Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/ffea9834-438c-3fbf-84ba-aed609092a3d.roa
File:                     ffea9834-438c-3fbf-84ba-aed609092a3d.roa (raw, json)
Hash identifier:          L8wiqNU07sUGKWsxmRHkMIyENCansFFHHRzhYFZ2tVE=
Subject key identifier:   27:31:0F:B9:01:D3:22:37:8C:E5:EA:D0:FC:77:6D:6D:B0:9D:D4:9A
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F43285849D594E457E531440BF5FE1A00
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/ffea9834-438c-3fbf-84ba-aed609092a3d.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     135357
IP address blocks:        207.226.136.0/24 maxlen: 24
                          207.226.137.0/24 maxlen: 24
                          207.226.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:e4:57:e5:31:44:0b:f5:fe:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=f37ceef7-564e-4dec-bd59-6a4870345d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ea:3f:db:47:aa:ad:96:db:a0:a0:f9:97:e7:
                    c4:ef:b2:d9:ab:e0:2d:8f:0b:be:80:5e:6c:c4:fa:
                    ef:a5:97:b8:c2:84:8e:df:5a:8b:7d:8f:3a:90:6b:
                    f6:87:6c:79:28:96:95:12:e6:ac:14:03:9e:a9:ee:
                    51:6d:9b:a0:f6:28:29:7f:36:de:1d:d6:d6:9e:78:
                    9b:17:06:6f:52:56:f7:2b:ee:f8:89:7a:56:ba:fd:
                    08:ef:dd:f0:bb:15:b1:d4:73:4b:d0:fa:71:b9:ed:
                    72:a4:6e:88:d4:9e:68:cc:31:ba:40:f8:8d:f7:99:
                    b6:94:1d:05:f5:6a:e6:3c:7d:0a:1d:f6:73:78:ff:
                    79:db:85:bc:b5:38:ee:75:7f:3b:9e:fe:c9:c3:7d:
                    a4:95:ca:d2:e8:56:53:51:ad:c9:d3:59:89:5b:29:
                    51:df:2a:00:62:db:da:6f:3a:c5:95:7d:8c:9f:5d:
                    f0:57:7d:26:c7:04:50:0e:08:3e:97:d6:e8:7d:ef:
                    2b:5e:16:f3:83:40:92:da:29:de:5d:cd:c9:e3:17:
                    05:7c:0f:f2:ac:97:8f:16:38:b9:57:57:cf:f7:5f:
                    d1:66:2f:6c:56:90:e3:d3:f1:6a:8c:0e:88:48:db:
                    2d:59:fa:b4:ee:cf:ab:f1:db:05:07:14:45:79:ba:
                    e4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:31:0F:B9:01:D3:22:37:8C:E5:EA:D0:FC:77:6D:6D:B0:9D:D4:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/ffea9834-438c-3fbf-84ba-aed609092a3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.226.136.0-207.226.138.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:00:c1:9b:2c:87:cc:82:cb:3e:bc:c8:6d:1f:42:e4:27:27:
         dc:8f:13:b3:f6:4c:30:bb:38:77:c6:22:68:09:45:c6:70:86:
         b4:c3:bb:f1:d4:79:d7:df:72:39:fe:c6:e5:c7:63:46:c5:7f:
         8b:68:63:66:80:a7:54:2b:fb:90:a5:d3:ad:90:c8:42:b3:6b:
         e1:f4:36:e8:84:a8:84:21:5d:b4:ae:8c:47:5f:bf:9e:c8:2f:
         e1:49:51:27:51:06:f6:c2:92:cd:a1:09:4b:0c:fa:84:26:2a:
         12:50:53:88:c8:0e:58:2e:28:85:40:05:2c:22:c0:21:85:2f:
         69:aa:e8:4f:24:f7:a6:f7:69:1b:74:6f:a7:5f:05:53:82:13:
         e1:3c:21:8b:36:d3:17:98:09:e1:ac:24:3b:b4:78:93:3a:d6:
         6f:32:71:b9:4a:8c:75:27:82:9c:24:54:76:b3:9e:d5:f4:6f:
         f7:46:ce:53:63:8a:7a:d0:ef:38:45:08:88:80:01:77:1f:97:
         67:d2:22:21:bf:9d:7f:ad:a5:40:08:91:2d:eb:04:46:0e:63:
         29:49:ce:62:71:56:60:f6:6f:8c:b0:20:5a:36:a0:fe:53:83:
         c0:f6:2e:63:48:c6:5b:ec:0f:b0:c4:b8:1d:7c:b6:c3:2b:b7:
         7a:13:96:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:26:40 2025 by rpki-client