Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/26d6921e-6c18-3898-b2f4-e87d0d9d65df.roa
File:                     26d6921e-6c18-3898-b2f4-e87d0d9d65df.roa (raw, json)
Hash identifier:          wYLUeDsW6Lgrt8gg01wNASjpiehBCM3KOcJfT/cd5H0=
Subject key identifier:   10:45:0C:64:F5:1B:9F:7B:A0:0B:BC:4A:B4:D1:A7:A7:D6:64:C2:B3
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285849912F2A135253FB00DFD8D110
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/26d6921e-6c18-3898-b2f4-e87d0d9d65df.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     7861
IP address blocks:        207.229.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:2a:13:52:53:fb:00:df:d8:d1:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=60254124-2329-4c1f-b4fb-1e6d214ca260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e3:bf:9d:f3:09:85:83:a4:cc:5d:10:d8:85:
                    14:33:82:19:37:90:43:f9:e3:be:cc:5d:8b:d6:b4:
                    04:62:d9:ac:33:47:2a:90:eb:ee:62:ef:0c:4f:48:
                    1a:50:70:ba:61:fb:72:a5:29:4e:11:58:c1:19:3e:
                    61:af:ee:30:4c:c3:5d:44:28:84:f9:d8:d3:d4:90:
                    82:2e:f7:c4:79:33:92:71:e8:8a:91:eb:ac:61:fe:
                    9e:be:cd:30:fb:77:88:c4:11:2e:4a:77:76:3c:40:
                    a8:49:cf:8e:16:ff:ca:5d:7b:f6:d5:1d:e9:b2:3b:
                    6d:af:8f:c2:e2:08:c2:b2:d7:22:f5:91:13:d9:3b:
                    69:f8:45:5b:5d:f9:8e:ad:2f:f3:4f:f5:5c:fb:d9:
                    a2:ac:35:c3:55:a0:af:e1:46:28:56:92:38:c3:85:
                    d5:9e:87:41:e4:88:b8:5f:82:65:a1:5f:83:f6:f0:
                    4a:ca:af:08:f2:2b:19:0d:02:43:53:ef:8d:5d:42:
                    0a:34:14:ee:98:6e:1d:87:79:14:5e:7e:8a:73:d7:
                    0b:99:b3:ca:26:74:7d:22:de:39:0d:2c:b4:a5:69:
                    17:c4:ef:0a:b1:c1:ad:b4:96:15:33:ce:e8:de:1c:
                    4a:38:ca:55:4d:84:b8:72:99:23:99:90:cb:2d:88:
                    36:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:45:0C:64:F5:1B:9F:7B:A0:0B:BC:4A:B4:D1:A7:A7:D6:64:C2:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/26d6921e-6c18-3898-b2f4-e87d0d9d65df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.229.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:a9:a4:53:6f:2e:c6:27:8b:97:30:a9:0c:5f:be:43:4f:86:
         06:67:5a:3a:e0:b5:d6:b0:56:e9:e8:f9:a2:38:fc:3a:7e:e6:
         3e:9b:bb:6d:95:41:2e:4c:ba:23:f7:da:a0:e1:50:7e:c9:8a:
         50:66:e7:5c:cb:8f:f7:b3:2b:88:74:a6:fc:47:ff:fc:b8:59:
         d2:85:72:d6:a8:dc:3b:ce:b0:60:32:f2:68:a4:da:51:3f:79:
         b0:1d:2b:e9:51:fb:01:7a:ad:16:33:cf:8e:29:3a:3d:6c:9b:
         6d:d7:4f:d2:b2:2b:f3:e4:66:4f:7b:5f:79:a3:03:fb:4f:37:
         84:40:30:65:04:5b:be:40:5d:bc:d6:42:d8:a0:d6:72:55:ea:
         81:e6:85:bb:a2:95:fd:e2:c3:35:f4:6e:82:6b:60:05:3e:25:
         d8:80:d9:bb:1d:98:37:9e:1c:28:b7:14:b4:35:b3:27:91:b0:
         94:97:1c:1a:4a:82:48:9e:d4:11:07:eb:ff:ad:15:f0:ea:b6:
         91:ef:bc:7f:16:fd:d1:be:fb:1a:56:ae:46:df:12:bc:6d:79:
         15:dd:be:ab:03:b2:56:15:4d:d0:03:90:c1:a9:ec:6b:dd:cf:
         be:b0:71:3a:47:c5:87:1f:8d:3c:d5:1e:78:2e:f8:85:f8:7e:
         4e:27:2f:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRLyoTUlP7AN/Y0RAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk
NjAyNTQxMjQtMjMyOS00YzFmLWI0ZmItMWU2ZDIxNGNhMjYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOO/nfMJhYOkzF0Q2IUUM4IZN5BD+eO+zF2L
1rQEYtmsM0cqkOvuYu8MT0gaUHC6YftypSlOEVjBGT5hr+4wTMNdRCiE+djT1JCC
LvfEeTOSceiKkeusYf6evs0w+3eIxBEuSnd2PECoSc+OFv/KXXv21R3psjttr4/C
4gjCstci9ZET2Ttp+EVbXfmOrS/zT/Vc+9mirDXDVaCv4UYoVpI4w4XVnodB5Ii4
X4JloV+D9vBKyq8I8isZDQJDU++NXUIKNBTumG4dh3kUXn6Kc9cLmbPKJnR9It45
DSy0pWkXxO8KscGttJYVM87o3hxKOMpVTYS4cpkjmZDLLYg2QQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBBFDGT1G597oAu8SrTRp6fWZMKzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjZkNjkyMWUtNmMxOC0z
ODk4LWIyZjQtZTg3ZDBkOWQ2NWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz+UkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEyppFNvLsYni5cwqQxfvkNPhgZnWjrgtdawVuno+aI4/Dp+5j6bu22V
QS5MuiP32qDhUH7JilBm51zLj/ezK4h0pvxH//y4WdKFctao3DvOsGAy8mik2lE/
ebAdK+lR+wF6rRYzz44pOj1sm23XT9KyK/PkZk97X3mjA/tPN4RAMGUEW75AXbzW
Qtig1nJV6oHmhbuilf3iwzX0boJrYAU+JdiA2bsdmDeeHCi3FLQ1syeRsJSXHBpK
gkie1BEH6/+tFfDqtpHvvH8W/dG++xpWrkbfErxteRXdvqsDslYVTdADkMGp7Gvd
z76wcTpHxYcfjTzVHngu+IX4fk4nLyQ=
-----END CERTIFICATE-----
Generated at Sun Apr 27 02:22:04 2025 by rpki-client