Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d643bb9f-285c-3a05-a743-4328e868322b.roa
File:                     d643bb9f-285c-3a05-a743-4328e868322b.roa (raw, json)
Hash identifier:          fLE+WoyGCdimm4sENCMo7AFXqNooWOvVV6qRa6dfg/Q=
Subject key identifier:   5B:22:AC:D3:88:10:AE:78:6D:A4:8A:92:FC:D2:4D:98:62:19:16:61
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285849F01A8298BC83CD635DF3FB20
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d643bb9f-285c-3a05-a743-4328e868322b.roa
Signing time:             Thu 22 May 2025 13:01:05 +0000
ROA not before:           Thu 22 May 2025 13:01:05 +0000
ROA not after:            Wed 20 Aug 2025 13:01:05 +0000
asID:                     212384
IP address blocks:        174.140.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:1a:82:98:bc:83:cd:63:5d:f3:fb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 22 13:01:05 2025 GMT
            Not After : Aug 20 13:01:05 2025 GMT
        Subject: CN=95e021b1-4878-45ea-8e49-9ebd3ab04629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:bf:cd:1a:36:55:fa:19:ce:01:e4:2d:c1:ac:
                    c4:69:88:01:98:08:de:a8:e2:55:89:ee:56:09:92:
                    2b:71:12:c5:9d:e5:7f:14:47:07:8e:8a:01:5c:ad:
                    09:4c:19:c9:5d:dc:99:f1:e6:4f:b2:51:34:37:1e:
                    53:94:d0:0b:7e:0f:e4:d0:8c:43:36:cf:db:cc:fe:
                    c1:c6:dc:37:a7:8a:c3:85:61:90:ae:cd:6c:c1:55:
                    db:ee:4e:7a:21:18:20:1a:08:c5:5c:39:c3:f8:77:
                    b6:b0:24:19:d2:fa:10:fc:2d:ac:d1:89:6f:dc:f9:
                    4b:e1:32:e4:06:81:8a:d3:21:c9:93:95:b3:d3:a3:
                    1f:08:76:ae:90:5a:b5:79:55:88:ae:2d:11:90:0a:
                    e9:a6:4b:ff:a3:f7:2e:75:31:3e:12:48:a4:ad:a9:
                    72:a6:a1:7d:99:c5:9c:78:a6:5a:0c:20:6b:be:59:
                    e3:de:f6:27:58:eb:4c:a2:5e:d3:cc:29:9f:c0:9c:
                    02:46:88:e8:44:16:23:f0:24:75:b2:a5:1d:90:39:
                    83:4b:6a:21:3b:ff:a3:9a:9a:ce:c2:04:91:5b:aa:
                    b7:74:02:41:f3:70:7b:e9:b4:cb:4c:a8:65:e2:ed:
                    86:50:e1:c1:c2:d3:87:8f:92:f9:3b:d0:28:f2:dc:
                    4b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:22:AC:D3:88:10:AE:78:6D:A4:8A:92:FC:D2:4D:98:62:19:16:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d643bb9f-285c-3a05-a743-4328e868322b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.140.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:68:03:85:25:a0:9d:7e:4d:e4:55:e2:78:bc:26:cf:56:c8:
         48:c2:82:33:17:dc:88:f0:1c:f7:3d:28:5e:b6:bd:7a:85:8b:
         17:ae:3c:87:62:4a:65:2a:e0:7a:cc:2e:a5:52:43:67:c0:4b:
         e9:c9:44:5d:6c:ee:07:d6:6d:34:5e:c5:ee:bd:8b:a7:0f:be:
         80:df:fa:66:bb:e3:82:47:62:29:c3:14:71:63:57:74:3d:02:
         e0:03:0f:72:1b:ae:af:f0:14:82:86:f1:96:7d:12:80:64:d6:
         f8:d8:05:80:ee:d3:b1:68:c9:a8:13:17:be:75:2d:67:50:fc:
         26:07:95:2b:3c:99:c6:e5:6c:87:c1:d8:b2:54:0e:79:f6:40:
         22:c5:25:27:22:7f:fd:47:86:7c:5c:d1:32:f1:00:e7:6d:72:
         62:2c:a8:e4:0f:11:29:af:47:d3:64:d9:d3:65:aa:61:1a:e3:
         ec:77:5a:81:3f:ec:02:dd:2d:34:01:94:58:36:0b:1d:36:29:
         d7:bc:29:a6:31:cc:69:72:50:37:e2:85:c3:01:37:52:6b:7a:
         4f:a1:ef:6e:60:3f:e5:15:54:f9:47:99:f1:0b:61:60:28:13:
         cd:9f:1a:94:31:0d:3f:d3:8c:b9:d5:5b:42:20:28:1a:ab:db:
         be:6b:02:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:53:05 2025 by rpki-client