Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/436ae9ea-497a-3522-ba5c-e33e4b7fecbf.roa
File:                     436ae9ea-497a-3522-ba5c-e33e4b7fecbf.roa (raw, json)
Hash identifier:          1Q62jD46lvIKcracaZRRW+Mtv0+dX7Anaqsxk6wdXYQ=
Subject key identifier:   28:B6:39:1F:33:D9:B5:CD:8B:F3:51:16:C4:9C:54:A2:23:EE:BA:9D
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F43285849E7BA84748D2D476C081D32E0
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/436ae9ea-497a-3522-ba5c-e33e4b7fecbf.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     7265
IP address blocks:        207.98.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:84:74:8d:2d:47:6c:08:1d:32:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=6e219c95-6755-4791-b42a-9d3b97082940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b8:81:a3:a5:06:63:30:68:b0:1f:49:23:d3:
                    a5:dd:8c:ab:02:81:31:55:78:85:29:b8:46:ee:1b:
                    70:27:d8:64:97:01:4e:fc:5c:6a:3c:f0:48:dc:b5:
                    40:70:38:df:76:3f:d0:d1:f6:33:10:22:60:c8:8f:
                    bc:2a:f3:bc:4a:8c:39:26:1c:4f:cc:3a:09:76:b5:
                    76:89:5e:d4:78:51:71:63:36:fe:3f:d7:98:99:29:
                    82:e6:9f:1c:63:8f:81:fa:1b:cc:22:4d:49:c6:14:
                    86:d9:32:c2:7a:a4:75:58:e8:5e:0c:01:a6:82:b6:
                    46:ce:27:51:f7:0e:fd:4b:d4:22:b2:71:b9:70:26:
                    f8:40:5d:71:d4:13:26:1e:09:83:70:0b:35:24:d1:
                    11:fd:1c:eb:1e:53:06:91:31:95:ab:5a:5d:a9:28:
                    7f:b5:c1:78:2f:34:b9:2e:f0:c6:21:c4:87:37:7d:
                    0b:3b:fe:08:b0:77:f1:15:03:dd:8d:bc:34:ac:4b:
                    2b:00:e0:8f:57:2e:e9:81:5c:3e:ad:3c:d8:0d:f6:
                    40:3a:9a:10:f5:f9:6b:67:e5:54:49:bc:65:0e:a5:
                    e1:a0:1a:24:03:0c:b2:e1:80:10:0b:53:8d:83:ea:
                    44:8f:a1:78:da:87:95:28:8d:69:c4:e8:23:e7:7b:
                    9d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B6:39:1F:33:D9:B5:CD:8B:F3:51:16:C4:9C:54:A2:23:EE:BA:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/436ae9ea-497a-3522-ba5c-e33e4b7fecbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.98.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:e8:a9:0a:a1:63:72:b6:88:70:63:9a:ea:6c:91:16:ad:68:
         01:ec:58:c6:2d:c7:f2:c5:4f:f1:86:b4:1d:94:76:5d:f6:86:
         70:9b:b7:7a:73:cf:82:98:37:4e:d1:bb:d5:79:96:de:81:54:
         e4:b7:15:00:14:bc:91:3f:16:90:af:10:0a:a9:60:17:16:16:
         50:ee:c5:28:c1:3e:8c:8a:8c:f4:74:46:3b:0b:28:4f:d3:4c:
         26:e6:86:7f:54:d7:28:0e:1a:da:41:90:3e:e7:a8:f3:df:d4:
         b1:24:0a:88:05:e3:26:05:09:84:06:34:9e:aa:40:ab:92:cc:
         62:91:b1:3d:20:1e:56:0d:b4:51:1e:74:73:64:8b:61:81:91:
         09:a5:84:4b:da:3c:b9:d3:ac:e8:68:e6:bd:66:20:94:4b:00:
         8b:a7:da:5e:f7:c8:12:67:9b:57:c0:74:7f:aa:58:04:b2:11:
         cd:14:b1:51:45:dc:3c:55:eb:bf:91:ff:33:3c:2f:65:c3:c7:
         37:80:2a:e0:e7:ac:f7:cb:62:1f:0b:db:16:4a:03:52:fd:9e:
         7c:80:e4:b7:ab:d1:77:f9:5c:68:1d:6d:d7:63:a0:78:38:5e:
         d6:a0:e3:0f:ae:10:36:e7:3f:20:30:2e:7c:61:a8:78:55:0b:
         c0:77:c5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:04:45 2025 by rpki-client