Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54/6e3827cd-f585-3643-83c3-414a11f5be2b.roa
File:                     6e3827cd-f585-3643-83c3-414a11f5be2b.roa (raw, json)
Hash identifier:          V7lpGXXAJTN3bmH8Ty7yBY4kqv31pcJ8mcDztWnvQGE=
Subject key identifier:   F9:29:92:55:2D:AD:55:A6:5F:1F:21:EF:69:5F:22:1C:53:60:44:54
Certificate issuer:       /CN=18063090-3337-4bcb-93cd-f57cb925fd54
Certificate serial:       010D0C9F432858495EEEE8BA51CD6FCB409EE000
Authority key identifier: C0:92:32:6D:39:D8:E5:C5:FA:7B:27:CD:28:20:A9:1F:B3:C4:CA:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54/6e3827cd-f585-3643-83c3-414a11f5be2b.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     4901
IP address blocks:        162.250.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54/18063090-3337-4bcb-93cd-f57cb925fd54.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54/18063090-3337-4bcb-93cd-f57cb925fd54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:e8:ba:51:cd:6f:cb:40:9e:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18063090-3337-4bcb-93cd-f57cb925fd54
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=840f78ad-8e7d-4323-880b-bdb71b77c51d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6b:76:7c:ae:66:84:81:b0:13:0f:4c:0f:63:
                    16:1e:94:85:21:23:91:c4:66:b5:21:62:f0:84:a1:
                    b5:d2:8d:b2:f4:a2:28:50:cf:83:87:a4:63:0d:48:
                    2d:34:75:b8:af:c5:a2:dc:0d:81:ab:cd:33:50:fb:
                    7b:e0:4a:09:02:b1:8b:b7:df:e0:e9:cc:b2:0d:7e:
                    f2:11:87:ec:34:ce:5a:72:ef:34:7e:bf:0a:55:64:
                    92:a9:65:51:d4:ae:81:42:a5:d5:a8:2c:2c:49:b1:
                    d0:cc:55:12:d7:3c:5b:f6:58:68:7b:95:3f:47:9d:
                    29:3c:59:33:a0:a1:ff:89:8b:54:23:29:10:ca:25:
                    de:34:45:4f:38:3b:0c:8f:e8:da:90:cf:c4:10:d0:
                    66:c5:3e:ce:22:58:d0:10:2f:2a:b7:8c:16:ce:db:
                    11:95:a4:11:09:81:64:1d:34:cc:c0:fb:7f:8a:77:
                    91:f2:a8:ed:87:ab:5f:30:41:be:6a:e4:e2:18:9e:
                    2b:25:38:22:8d:0f:15:fb:93:dd:65:e1:7c:58:ac:
                    22:99:ae:39:0f:21:2a:c2:43:2d:2c:35:54:c7:ad:
                    c3:01:d8:52:cd:b7:51:f2:89:73:da:7c:28:86:d2:
                    32:e5:ba:d0:96:15:fa:e6:3f:40:fb:51:35:51:0c:
                    ca:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:29:92:55:2D:AD:55:A6:5F:1F:21:EF:69:5F:22:1C:53:60:44:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54/6e3827cd-f585-3643-83c3-414a11f5be2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54/18063090-3337-4bcb-93cd-f57cb925fd54.crl

            X509v3 Authority Key Identifier:
                keyid:C0:92:32:6D:39:D8:E5:C5:FA:7B:27:CD:28:20:A9:1F:B3:C4:CA:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:38:76:c5:7e:1d:95:2f:f4:ea:fe:0c:38:c3:82:70:72:e3:
         ed:df:20:df:f4:1a:e0:d7:a6:a3:99:88:35:8d:8f:bb:46:f1:
         9c:81:d7:44:c9:d2:62:45:4a:9f:24:14:a3:3c:94:e5:09:33:
         90:11:03:f6:3e:da:df:2b:14:22:19:26:4b:d1:fd:5c:90:8f:
         3c:01:cc:c2:f0:8a:69:fd:d9:f3:44:de:e7:0b:8b:12:1c:22:
         4a:67:11:32:34:a6:85:07:ab:ee:22:e2:1e:16:e9:ff:be:d9:
         fc:1b:bb:fb:62:7a:d8:66:76:9d:a5:41:65:d9:bf:a2:bc:33:
         e2:47:5b:ff:2a:c9:fc:b6:34:39:f2:7c:58:74:39:b0:1c:a0:
         c4:44:08:67:01:c1:2d:bb:cf:d2:ee:2e:17:70:d0:9c:10:59:
         f6:24:3f:f2:25:ea:f9:8c:b6:0a:5c:11:84:ae:10:43:01:b2:
         76:57:94:93:ef:f1:00:35:5f:7d:bf:6d:8d:8d:de:98:81:98:
         0a:72:a3:e3:12:94:1d:cd:a6:06:11:7a:2d:23:9e:b4:e5:8e:
         dc:48:bf:05:31:77:27:be:1f:57:ff:4e:af:7a:65:be:6d:60:
         8a:d0:1e:6b:4f:ad:3d:83:04:4f:b5:f8:4c:a2:46:ca:aa:61:
         26:8b:29:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:21:13 2025 by rpki-client