Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dba7f688-217c-37d8-a7c5-e8b682887178.roa
File:                     dba7f688-217c-37d8-a7c5-e8b682887178.roa (raw, json)
Hash identifier:          3hxT1YElidYE2X+rqc+P+gZLmy6UBmuKh/Al92X2ulo=
Subject key identifier:   DF:F2:D8:B4:37:AE:76:A2:89:D6:3D:4E:A1:9D:8D:6D:8F:D1:E0:44
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAAD9CC30E4C61B7CB2F00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dba7f688-217c-37d8-a7c5-e8b682887178.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36522
IP address blocks:        207.236.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:ad:9c:c3:0e:4c:61:b7:cb:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=799f55a1-ba3f-46d6-9ebb-7df7655f14e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2a:47:41:42:ef:dd:04:8b:30:0e:6e:9a:f1:
                    8a:ae:24:58:2d:50:4e:6a:5d:d1:35:ff:bb:62:51:
                    51:6a:62:72:aa:f6:44:54:c0:9b:a2:e2:c8:13:39:
                    ca:e2:64:3c:f4:20:50:80:8c:73:c3:d3:2c:f2:93:
                    88:a0:7c:d6:ff:4d:41:f2:57:6c:c2:39:75:91:ce:
                    33:f0:16:ce:34:a6:43:78:56:8b:fd:f3:97:33:fc:
                    4b:63:a0:0c:af:86:9d:c4:de:aa:f0:02:38:6f:f7:
                    4a:97:e0:c7:6d:c8:eb:be:eb:2d:d8:23:13:de:27:
                    c0:96:d0:fb:58:c4:23:0f:2b:fe:ed:7e:1b:2e:9a:
                    9e:77:59:81:ac:1b:90:c7:c9:47:f3:63:b5:56:4c:
                    51:e2:d0:3c:19:72:2b:1f:f7:39:b5:ac:a3:5e:15:
                    55:a7:05:0a:4f:8a:c2:e5:e6:6b:ad:52:78:c5:7a:
                    9c:c8:b3:91:43:7a:dd:bc:12:e2:8b:c4:f7:56:57:
                    4c:78:5d:bc:dd:e3:74:b3:1f:cd:98:5a:de:9b:41:
                    65:22:fd:c9:e8:b7:1c:ac:b2:1a:32:38:3c:f5:c1:
                    ea:e8:61:92:5a:ea:5a:ba:7d:fa:40:85:03:cf:13:
                    44:ca:eb:cc:47:fd:22:f1:1b:5e:41:b1:87:56:a7:
                    0d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F2:D8:B4:37:AE:76:A2:89:D6:3D:4E:A1:9D:8D:6D:8F:D1:E0:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dba7f688-217c-37d8-a7c5-e8b682887178.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:bf:d5:70:96:cf:46:be:77:52:85:fa:e5:76:01:ad:eb:c7:
         23:00:cf:27:ae:54:19:3a:4c:31:8a:18:b1:fd:3a:36:47:79:
         a7:ea:4e:37:27:81:8c:db:ec:9d:61:d7:5b:a3:19:86:50:76:
         18:65:3d:81:01:18:67:b2:5b:c1:93:ab:f7:a0:72:2f:8a:71:
         5a:17:c7:34:46:1a:ec:3e:b8:3a:14:b3:db:82:61:87:60:e0:
         74:58:05:6b:97:00:cd:66:d7:a6:9a:25:c6:6b:30:e3:04:93:
         86:9e:48:6d:95:c1:92:52:e1:17:27:5a:27:3e:7c:87:c7:11:
         69:19:19:46:ed:0f:69:09:b5:f6:50:e5:02:37:3c:87:7b:9d:
         2a:cb:6c:b3:f8:8d:74:b0:53:b9:72:69:40:3b:0d:5a:3b:62:
         ff:a0:bb:38:88:76:f3:99:6d:07:5a:2a:33:66:5f:3b:e2:3f:
         cc:2a:46:d0:1b:04:ae:58:62:39:72:d2:36:5a:64:29:3c:f2:
         23:f6:73:4f:fc:69:20:6e:fa:7d:e9:64:0a:48:5b:f7:85:96:
         46:f4:f1:6e:e2:e8:f5:b6:d0:ad:80:25:a9:7f:39:60:bc:9e:
         2c:f9:3d:bc:87:8c:52:07:0d:d1:c6:be:2c:21:5e:55:f9:9b:
         08:b2:55:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:04:13 2025 by rpki-client