Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/9685251b-82c4-3025-86c9-cb5bf2145c58.roa
File:                     9685251b-82c4-3025-86c9-cb5bf2145c58.roa (raw, json)
Hash identifier:          Ce81Hy1fxKLEtQNozXLGBw/A4wt9l+GkKBHXLroJI3I=
Subject key identifier:   09:71:4F:4A:0C:34:05:5E:5C:98:19:A1:DF:26:EB:3C:EA:9B:A2:93
Certificate issuer:       /CN=0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62
Certificate serial:       010D0C9F4328584965E970FF62267B80A7193E00
Authority key identifier: 4D:B5:2F:46:B2:3B:D1:0C:89:9E:88:83:77:12:B0:7E:2B:24:EA:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/9685251b-82c4-3025-86c9-cb5bf2145c58.roa
Signing time:             Thu 03 Apr 2025 01:00:46 +0000
ROA not before:           Thu 03 Apr 2025 01:00:46 +0000
ROA not after:            Wed 02 Jul 2025 01:00:46 +0000
asID:                     16437
IP address blocks:        162.247.220.0/23 maxlen: 23
                          162.247.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:e9:70:ff:62:26:7b:80:a7:19:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62
        Validity
            Not Before: Apr  3 01:00:46 2025 GMT
            Not After : Jul  2 01:00:46 2025 GMT
        Subject: CN=89df42a5-07cf-464e-9bba-fa3de86a65f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:72:7c:c8:f9:04:54:63:81:d5:26:a0:3d:45:
                    20:78:5f:f8:f2:6f:1f:7c:e7:c2:a7:b4:3b:87:fc:
                    ef:00:4a:23:ff:78:7b:94:ea:02:1b:c9:fd:ce:0d:
                    e0:77:96:70:49:30:17:9f:9d:a7:11:fa:55:e8:86:
                    52:75:b8:58:e3:c8:95:6e:32:aa:4c:68:fd:29:88:
                    ad:b3:24:5e:d0:fc:75:ff:e9:20:5f:dd:81:d5:d8:
                    68:57:27:01:0c:fb:3b:d5:e2:7c:9a:b7:18:81:c7:
                    31:4a:9e:6b:87:f1:1c:d6:60:47:df:f1:c3:8f:00:
                    8e:01:ca:99:3d:e7:09:fe:fb:da:1c:50:f5:91:1b:
                    34:ed:24:ce:28:ac:b7:df:48:74:7a:ca:3b:0b:74:
                    2c:c2:0d:b2:e0:b4:71:ae:87:f5:17:7b:ed:c5:55:
                    b9:0b:46:67:dd:cf:83:d0:f5:de:db:87:eb:1e:41:
                    7b:78:3f:d5:82:a4:32:72:4a:f0:a8:00:ba:f5:44:
                    e1:d6:7b:3b:5c:85:99:1a:f2:68:25:56:1c:86:eb:
                    cd:56:9f:f8:24:ae:ca:5c:fe:a7:81:8e:bc:1b:27:
                    33:3d:c6:c7:d4:e9:df:08:7d:e7:49:c3:10:7f:a8:
                    02:40:48:21:1d:a2:a2:74:d7:18:7e:db:54:c6:12:
                    7d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:71:4F:4A:0C:34:05:5E:5C:98:19:A1:DF:26:EB:3C:EA:9B:A2:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/9685251b-82c4-3025-86c9-cb5bf2145c58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.crl

            X509v3 Authority Key Identifier:
                keyid:4D:B5:2F:46:B2:3B:D1:0C:89:9E:88:83:77:12:B0:7E:2B:24:EA:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:d6:e2:13:d8:0f:e0:3c:c6:c3:1d:e9:94:44:a9:92:6f:d9:
         e3:76:8c:eb:db:64:80:40:f8:ca:91:48:15:cd:5d:e3:d4:35:
         18:dc:e0:78:4c:f0:2b:ff:84:09:bd:c9:9c:39:5d:dc:33:d6:
         8c:75:c3:a9:ed:cf:85:a0:eb:3c:fa:76:dc:d7:1d:da:3a:c6:
         c8:56:63:a1:35:6f:f1:05:0a:05:dd:06:0e:ff:1e:77:5d:75:
         cf:c6:aa:56:7f:81:ae:cc:a8:26:70:95:0e:ca:d4:2b:0a:a2:
         71:61:6d:31:fa:12:9c:f5:46:d8:93:83:e9:b1:4b:75:f6:e3:
         54:db:19:dd:21:52:46:d0:49:2d:10:01:35:53:01:2e:93:a9:
         5e:bf:ea:6e:38:18:1c:ce:68:46:19:b1:a5:37:dc:ef:d5:e3:
         7b:5b:06:5c:c1:c7:25:a5:54:ee:7d:1d:45:27:ec:bb:48:cd:
         c3:57:3c:2f:af:3e:0c:bf:11:f2:10:6d:a6:51:82:40:27:98:
         a7:35:49:12:8e:df:72:d0:88:69:3b:63:02:dc:88:1b:86:06:
         ff:49:d7:ac:8b:27:dd:b4:55:5b:b9:6d:40:1b:de:dc:3a:8e:
         31:47:42:f8:27:06:42:d9:32:8a:27:13:f2:8a:67:8a:0e:0e:
         b3:99:d0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:30:00 2025 by rpki-client