Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e6295432-b7dd-321b-a9e2-1c301059b039.roa
File:                     e6295432-b7dd-321b-a9e2-1c301059b039.roa (raw, json)
Hash identifier:          mYKxJfLBm5BmcbzzYtF6iNXjIlLCFMamlb6nFRwCMcU=
Subject key identifier:   00:A3:3A:8B:46:4E:DA:82:05:89:AF:8E:1F:E9:98:22:3B:DE:1B:34
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328584ABD4B8D695A5D6744686B8500
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e6295432-b7dd-321b-a9e2-1c301059b039.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     198148
IP address blocks:        207.226.136.0/21 maxlen: 24
                          207.226.144.0/22 maxlen: 24
                          207.226.152.0/21 maxlen: 24
                          207.226.216.0/22 maxlen: 24
                          207.226.244.0/22 maxlen: 24
                          207.226.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:8d:69:5a:5d:67:44:68:6b:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=b9817a26-274c-4984-ab2a-252aa25e4bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d8:3f:e0:c4:a3:ae:d2:eb:07:3b:22:1d:44:
                    97:e0:bc:da:e9:72:d4:3c:5c:0f:5c:01:80:59:6f:
                    94:5e:a2:12:2e:35:8e:cb:46:4b:70:9c:76:ea:b7:
                    11:73:1b:c1:2e:44:ae:29:b4:da:8b:5e:5a:c1:e9:
                    0d:c0:6c:52:49:73:0a:ce:ec:4b:78:ec:db:29:e1:
                    0f:c8:b5:23:84:64:00:e3:57:e3:0f:96:b0:7b:ba:
                    37:5e:eb:c7:90:31:d7:14:0b:ce:fa:e6:80:02:9c:
                    c8:e2:9b:e3:29:a0:db:27:63:b5:42:53:94:9c:c3:
                    e7:01:78:d7:0b:3a:0c:ad:62:61:b3:25:11:72:11:
                    ab:b4:ae:dd:6d:bb:90:2e:fa:01:2b:a6:63:63:bf:
                    ef:98:7f:37:5e:a3:1b:64:06:8e:cb:0f:c0:77:10:
                    ac:1c:29:70:dd:b8:a9:27:de:35:ae:a7:e0:5c:ef:
                    ca:04:b0:d5:db:f0:f9:a6:f9:0f:b8:b0:26:1a:b4:
                    d7:0f:0c:e2:ec:77:d0:1e:cd:bf:bb:3c:15:b3:47:
                    1b:c1:04:f8:a1:46:e4:70:04:d9:ec:f9:49:8d:e1:
                    66:9d:cf:51:ea:21:5a:e7:69:ff:ff:c8:a6:79:1b:
                    1b:94:ce:81:b0:ac:c9:72:4f:ee:a9:65:90:9f:ee:
                    85:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A3:3A:8B:46:4E:DA:82:05:89:AF:8E:1F:E9:98:22:3B:DE:1B:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e6295432-b7dd-321b-a9e2-1c301059b039.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.226.136.0-207.226.147.255
                  207.226.152.0/21
                  207.226.216.0/22
                  207.226.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:06:2d:c8:5f:1b:95:24:59:d4:ad:b1:19:1c:b4:b9:bf:47:
         87:b9:d2:5c:69:fc:bd:88:d8:70:02:3a:d9:1b:0b:1a:ed:ab:
         17:74:98:13:5a:cd:db:f8:9d:0d:33:a4:c9:8c:7b:0b:84:1c:
         18:fb:ea:4b:f4:c8:1b:34:7a:39:c1:58:69:21:7a:c1:7f:77:
         65:b0:c9:b9:4f:bf:cf:5e:0a:a5:2c:ae:a5:27:80:48:da:62:
         6a:0c:76:ec:40:3e:96:53:c4:a4:5c:d5:a5:f5:79:91:97:eb:
         2b:cb:0d:a6:3f:57:b8:aa:af:32:30:02:5c:8e:7e:16:58:53:
         0e:c8:bb:c3:46:f0:59:8f:40:21:8e:9a:4a:35:10:dd:a1:0b:
         75:8b:5d:0a:c2:02:d1:f8:f1:4e:2b:89:d5:22:f6:55:5f:2a:
         21:a8:8b:77:0d:dd:92:77:44:f1:e1:22:c1:d3:56:50:1d:f4:
         4e:ac:7b:09:c4:12:cb:8c:cf:8f:d2:1c:23:83:21:7f:d5:a4:
         59:b8:28:4b:a0:f2:f3:ab:cb:a9:7a:98:b6:92:2b:44:62:94:
         35:3a:56:ac:ec:1b:92:40:ee:0e:c1:7a:9a:53:7c:81:c2:9f:
         c1:62:6a:a9:9d:e5:7e:19:0d:5a:9e:4d:b7:9d:5e:e5:1f:d5:
         68:a1:a5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:37:07 2025 by rpki-client