:5b:f6:13:94:29:29:f3:91:03:65:
                    b9:88:90:95:68:db:c9:9a:30:6c:d9:67:52:58:61:
                    9e:04:2f:50:e5:79:40:db:b0:59:0c:ea:1a:43:7f:
                    14:b2:e3:10:7b:50:64:a0:97:06:6e:f1:7e:93:e1:
                    8a:26:1f:db:06:85:30:fb:7b:60:b4:20:b1:2e:68:
                    fe:40:92:a0:79:69:65:2e:84:90:69:5a:e1:d9:99:
                    ab:e7:19:1c:83:7b:3c:3c:94:81:93:ce:ef:1c:af:
                    74:79:c8:72:5b:80:b0:55:e5:9f:3e:c9:05:54:de:
                    ba:07:9f:bb:26:b2:82:50:e0:bb:78:ed:70:99:7a:
                    76:4d:6c:9d:06:1e:6b:94:d9:5f:a4:9b:0a:20:db:
                    e7:19:23:b7:9e:cb:9d:55:3a:89:d3:ca:44:e4:98:
                    cb:2f:44:ca:bf:ae:08:a5:c7:9d:fe:9c:30:88:e0:
                    ad:a1:4d:9e:67:17:4d:3f:c6:88:40:a2:6c:c2:32:
                    c0:c7:53:22:89:2e:63:c9:f7:bc:51:7b:25:dd:86:
                    6a:c1:2b:68:2f:71:d2:26:59:46:3e:7b:00:d3:70:
                    8d:50:8f:4a:e5:76:c0:fa:96:91:38:60:1d:7d:fe:
                    5f:fe:9b:62:b3:2a:df:62:4a:eb:ec:6a:dc:54:a5:
                    f5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7A:8B:C5:D7:5A:54:75:50:38:31:4E:E3:92:84:6C:96:48:C5:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e6295432-b7dd-321b-a9e2-1c301059b039.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.226.136.0-207.226.147.255
                  207.226.152.0/21
                  207.226.216.0/22
                  207.226.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:0a:c8:6f:0f:28:a4:56:72:45:ea:1f:b5:05:69:1b:11:fd:
         df:9b:9a:25:90:e1:69:e0:3a:18:f1:73:f0:10:61:b2:76:ec:
         62:1d:39:08:16:7d:24:de:f1:bc:d9:a3:2e:f6:a5:93:46:3b:
         c5:f4:61:3d:d4:59:e8:18:9a:6c:7f:90:55:17:5c:f4:6b:fd:
         8b:2e:7a:fd:1a:1a:e4:4d:c1:d2:cc:6b:b8:5a:07:e7:4a:10:
         08:41:9a:ee:a8:b1:41:1f:ee:91:0e:b0:72:6f:cf:36:19:20:
         42:47:b6:15:fd:20:d1:37:ec:4e:da:be:a2:98:49:0f:37:4a:
         0e:ea:9f:e7:04:2b:b0:50:8d:96:a5:0b:d1:39:3b:d6:f8:fd:
         2a:49:4b:29:9a:5b:52:16:b9:db:9e:40:e0:58:36:3c:84:8b:
         ec:91:e5:9b:59:52:b4:5c:38:6e:53:c3:6d:94:51:4a:ea:47:
         94:f4:fe:4d:23:9b:1e:0d:8a:fd:cf:59:c2:37:40:99:40:24:
         e7:0a:c4:73:00:57:46:3e:67:f3:3c:ca:60:51:2f:23:1d:3a:
         f5:ac:6a:29:0e:d7:21:59:63:c5:c3:eb:af:52:0a:cb:41:0c:
         35:29:67:ee:98:07:5d:79:b0:b3:76:34:b7:49:9e:9a:e4:89:
         d8:1d:81:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:03:06 2025 by rpki-client