Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/536cf6e3-e891-365d-b554-7634ce5fadca.roa
File:                     536cf6e3-e891-365d-b554-7634ce5fadca.roa (raw, json)
Hash identifier:          KlP3kpD3MN/+FJD9lLQsBRH0ah4flYoA8HNS+/OJYak=
Subject key identifier:   B8:6E:3A:8B:FD:70:52:8C:F0:2E:1B:1B:17:60:59:2D:71:4D:0C:F2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A397489C5EAC49A9CABFBCA00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/536cf6e3-e891-365d-b554-7634ce5fadca.roa
Signing time:             Tue 17 Jun 2025 19:36:39 +0000
ROA not before:           Tue 17 Jun 2025 19:36:39 +0000
ROA not after:            Mon 15 Sep 2025 19:36:39 +0000
asID:                     0
IP address blocks:        208.215.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:39:74:89:c5:ea:c4:9a:9c:ab:fb:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 17 19:36:39 2025 GMT
            Not After : Sep 15 19:36:39 2025 GMT
        Subject: CN=fb0a8198-e372-4f04-a9bf-50dacfd132a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:85:bd:d3:60:5f:3b:8d:89:9e:9e:c3:5c:62:
                    fe:35:d8:e0:49:3e:81:50:c0:3c:20:b0:ec:28:35:
                    b5:dc:10:21:81:2f:8e:65:9f:51:9d:1c:02:d1:d2:
                    df:e7:5f:ba:11:8e:04:8a:93:d2:24:17:98:e7:6a:
                    d3:ad:c9:f1:6a:f2:9d:c8:43:b9:a5:56:35:6d:b0:
                    74:04:f6:2e:d0:da:95:00:84:11:86:a7:35:b7:0f:
                    d9:59:30:ac:9c:a3:91:00:51:e8:4b:e4:9a:3d:a4:
                    04:41:96:bc:d7:ad:1d:08:01:1d:4a:20:89:01:5a:
                    7c:41:7e:32:ab:42:37:da:ce:79:6f:9b:cd:75:80:
                    72:06:64:6e:d0:29:02:2d:9f:d0:f4:36:a5:5c:28:
                    9a:13:9b:fb:19:fb:20:71:32:ac:44:20:e0:1a:5b:
                    f0:28:07:94:82:91:49:79:5d:64:9e:67:d9:77:4f:
                    45:30:55:04:ee:a9:49:24:c4:4c:c9:83:61:a1:64:
                    1d:4b:f8:cc:93:5b:41:24:84:78:69:dc:7f:6e:c0:
                    9e:c6:d1:8a:f1:8a:8f:54:24:b9:15:51:40:08:28:
                    92:59:05:fc:00:2f:63:55:e8:98:83:08:7b:5f:d2:
                    ec:0c:85:2c:96:4a:41:2f:83:da:ad:cd:37:f6:ac:
                    a5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:6E:3A:8B:FD:70:52:8C:F0:2E:1B:1B:17:60:59:2D:71:4D:0C:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/536cf6e3-e891-365d-b554-7634ce5fadca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.215.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:81:5f:15:43:dd:5f:db:f6:1c:34:02:5d:3d:f4:91:cc:e6:
         fc:1a:5f:5f:43:72:1f:28:68:9a:78:64:16:d0:ff:d2:fa:32:
         a3:26:27:7c:9a:fd:88:17:3d:f6:9d:54:4b:bc:92:ec:01:0a:
         27:04:27:43:27:e5:09:79:d4:6e:ed:b4:0b:f1:c5:52:d7:4c:
         ec:01:97:9e:45:08:2b:59:28:ba:c4:72:2a:57:b3:d4:d0:3b:
         9c:08:a0:68:98:28:40:60:99:57:8f:dd:db:98:d9:74:8f:b1:
         0d:1c:cb:bc:1e:35:38:30:a5:e2:c1:5e:f5:a9:25:55:92:dc:
         fa:65:01:76:53:0b:2c:1e:4d:4f:8d:e0:24:16:8e:b7:f7:88:
         3f:3e:c5:bd:ff:c2:0a:2d:e3:e5:99:71:c1:0e:37:9d:bd:b7:
         f9:cc:d2:39:d2:d2:2a:d8:c5:bb:8b:45:f4:d2:c0:ae:64:c9:
         2d:ae:dd:2e:9c:c6:7b:08:a1:f0:40:0c:9c:0a:a1:dc:2d:07:
         b7:fe:ca:19:f3:0d:9c:62:2d:16:e2:84:18:7d:65:42:8e:c3:
         e4:22:b1:85:33:41:35:9b:dc:de:6b:c0:d4:2d:fb:b0:5a:a9:
         4a:a9:61:93:28:91:35:49:88:05:26:a5:69:8a:a9:48:3e:56:
         54:1b:8b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:50:37 2025 by rpki-client