Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/a62a27eb-0e4c-392e-bbb7-46cda838e71e.roa
File:                     a62a27eb-0e4c-392e-bbb7-46cda838e71e.roa (raw, json)
Hash identifier:          Lta1jlpw/zyEfmwBNJ2BoLy2ybEGNASitdHlAelhpzo=
Subject key identifier:   4B:DE:21:7C:00:C0:9F:91:55:1A:FF:14:1B:D3:0C:C7:5B:57:5F:35
Certificate issuer:       /CN=97e93673-5d19-4ff2-8250-f1094f4e12c9
Certificate serial:       010D0C9F432858493BD8240EBC0DE755BBBD0320
Authority key identifier: 59:A7:65:FA:2D:3E:59:26:BD:68:1C:C1:CC:86:BD:6E:8B:E6:B7:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/a62a27eb-0e4c-392e-bbb7-46cda838e71e.roa
Signing time:             Tue 18 Mar 2025 23:22:01 +0000
ROA not before:           Tue 18 Mar 2025 23:22:01 +0000
ROA not after:            Mon 16 Jun 2025 23:22:01 +0000
asID:                     16509
IP address blocks:        162.120.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3b:d8:24:0e:bc:0d:e7:55:bb:bd:03:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97e93673-5d19-4ff2-8250-f1094f4e12c9
        Validity
            Not Before: Mar 18 23:22:01 2025 GMT
            Not After : Jun 16 23:22:01 2025 GMT
        Subject: CN=8634d522-1b00-49d8-bf93-fa2bbb908f05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d6:e8:b4:b5:55:4a:b9:be:c5:30:c0:75:f0:
                    98:6d:4a:89:1d:e6:d9:b9:d2:03:64:31:b8:8d:52:
                    1a:11:b1:a0:d7:fd:ad:d0:d1:12:94:5d:eb:36:26:
                    a0:02:94:a9:8e:b5:92:aa:05:e5:ad:8d:32:dc:2d:
                    47:7b:b8:99:23:dd:27:12:8b:90:09:8a:e7:49:0c:
                    66:36:dc:8e:c4:e4:68:3b:33:0d:54:5c:ee:c1:70:
                    96:db:14:86:3a:f5:70:0f:4d:cc:b6:ee:46:d3:d1:
                    ff:57:6d:a4:8e:69:37:1d:b8:39:79:9b:49:31:e6:
                    56:31:d5:2f:f5:76:60:4c:63:23:06:4e:dd:e7:53:
                    23:af:7a:90:d9:ec:24:f7:21:1b:3e:d9:fa:89:80:
                    fb:14:e0:d3:87:ad:3c:8e:38:e1:84:78:53:a0:4c:
                    d2:be:2f:11:16:82:ee:c1:39:1f:01:96:31:59:7a:
                    e5:89:54:3b:8a:15:1f:6c:c1:5a:a4:7a:7b:ff:94:
                    32:ce:13:2f:74:9c:5c:9a:a4:25:8a:0f:20:8d:1e:
                    57:9d:cd:49:36:f1:f6:ae:66:53:86:09:36:ed:d3:
                    7e:fb:99:b9:99:2c:8d:e4:e9:7f:b5:b7:66:e8:d6:
                    cd:96:4d:67:00:d0:81:c5:0c:b9:00:b8:3d:56:68:
                    3a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DE:21:7C:00:C0:9F:91:55:1A:FF:14:1B:D3:0C:C7:5B:57:5F:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/a62a27eb-0e4c-392e-bbb7-46cda838e71e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.crl

            X509v3 Authority Key Identifier:
                keyid:59:A7:65:FA:2D:3E:59:26:BD:68:1C:C1:CC:86:BD:6E:8B:E6:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.120.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:40:68:3e:33:53:c8:9d:98:d2:3c:95:64:fe:74:04:bf:d2:
         f0:b0:2b:b3:14:e2:38:16:f4:25:97:fd:f6:30:b7:fd:ca:71:
         da:c1:b0:f2:48:60:5f:dd:8a:86:cb:f1:56:e6:6a:07:29:23:
         e2:df:9b:20:49:29:7b:28:0b:27:40:14:de:ac:78:59:42:09:
         aa:ce:3b:44:2d:5a:16:8f:97:9b:bf:c6:a0:c5:14:cc:06:7f:
         c9:64:b7:a1:08:ca:19:bd:d2:ea:cb:76:00:73:08:29:10:4c:
         99:2b:fd:7f:a3:b9:81:7c:c4:67:d8:41:a3:3e:e8:f3:36:1f:
         23:98:f1:18:3c:c0:09:b4:8b:f0:31:85:3f:ca:03:74:86:e7:
         53:f8:43:18:08:1d:2d:ba:f0:e9:03:ca:68:c3:ce:59:1e:ff:
         16:92:b7:71:fc:dd:71:68:0d:22:5b:b0:7c:5c:a1:ad:2b:98:
         98:d9:c2:a0:f4:f2:1d:1c:4e:6d:d1:ed:34:e7:5e:5a:89:b9:
         c7:c2:04:46:ab:f7:ef:9f:35:56:8b:90:e4:b7:d5:8c:66:fd:
         a3:80:d4:6b:7c:55:5d:78:c6:fd:7a:ee:0b:dd:18:8d:6a:2e:
         fb:76:c2:bf:03:b2:11:dd:d4:c8:26:c8:10:de:3e:65:b1:d6:
         2f:9a:15:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:18:35 2025 by rpki-client