Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d658077c-83e9-3f55-91b1-da3b73c90aec.roa
File:                     d658077c-83e9-3f55-91b1-da3b73c90aec.roa (raw, json)
Hash identifier:          CPMdpGneK5La8btscIdhEQwX57cQ2p7E+ouVJS1DM54=
Subject key identifier:   ED:71:93:5B:E0:67:5A:14:7A:5C:19:88:89:D4:12:E9:FB:9D:23:E6
Certificate issuer:       /CN=8d499d1b-9023-4410-8b4a-909ca6a083df
Certificate serial:       010D0C9F43285847B10159CC379B15F7AAD828E0
Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d658077c-83e9-3f55-91b1-da3b73c90aec.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     397666
IP address blocks:        162.220.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:59:cc:37:9b:15:f7:aa:d8:28:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=693eaf6e-0b48-4d45-ad81-ec552af8381c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a4:25:2d:1f:ba:22:a4:bd:c8:5c:a1:ef:3b:
                    7c:14:89:c6:6c:06:f3:4f:ef:dd:bc:1d:52:54:3d:
                    f4:a0:3f:07:ac:27:e6:54:f9:0e:4f:66:66:bf:30:
                    7b:43:97:86:38:89:97:ba:6f:f6:10:cd:14:97:1d:
                    1f:c5:3f:b3:c4:51:f0:23:b2:26:b0:95:cb:7b:e9:
                    13:b3:19:1e:5f:db:63:8a:3b:b7:69:1c:21:75:19:
                    2f:9f:6f:89:a9:22:03:88:6f:78:cf:73:3c:ac:7c:
                    33:14:74:ff:ad:e2:c1:4f:80:1b:04:01:01:ad:c7:
                    c7:b7:d3:6a:47:a8:3b:0d:b7:1a:af:38:dc:58:97:
                    69:84:28:ca:0d:0d:ca:a2:20:5c:77:e9:df:97:51:
                    00:f5:3c:5b:be:fe:cc:51:d3:74:13:52:54:52:3c:
                    c2:db:df:38:f0:25:35:39:59:3c:d0:84:b0:f7:f9:
                    90:f4:b8:a1:7e:2f:fc:07:ee:69:7a:91:87:b0:68:
                    85:f8:c0:8c:0f:3d:92:5a:8b:e7:8f:0c:a8:bb:70:
                    38:28:0c:ce:04:8c:2d:dd:cd:d4:fa:35:b2:3a:64:
                    ae:3d:b0:cb:d8:dd:7c:fb:ad:b9:a5:a8:23:53:38:
                    2f:79:f1:a8:e7:08:03:e0:0f:18:36:18:97:b0:c2:
                    60:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:71:93:5B:E0:67:5A:14:7A:5C:19:88:89:D4:12:E9:FB:9D:23:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d658077c-83e9-3f55-91b1-da3b73c90aec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl

            X509v3 Authority Key Identifier:
                keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.220.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:f9:40:8b:11:97:cb:ca:fd:1d:67:d7:eb:30:c1:a6:3b:01:
         01:95:1a:2f:cc:59:67:d5:7e:8f:c9:27:c3:9d:1f:ef:5d:d8:
         fb:3c:ab:d4:42:77:db:d7:ee:c4:c2:68:57:ef:59:ab:30:21:
         51:3b:a2:92:0e:80:fb:9d:2f:f0:5d:7e:9e:b5:b3:ea:f7:00:
         97:bb:f9:d3:c6:60:32:08:3e:d3:bb:7f:ef:aa:3c:b8:52:34:
         85:2d:b6:f0:e6:af:1c:90:7e:e4:18:c9:c1:03:c2:82:20:c7:
         c9:e4:e1:ba:7a:39:82:7e:2b:30:a4:eb:92:5d:d5:35:e9:ff:
         92:7a:bb:b0:df:81:53:77:60:90:36:b1:11:91:df:77:41:bb:
         4f:65:04:5a:58:f4:2e:78:c0:2b:d6:e3:87:cb:ac:17:e4:cf:
         1e:67:2c:17:b8:c4:a5:d7:62:d3:ac:b4:f7:d0:12:3b:df:c8:
         48:65:12:c9:8c:13:d9:a1:26:c0:1d:ac:a5:5b:6c:fa:22:9d:
         3f:39:fd:0c:1a:20:f6:a7:0d:03:57:dc:db:b7:0b:5a:65:80:
         5e:2d:23:79:0c:ca:16:60:e3:d0:29:66:2e:73:8f:fd:13:ef:
         98:8d:7f:d0:79:f5:48:29:bf:04:4e:03:14:5b:9e:4d:89:a0:
         e6:61:c9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:42:58 2024 by rpki-client on console-ams.rpki-client.org