Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/190da15e-c06a-3eb9-87c5-9d8fd604a77d.roa
File:                     190da15e-c06a-3eb9-87c5-9d8fd604a77d.roa (raw, json)
Hash identifier:          A3am67RaPzN3czkgTs0btiPqmCa/f2GPuiUSKIazCnM=
Subject key identifier:   60:AF:60:AC:55:E4:A2:DF:0F:C4:11:02:81:63:4B:AC:6A:33:B4:E2
Certificate issuer:       /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
Certificate serial:       010D0C9F4328584AAB2655F45B17ABACFE4C6860
Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/190da15e-c06a-3eb9-87c5-9d8fd604a77d.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     3807
IP address blocks:        207.196.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:55:f4:5b:17:ab:ac:fe:4c:68:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=44c5d869-65e5-4a0d-b89f-5010d37de31a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e0:c3:e1:23:94:8e:db:67:94:38:77:8f:05:
                    8c:cd:b0:9d:ff:73:45:3e:d1:f0:57:2b:e2:f3:55:
                    0a:57:7f:62:94:6f:30:91:db:6a:4d:c5:12:af:9e:
                    15:d2:4c:96:37:8a:ad:4d:07:81:fc:7d:f1:fd:ee:
                    52:34:95:e0:e1:dc:e0:35:b9:6f:d9:0b:85:81:08:
                    ea:0e:ae:e2:ba:c8:35:74:0f:19:74:1f:b8:50:82:
                    8e:93:27:d5:56:66:3f:47:70:d6:9f:f7:c9:11:96:
                    52:3c:2e:3d:15:25:6c:89:1d:c1:ae:c6:ad:dc:d2:
                    a6:e4:ea:66:bb:04:ba:98:67:9d:c6:d2:2d:db:64:
                    57:a1:70:71:a2:f6:b4:e4:8c:cc:97:e9:63:b1:94:
                    b4:1f:b8:d6:09:44:e3:39:4e:f5:0f:35:6d:af:25:
                    ea:ea:cb:9d:af:40:08:b8:49:d5:54:c2:8c:d7:2f:
                    2d:9d:c0:d6:3e:56:06:ec:c4:5d:df:a4:3b:84:51:
                    ee:22:af:16:47:ed:27:6f:cd:95:42:7f:c9:24:e7:
                    61:70:35:06:f5:29:d0:be:73:f2:15:5d:49:7a:50:
                    f8:c1:3b:7f:21:39:e0:82:68:b3:b1:c2:66:3f:30:
                    c4:3a:9c:d1:7f:29:e2:b0:ed:f1:76:35:75:34:03:
                    d9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:AF:60:AC:55:E4:A2:DF:0F:C4:11:02:81:63:4B:AC:6A:33:B4:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/190da15e-c06a-3eb9-87c5-9d8fd604a77d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl

            X509v3 Authority Key Identifier:
                keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.196.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:3c:ec:20:a4:74:b7:d7:a8:73:42:e6:f6:d7:56:d7:0e:f0:
         7e:6f:2d:31:e3:6b:fd:9d:7c:a1:ce:fb:9f:bf:d5:69:6d:56:
         04:ba:03:5d:ed:2e:c4:8d:1d:b2:9b:9c:d6:41:d0:6d:2c:0c:
         07:84:59:60:8f:38:3e:a0:4d:02:88:f0:2c:87:57:06:6a:2d:
         65:67:16:03:0b:98:59:fb:e6:f7:ab:d8:1b:07:6c:6f:fc:38:
         7a:ec:bd:3a:69:47:43:c5:ab:31:3f:fc:03:13:5c:ed:10:4c:
         0b:18:23:67:b7:5a:f6:f5:64:b3:4b:24:b5:96:ee:b2:fe:d8:
         6b:70:43:e4:2d:37:93:be:81:46:25:da:fe:3a:15:94:26:1e:
         b9:ad:c6:bd:63:b4:23:dc:a4:d0:9a:d6:dd:8b:f8:b9:b9:2c:
         b6:ca:b2:19:c7:f4:67:38:e2:7f:45:65:82:52:21:38:36:d1:
         62:c9:a2:a5:a0:34:aa:75:60:dc:df:39:18:41:b9:6e:0c:ff:
         05:aa:01:30:ca:65:5d:83:7a:22:d6:83:b7:d1:f6:f2:03:c0:
         dc:56:5e:77:98:af:f3:ca:e2:38:68:f0:b6:66:38:78:48:1d:
         c1:f7:ba:c6:ac:ab:99:d2:88:4e:ca:9c:b2:1b:7e:31:01:fa:
         eb:f1:a5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:08:13 2025 by rpki-client