Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/8260418f-0a04-3d77-a711-ae67a5fdb9d7.roa
File:                     8260418f-0a04-3d77-a711-ae67a5fdb9d7.roa (raw, json)
Hash identifier:          L7l293dDp3K6KcZIQ3T2XDu/Ui0kMpL6UDalS6+f5qc=
Subject key identifier:   CB:FF:FE:80:A0:98:DC:E3:FC:79:99:56:69:64:55:0B:9B:E7:14:FD
Certificate issuer:       /CN=95437874-24a3-4971-a87b-95b645e257bb
Certificate serial:       010D0C9F4328584986636A9038AAC1678F7F7FC0
Authority key identifier: 0D:9A:58:69:BC:33:C0:D1:95:9C:3D:00:B9:00:3B:B9:43:8A:4E:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/8260418f-0a04-3d77-a711-ae67a5fdb9d7.roa
Signing time:             Mon 14 Apr 2025 16:12:27 +0000
ROA not before:           Mon 14 Apr 2025 16:12:27 +0000
ROA not after:            Sun 13 Jul 2025 16:12:27 +0000
asID:                     36556
IP address blocks:        207.22.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/95437874-24a3-4971-a87b-95b645e257bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/95437874-24a3-4971-a87b-95b645e257bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:86:63:6a:90:38:aa:c1:67:8f:7f:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95437874-24a3-4971-a87b-95b645e257bb
        Validity
            Not Before: Apr 14 16:12:27 2025 GMT
            Not After : Jul 13 16:12:27 2025 GMT
        Subject: CN=1a217657-f00e-43fb-8229-f9cbd05fc33a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:36:67:c0:b2:a2:6d:22:f8:2a:7c:63:55:93:
                    b8:24:12:31:ec:5e:b7:77:c3:d2:c6:a7:77:70:22:
                    84:e4:1e:aa:db:53:71:fa:c9:df:48:2d:c8:84:57:
                    ab:2a:1d:08:f4:90:41:de:eb:f0:c5:57:00:87:f8:
                    4d:01:ce:75:7f:28:d7:3d:55:64:f4:7b:44:52:d2:
                    1e:b2:b0:fc:1e:9b:c3:68:ae:6c:3b:b2:ac:f9:e2:
                    8a:8f:45:c7:93:c5:f4:e6:57:7f:5d:33:25:e9:3d:
                    60:29:94:13:9c:0f:a8:b1:51:5c:b1:b8:a5:14:10:
                    ad:e9:f6:e2:58:8e:32:ad:99:40:49:2c:99:58:3b:
                    b2:f0:0d:c3:98:59:9f:d7:d6:9b:9b:34:f6:12:a0:
                    f0:64:6b:2d:41:12:f4:cc:16:91:f3:80:dd:0d:43:
                    69:66:00:c3:4b:02:21:14:70:c2:d3:36:68:1a:08:
                    29:8f:a3:76:a3:b1:b9:d5:e0:b9:7b:e2:ae:d0:9d:
                    1d:a0:1f:92:1d:2e:bf:3e:ff:5a:8a:92:df:4c:9b:
                    b8:3f:a9:83:69:7f:08:75:9c:2c:7a:df:09:99:bc:
                    1e:09:c2:a0:f7:99:ed:21:c3:1f:89:55:5e:42:14:
                    17:31:44:d7:10:37:31:c9:c2:59:e7:b4:3d:ab:9c:
                    09:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FF:FE:80:A0:98:DC:E3:FC:79:99:56:69:64:55:0B:9B:E7:14:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/8260418f-0a04-3d77-a711-ae67a5fdb9d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/95437874-24a3-4971-a87b-95b645e257bb.crl

            X509v3 Authority Key Identifier:
                keyid:0D:9A:58:69:BC:33:C0:D1:95:9C:3D:00:B9:00:3B:B9:43:8A:4E:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.22.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:1e:c5:32:33:af:fc:aa:f2:85:93:b8:59:1c:60:cc:ee:c9:
         f4:2b:5c:22:bb:8e:97:7e:0e:1f:b7:56:ad:c8:31:2f:1b:89:
         80:f7:bf:38:20:be:81:e4:f9:88:1f:15:eb:56:01:6b:e6:2d:
         92:73:70:d3:6d:96:2a:2a:63:0a:64:c7:bd:a9:d3:b0:a8:04:
         32:a4:48:e8:46:32:c2:78:e7:87:2c:f2:71:42:64:a3:33:90:
         f2:b7:e5:dd:63:ed:9b:d3:47:1c:d8:7d:21:c9:2c:05:ba:72:
         e0:cb:3e:8a:34:64:39:9c:c4:6f:c5:12:63:90:09:1b:8a:15:
         00:7e:97:1e:c5:1d:28:45:a4:82:42:66:d5:5c:6c:70:a2:a4:
         4f:36:02:07:96:07:d9:7e:84:ad:15:17:93:3f:64:fb:54:c2:
         00:02:91:3c:e4:1c:ca:d7:18:21:df:99:aa:ca:76:51:33:7c:
         d8:27:4f:07:22:f5:f6:4b:76:d8:9f:4a:6a:d8:02:18:e4:16:
         76:c1:63:a5:ba:ff:58:6e:b2:f7:37:03:09:e9:3b:19:cd:07:
         2e:68:41:92:95:fc:5a:87:7b:f1:b1:fa:33:bb:e0:4f:e2:59:
         df:15:d9:15:a2:93:44:15:17:be:36:56:0d:24:ef:b9:45:93:
         5e:60:b2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 03:38:16 2025 by rpki-client