Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/d5fe870a-1fd2-3fbb-8dec-9246ffc8bcbf.roa
File:                     d5fe870a-1fd2-3fbb-8dec-9246ffc8bcbf.roa (raw, json)
Hash identifier:          YmbSRx8ZJSUg2/Q0L7MXEfU3f1lQe1dCP7Vr8Afbsfk=
Subject key identifier:   EE:2D:5E:0D:94:A1:CA:88:10:8C:5B:61:32:13:E7:13:3A:59:BA:93
Certificate issuer:       /CN=e5c2b906-947b-452e-a546-6011e1a0e535
Certificate serial:       010D0C9F43285849DF5A69DC26A4650CBF66AE60
Authority key identifier: 07:4F:E3:D0:AA:F0:11:BF:7A:CB:C8:51:6B:21:E5:BC:9E:5E:9F:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/d5fe870a-1fd2-3fbb-8dec-9246ffc8bcbf.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     101
IP address blocks:        207.231.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/e5c2b906-947b-452e-a546-6011e1a0e535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/e5c2b906-947b-452e-a546-6011e1a0e535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:69:dc:26:a4:65:0c:bf:66:ae:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c2b906-947b-452e-a546-6011e1a0e535
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=8ea2503f-d635-4373-a16e-6f819cefbd8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:76:bb:a0:c7:52:00:22:39:d4:ca:09:16:5b:
                    36:57:6e:d6:e8:e8:83:39:60:0c:3a:6c:23:81:d9:
                    98:ac:e1:8b:6d:98:34:32:c3:38:07:a0:5e:ca:3f:
                    b8:24:ec:2d:2d:b8:4e:c9:50:ff:7e:e9:67:ac:fe:
                    63:58:3c:bc:b6:ed:ae:e3:be:ab:cb:7c:e3:c9:61:
                    91:f0:52:e1:f0:16:d3:3b:46:8c:2d:bb:9d:eb:06:
                    22:2c:98:01:22:a9:9b:48:5e:87:44:5c:e6:6d:c4:
                    f2:9f:57:69:57:cd:e7:81:8b:5b:31:f4:e1:b2:bd:
                    73:69:04:b7:2d:e9:0e:8e:9b:fc:b0:cd:d7:dd:6e:
                    41:71:73:7d:6b:58:94:c6:4b:bb:ce:82:ca:24:df:
                    85:c9:96:4e:3f:db:54:12:c9:ad:fb:ae:3a:63:6d:
                    4f:1b:bd:d2:20:68:62:cb:76:cd:f7:a5:97:72:4a:
                    bf:95:3f:f6:e1:40:01:11:e5:c7:3c:d7:31:01:66:
                    25:9f:d4:be:67:21:63:d0:4c:9e:dc:5a:27:14:20:
                    ca:2d:1a:d9:53:1b:0d:9f:04:6f:da:3d:c0:01:4c:
                    35:88:e6:53:13:f3:62:4f:60:c7:00:3e:9f:01:fd:
                    5a:6d:06:fe:2b:1c:9d:4e:2d:28:43:b2:a1:ae:c7:
                    85:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2D:5E:0D:94:A1:CA:88:10:8C:5B:61:32:13:E7:13:3A:59:BA:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/d5fe870a-1fd2-3fbb-8dec-9246ffc8bcbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/e5c2b906-947b-452e-a546-6011e1a0e535.crl

            X509v3 Authority Key Identifier:
                keyid:07:4F:E3:D0:AA:F0:11:BF:7A:CB:C8:51:6B:21:E5:BC:9E:5E:9F:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.231.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:ac:b0:1b:82:c2:61:2a:60:d1:40:75:92:2e:ae:92:ac:36:
         55:8f:69:2a:e8:52:81:33:17:cf:5d:80:6e:c8:37:d1:34:02:
         50:c8:a0:a7:f2:ae:ef:ce:cb:0e:06:59:25:94:d3:c1:ff:69:
         ab:e2:1f:b1:32:2a:60:c5:23:f8:c5:45:9d:6d:25:33:80:b3:
         51:a8:a8:f7:f0:b3:ea:28:56:76:f0:04:e6:ae:fa:7f:4e:a3:
         12:67:d2:25:77:b8:0e:fb:62:de:df:0d:36:de:a6:fd:61:66:
         c1:79:3b:a0:8b:1b:6f:bc:68:2a:5c:b6:1e:e6:9e:3c:02:c1:
         75:a4:42:51:79:12:de:82:73:2d:27:59:2a:72:ef:db:72:bc:
         53:2a:47:39:ba:b2:dc:1d:ba:2e:36:90:ad:80:18:0a:f6:76:
         e5:d5:f0:a4:23:5b:65:99:cb:4c:9c:04:a9:b8:9d:f7:76:99:
         f2:2c:ba:1a:a0:09:de:0b:61:e6:02:25:d8:59:37:55:af:0e:
         80:1f:53:4d:07:98:d9:57:98:13:28:8f:90:9a:1f:a7:fc:28:
         80:d8:7e:a9:f7:e7:98:6d:a8:4c:9a:ba:70:a3:6a:ba:31:81:
         e4:e0:73:46:06:7e:81:9a:54:fb:5d:a2:b9:f1:96:64:c0:2c:
         23:3e:06:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:00:29 2025 by rpki-client