Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/2d9a4ced-7c32-3c1f-ba9a-1c072bcda92d.roa
File:                     2d9a4ced-7c32-3c1f-ba9a-1c072bcda92d.roa (raw, json)
Hash identifier:          Qmr9leiBj7QieITME4mM6CGjPn49R5RVkfTcKnYAdB0=
Subject key identifier:   3C:5E:3F:58:DE:45:88:36:73:9F:84:6C:35:8F:F6:8B:5C:65:3E:E0
Certificate issuer:       /CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
Certificate serial:       010D0C9F4328584AA42B6F511A865C8A4115F100
Authority key identifier: 26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/2d9a4ced-7c32-3c1f-ba9a-1c072bcda92d.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     3855
IP address blocks:        207.228.170.0/24 maxlen: 24
                          207.228.171.0/24 maxlen: 24
                          207.228.172.0/24 maxlen: 24
                          207.228.173.0/24 maxlen: 24
                          207.228.174.0/24 maxlen: 24
                          207.228.175.0/24 maxlen: 24
                          207.228.176.0/24 maxlen: 24
                          207.228.177.0/24 maxlen: 24
                          207.228.178.0/24 maxlen: 24
                          207.228.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:6f:51:1a:86:5c:8a:41:15:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=5fb100f4-83f7-4ede-ab76-a3dc46075ec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cc:56:a3:da:f1:39:9c:2c:23:d7:06:0c:30:
                    c4:77:02:20:31:87:f6:20:b8:22:47:6d:76:71:57:
                    59:d2:f1:32:5a:90:34:64:b0:d4:7d:79:2b:e1:f6:
                    e3:d0:12:06:e5:5d:54:90:a7:0f:fc:6c:e4:9b:25:
                    91:5b:df:b1:72:54:51:a3:90:83:f1:55:dd:1e:3a:
                    c0:f4:9d:d5:59:ca:7b:25:c4:0d:53:53:17:3e:d4:
                    db:58:5d:22:c4:31:fc:13:9a:b6:e4:9d:08:db:90:
                    27:33:a3:62:35:d1:65:0f:f1:32:36:1b:04:f8:b3:
                    35:d2:0a:8e:9a:73:dd:c4:b2:a9:3c:16:f9:f6:19:
                    d3:77:ee:70:c2:54:42:67:dd:f8:c2:8c:21:6a:18:
                    b0:86:f5:62:7e:7f:31:53:f1:5c:50:c5:45:08:ae:
                    87:41:6f:8c:d2:8a:16:e4:2d:3a:2c:e1:16:f0:3c:
                    da:f5:39:8b:bd:06:ad:d2:a0:a1:83:a3:21:5a:4b:
                    55:b5:bc:d4:78:4a:c7:64:39:aa:f6:5b:a7:40:cb:
                    ab:98:e4:88:3d:f8:56:11:34:8e:2e:1d:ef:2f:92:
                    6f:f8:f2:55:4a:f5:f0:61:d1:00:7a:2b:4a:96:64:
                    3b:cc:da:9c:51:02:35:60:a9:3f:2b:35:ff:0b:de:
                    ca:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:5E:3F:58:DE:45:88:36:73:9F:84:6C:35:8F:F6:8B:5C:65:3E:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/2d9a4ced-7c32-3c1f-ba9a-1c072bcda92d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl

            X509v3 Authority Key Identifier:
                keyid:26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.228.170.0-207.228.179.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:27:10:ee:fb:f5:87:4a:79:06:66:46:dd:3e:61:38:13:f4:
         e2:78:a7:7f:97:53:a9:7e:78:f5:fa:2d:49:ae:71:f2:de:b6:
         a6:16:e7:b0:a6:75:b6:71:d0:45:16:e7:e0:ca:67:64:8f:0f:
         68:12:2b:e1:41:44:66:ba:49:8f:04:16:8e:a8:ae:ec:d1:7c:
         09:85:87:3d:82:ec:38:c7:19:75:1e:cb:36:ed:a2:df:5d:0e:
         00:0b:92:9d:5c:58:8e:46:b4:97:9b:a1:1e:12:8c:5a:28:d5:
         41:89:6e:f4:69:99:bf:46:16:db:65:5f:0c:f1:47:a9:2b:97:
         c0:67:34:3d:a4:e4:7b:11:28:14:f3:8a:d5:1d:75:e6:25:84:
         02:c4:fc:64:1f:5c:22:57:e5:8a:77:fe:8e:a3:1c:02:34:da:
         0a:3f:bc:2f:9b:d3:1f:c2:f8:7c:11:7e:0b:e9:7b:4c:3f:60:
         bf:e6:93:ad:73:a8:8e:81:c1:5a:be:4e:23:a7:66:ff:01:41:
         21:b1:76:e2:a6:05:bd:c7:45:61:a9:04:d7:7b:23:54:d5:bc:
         64:8b:21:dc:b7:b0:92:36:49:5a:08:12:34:0c:ae:a8:a7:e6:
         2e:43:04:a2:6d:66:63:fa:d8:df:40:46:4a:91:61:7d:86:4b:
         3f:69:ca:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:02:47 2025 by rpki-client