Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bf0b5ade-9ba2-31c3-a91c-14889151e134.roa
File:                     bf0b5ade-9ba2-31c3-a91c-14889151e134.roa (raw, json)
Hash identifier:          0PMtedHvw8pBGCDdRsYpr2wjNdbT4tFirxOaGkoxLks=
Subject key identifier:   2B:ED:5D:AB:51:6D:C8:85:29:6D:30:ED:D4:94:2C:74:80:39:F5:B1
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAB2340B2F0EA5DBAAFD00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bf0b5ade-9ba2-31c3-a91c-14889151e134.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     30336
IP address blocks:        209.226.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:b2:34:0b:2f:0e:a5:db:aa:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=517d4ebe-1255-4f4b-8104-99f69073a8eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:19:01:f9:e2:36:35:05:8a:45:7e:f1:c3:c8:
                    bf:9a:84:4a:7d:70:06:bf:d6:f5:63:7a:6e:19:6e:
                    4d:24:60:f2:7f:ba:ab:25:f0:33:bf:51:50:e7:09:
                    c3:cc:ef:c4:be:4b:bf:e4:16:67:d6:80:b6:7c:49:
                    31:f1:78:ef:20:73:d4:8c:ea:a8:54:97:04:f3:33:
                    58:33:ba:77:8e:24:17:05:0b:2a:b0:10:2f:e2:70:
                    37:68:ad:11:5b:94:7b:6a:0a:f5:49:47:00:99:25:
                    bc:95:e7:7e:90:1d:ca:fc:a9:0e:83:42:30:8b:e5:
                    fa:d4:5c:fa:00:a3:4b:1b:52:5f:d5:fd:f7:e2:59:
                    c5:d3:2f:90:8f:b5:b5:e8:c6:de:92:51:ce:8f:10:
                    c1:22:fa:f7:9d:83:24:8d:32:a3:ee:21:7d:aa:45:
                    4a:c2:78:c6:e9:30:f8:20:03:ba:d5:11:2a:85:e4:
                    05:94:48:02:77:51:a3:f0:b5:28:09:df:cb:d6:c7:
                    2f:a3:14:85:09:34:26:b0:f0:77:26:70:d5:34:af:
                    fc:92:ae:98:3d:0f:87:20:af:96:25:9c:71:d8:db:
                    76:f8:12:06:81:24:d5:3c:86:f5:15:c8:2b:52:dc:
                    0f:3f:ae:ae:fe:a2:3d:36:8a:5e:3b:3c:e9:9b:38:
                    cb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:ED:5D:AB:51:6D:C8:85:29:6D:30:ED:D4:94:2C:74:80:39:F5:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bf0b5ade-9ba2-31c3-a91c-14889151e134.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:6c:d2:35:a8:8c:e1:56:ab:c2:2d:28:e8:82:d8:27:3d:93:
         99:64:ae:f3:c6:73:34:4d:b3:90:fa:4f:ab:0a:49:0a:24:4a:
         3c:75:e5:64:e8:5a:7c:39:7a:cd:e1:89:35:e1:8d:17:31:fe:
         5b:28:30:97:04:80:92:61:6f:ce:cc:ef:94:14:bd:1c:94:5d:
         38:d4:98:d3:62:d5:1a:2e:34:85:47:03:f5:83:60:c0:cf:f2:
         8d:1b:b2:e1:67:13:b2:bd:fd:4f:98:4b:50:09:f8:a5:83:fe:
         42:00:1a:73:1f:aa:45:69:72:ea:44:25:be:48:5f:8f:6f:57:
         d0:cc:0a:02:a8:d2:a9:20:e9:72:2d:84:4a:09:1f:6e:c6:e9:
         e7:3c:c4:11:dd:19:7e:70:6b:a7:65:a1:9b:38:df:9a:f8:3b:
         c6:0b:84:8d:15:1d:ee:e7:c4:84:39:ab:ff:34:ce:a2:ec:3b:
         b4:4e:0e:34:ab:ec:2e:80:ff:75:2f:35:bf:36:f2:78:92:6b:
         87:a1:fe:a7:47:32:49:07:84:29:37:60:00:ad:53:71:3f:ca:
         1d:0d:c9:c0:2b:69:c7:7a:20:3c:71:19:74:12:8a:d3:21:81:
         6d:a3:44:bc:c9:0e:ca:cc:ae:e2:a1:c2:46:f0:b8:7e:21:4f:
         75:dc:c9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:04:00 2025 by rpki-client