Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/92f610da-d744-3192-8187-4236b8d26527.roa
File:                     92f610da-d744-3192-8187-4236b8d26527.roa (raw, json)
Hash identifier:          TPT/2zJphyiNLuD1rX/VGfla7SXD+BegagExtEt2vrM=
Subject key identifier:   B8:E2:09:FF:DC:D0:64:FB:C4:20:DC:6F:21:EF:9B:BB:08:C0:AB:0A
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F4328584A71EB4D49B1B235F4B82838AC
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/92f610da-d744-3192-8187-4236b8d26527.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     399130
IP address blocks:        162.218.12.0/22 maxlen: 24
                          198.22.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:4d:49:b1:b2:35:f4:b8:28:38:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=b3e53b58-fb20-4ac9-abb5-34f9f5baf286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:58:0a:7e:00:3e:e3:af:27:9b:7c:8e:cb:84:
                    b8:28:65:f6:25:75:b3:1c:02:9b:7d:c9:e7:3d:12:
                    cc:6c:57:cc:5b:8c:fc:f7:5b:61:ce:1c:53:38:95:
                    f6:86:a1:44:2f:d7:3d:05:79:fb:71:c0:ee:1a:59:
                    11:86:73:6b:da:74:91:a6:21:5b:a7:48:d4:41:ee:
                    d2:a4:ef:1d:91:22:a5:2a:1f:ce:ae:12:68:c1:c5:
                    8c:cd:6c:f7:d7:07:cf:50:66:5e:a4:18:19:16:ba:
                    14:99:64:09:60:90:d6:e8:aa:5a:9c:0f:fa:46:1f:
                    d2:51:5f:92:70:2c:c2:dc:89:27:b3:5f:05:6a:8e:
                    30:f8:1f:e6:10:59:90:63:f4:36:94:b8:17:fa:54:
                    d4:5b:7c:ec:ad:4d:0c:b0:0f:cf:e0:a0:57:50:3c:
                    53:50:d9:38:19:e1:55:53:49:65:9f:c1:59:f1:a3:
                    06:d5:f5:f2:42:a3:38:ea:3f:a5:b6:0b:49:00:c7:
                    f7:22:7a:3f:e4:d1:55:7e:85:a7:de:0c:8c:e2:b7:
                    17:cc:48:ca:1a:cb:f2:83:33:f5:3d:fc:c5:86:3d:
                    e4:6b:50:f4:c0:b8:68:e3:2f:95:58:18:b0:04:b5:
                    be:c0:63:cd:af:81:bf:c2:da:0f:10:61:79:d8:f7:
                    d7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E2:09:FF:DC:D0:64:FB:C4:20:DC:6F:21:EF:9B:BB:08:C0:AB:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/92f610da-d744-3192-8187-4236b8d26527.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.12.0/22
                  198.22.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:b4:e5:30:bb:11:fe:7e:69:77:13:22:ff:f6:6f:f5:36:d6:
         7c:b0:cd:66:68:e6:34:3c:83:8b:54:33:51:2b:66:ef:27:71:
         8f:85:e3:c9:d3:00:b2:90:03:57:30:1a:56:a8:a5:89:bb:0e:
         19:6b:c9:fc:10:9d:a2:6c:5e:88:06:0e:9d:d0:21:43:9e:8b:
         ba:26:1a:0d:c6:2d:37:c5:96:76:b8:3e:47:e9:d9:cc:93:6c:
         f1:69:51:f0:65:43:35:b8:b5:ae:fc:4d:14:07:42:23:84:c4:
         d6:71:0c:de:33:e0:88:3e:ee:28:6c:9e:ed:63:75:ff:21:c4:
         e2:64:d2:fa:5e:c3:ad:66:5b:bd:26:1a:1a:ba:ae:13:1b:e6:
         dc:0e:85:c9:e1:cb:ac:cd:4d:66:05:5c:03:86:a4:52:5d:d9:
         1d:da:76:2e:95:a7:44:9f:85:36:92:0f:85:6d:2a:28:b3:86:
         d2:11:fe:6c:87:2b:7d:09:9d:f1:fe:25:b0:0e:e2:fe:cb:2f:
         31:aa:44:7b:7f:f1:a7:81:5c:b3:c9:3d:42:c5:b3:c8:0d:fe:
         35:a8:d2:45:42:a3:0f:2a:99:dd:e0:ec:5e:c2:b7:d8:74:6f:
         69:ad:b4:f7:69:7b:d6:95:9b:98:d8:94:69:72:1f:b3:0a:59:
         9f:a0:ba:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:28:34 2025 by rpki-client