Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/7ffc82e3-99fe-35ea-8f52-7dd9d98ed601.roa
File:                     7ffc82e3-99fe-35ea-8f52-7dd9d98ed601.roa (raw, json)
Hash identifier:          9B12hq3DUbnYODGDpDXPGxOdgeufuJUzSFwVjcLzMpc=
Subject key identifier:   BC:81:72:1F:05:E6:EE:27:F1:65:F3:96:2D:B7:AB:80:26:29:3B:5B
Certificate issuer:       /CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9
Certificate serial:       010D0C9F4328584A03A54EBAC6BC904DA0CC9600
Authority key identifier: B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/7ffc82e3-99fe-35ea-8f52-7dd9d98ed601.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     400790
IP address blocks:        207.228.216.0/24 maxlen: 24
                          2606:f6c0:80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:4e:ba:c6:bc:90:4d:a0:cc:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=813b4cf6-9433-4023-b24b-45e2439e248f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1f:69:65:aa:85:69:e7:36:dc:e1:0d:cd:0f:
                    b3:37:79:36:b9:e2:23:71:c7:14:0b:2c:dc:37:8d:
                    ff:f6:ec:cf:8e:5a:99:9b:0f:69:b6:54:df:6a:9e:
                    2d:63:04:0e:ab:2d:6d:64:68:b3:91:88:85:b9:ec:
                    73:cd:13:b2:4a:8b:b5:41:86:66:23:fe:d0:3b:23:
                    4f:ae:54:01:b5:ec:6a:f2:fb:ae:a8:6f:e6:02:58:
                    0b:97:53:ac:f0:56:bf:dd:92:1c:45:74:fa:5c:eb:
                    95:28:48:b7:b1:10:6f:1b:8c:97:05:20:e5:67:81:
                    d5:d2:91:20:ce:3b:8a:0c:3d:81:ba:f5:39:78:9d:
                    c4:d4:16:92:ca:b5:57:77:1d:51:f4:31:6f:5e:80:
                    f0:b7:6e:73:9a:60:69:6f:01:52:46:89:ad:39:75:
                    3d:d9:36:6a:4c:95:e0:12:3a:37:cf:eb:1a:e0:12:
                    6f:90:4c:cd:6d:fe:de:b0:34:c6:e5:7e:bd:0e:ac:
                    51:db:84:b6:53:85:ab:51:32:bc:d8:e2:b7:0b:b0:
                    a8:b0:4d:04:8c:70:9e:3d:d5:63:74:79:82:d0:2a:
                    ad:60:15:00:29:81:00:49:f4:ac:55:c5:43:8a:6d:
                    3a:9d:96:01:29:27:86:63:66:95:a6:20:d8:53:aa:
                    e7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:81:72:1F:05:E6:EE:27:F1:65:F3:96:2D:B7:AB:80:26:29:3B:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/7ffc82e3-99fe-35ea-8f52-7dd9d98ed601.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl

            X509v3 Authority Key Identifier:
                keyid:B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.228.216.0/24
                IPv6:
                  2606:f6c0:80::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:48:5f:23:62:b0:b7:d3:7f:19:cf:eb:b8:4b:0c:26:a4:2a:
         cc:1c:75:ed:a3:ca:2a:cf:b5:7d:9b:86:05:e2:2f:b8:8f:2a:
         fc:3b:0b:37:d9:06:f0:43:cf:31:cd:79:71:a7:87:5e:e1:5d:
         39:4a:60:88:19:20:c6:9f:46:3a:29:9e:1a:9e:d0:38:71:bd:
         42:7b:63:22:a8:b4:ea:2b:1e:78:14:59:fe:63:de:04:ae:a7:
         0e:f9:25:5b:b1:df:02:24:ed:36:76:6b:70:de:7b:39:31:61:
         eb:60:dc:fa:65:55:03:9b:8b:b1:56:75:b9:20:92:21:97:80:
         f3:2b:d0:96:03:ae:c4:90:2d:f3:23:d6:6b:76:ed:ca:90:c8:
         32:0b:a1:dc:6b:b8:a9:fd:37:97:88:ab:5b:b1:76:5a:c2:e4:
         0e:29:0b:fc:77:91:04:86:39:82:18:aa:d8:26:36:55:6c:59:
         12:1a:6e:6d:cb:51:63:43:4a:81:e9:7f:3f:f3:2a:26:56:49:
         c4:af:33:7a:a1:6a:35:3e:10:b8:16:8b:f0:02:28:fc:7b:99:
         b2:36:68:af:b8:33:79:f9:e5:af:a5:d7:08:88:c0:6b:63:ca:
         d9:cd:92:33:d0:bf:1e:3e:53:1f:7b:65:57:38:fb:3b:26:61:
         06:8a:31:61
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEoDpU66xryQTaDMlgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmU2OWU1NWQtM2JhZi00MWU2LTllNjctYmJlNWVkODg4
YmU5MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk
ODEzYjRjZjYtOTQzMy00MDIzLWIyNGItNDVlMjQzOWUyNDhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlR9pZaqFaec23OENzQ+zN3k2ueIjcccUCyzc
N43/9uzPjlqZmw9ptlTfap4tYwQOqy1tZGizkYiFuexzzROySou1QYZmI/7QOyNP
rlQBtexq8vuuqG/mAlgLl1Os8Fa/3ZIcRXT6XOuVKEi3sRBvG4yXBSDlZ4HV0pEg
zjuKDD2BuvU5eJ3E1BaSyrVXdx1R9DFvXoDwt25zmmBpbwFSRomtOXU92TZqTJXg
Ejo3z+sa4BJvkEzNbf7esDTG5X69DqxR24S2U4WrUTK82OK3C7CosE0EjHCePdVj
dHmC0CqtYBUAKYEASfSsVcVDim06nZYBKSeGY2aVpiDYU6rnNwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFLyBch8F5u4n8WXzli23q4AmKTtbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yZTY5
ZTU1ZC0zYmFmLTQxZTYtOWU2Ny1iYmU1ZWQ4ODhiZTkvN2ZmYzgyZTMtOTlmZS0z
NWVhLThmNTItN2RkOWQ5OGVkNjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmU2OWU1NWQtM2JhZi00MWU2LTll
NjctYmJlNWVkODg4YmU5LzJlNjllNTVkLTNiYWYtNDFlNi05ZTY3LWJiZTVlZDg4
OGJlOS5jcmwwHwYDVR0jBBgwFoAUuOVt8qT8p5onhZVWGclu3DiFdDswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yZTY5ZTU1ZC0zYmFmLTQxZTYtOWU2Ny1iYmU1
ZWQ4ODhiZTkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAz+TYMA8E
AgACMAkDBwAmBvbAAIAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEApUhfI2Kwt9N/Gc/ruEsMJqQqzBx17aPK
Ks+1fZuGBeIvuI8q/DsLN9kG8EPPMc15caeHXuFdOUpgiBkgxp9GOimeGp7QOHG9
QntjIqi06iseeBRZ/mPeBK6nDvklW7HfAiTtNnZrcN57OTFh62Dc+mVVA5uLsVZ1
uSCSIZeA8yvQlgOuxJAt8yPWa3btypDIMguh3Gu4qf03l4irW7F2WsLkDikL/HeR
BIY5ghiq2CY2VWxZEhpubctRY0NKgel/P/MqJlZJxK8zeqFqNT4QuBaL8AIo/HuZ
sjZor7gzefnlr6XXCIjAa2PK2c2SM9C/Hj5TH3tlVzj7OyZhBooxYQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:27:26 2025 by rpki-client