Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/25ed31a6-13c1-3088-8152-35ba9db84078.roa
File:                     25ed31a6-13c1-3088-8152-35ba9db84078.roa (raw, json)
Hash identifier:          RHMAG5MQW+my8iwbboxSpPcp1TxXqn4iwYxMcNQlJlc=
Subject key identifier:   BE:FB:C4:E1:73:6D:97:30:F2:D4:65:CE:BB:37:08:57:4F:2D:26:93
Certificate issuer:       /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial:       010D0C9F43285848FD56B3A912F32086FDB208A0
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/25ed31a6-13c1-3088-8152-35ba9db84078.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     30475
IP address blocks:        162.245.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:b3:a9:12:f3:20:86:fd:b2:08:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=5d615192-480a-4b36-8841-41e21afdede4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e0:a6:f5:5a:63:bd:74:15:c4:53:3a:32:52:
                    cb:05:9f:e3:09:1c:24:69:4f:e4:32:4c:fd:62:9c:
                    41:fe:19:79:ef:78:1e:2f:0b:f0:0e:ee:f1:b9:7f:
                    f0:ab:00:cf:d9:ca:92:30:d3:c9:6d:6b:ed:24:fc:
                    bd:ec:38:0e:91:4e:e8:40:e1:a6:40:57:fb:a0:71:
                    df:65:46:12:ac:b4:a2:15:38:f4:29:bf:50:84:97:
                    35:dc:0b:1e:e0:29:f5:88:21:38:70:17:04:91:a8:
                    75:a6:3d:67:27:89:f6:ac:4c:ff:db:99:9a:f1:6d:
                    26:de:fb:57:2d:d0:1c:46:79:32:34:94:d8:53:7e:
                    19:27:c3:77:a1:d8:f7:07:f7:60:e8:58:ac:49:db:
                    d7:70:dd:2b:86:d5:58:21:d1:6d:c4:b1:db:58:57:
                    bb:35:26:ef:8b:91:16:08:ff:7a:7d:32:f8:76:87:
                    83:bd:30:34:1b:40:0d:55:d6:e7:87:21:ba:7d:af:
                    a8:4a:ce:cd:d5:43:74:ec:c2:4d:76:5c:a1:97:4b:
                    cd:fc:ac:84:be:d4:6e:7c:e8:5c:3d:7d:25:46:da:
                    61:ac:49:88:d7:48:38:cb:56:2d:fe:ed:d9:05:6b:
                    92:ee:a0:ed:a6:be:41:b0:db:2c:db:27:c4:67:b5:
                    52:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:FB:C4:E1:73:6D:97:30:F2:D4:65:CE:BB:37:08:57:4F:2D:26:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/25ed31a6-13c1-3088-8152-35ba9db84078.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl

            X509v3 Authority Key Identifier:
                keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.245.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:62:3b:1c:99:91:5b:3b:b3:22:c3:93:e7:f1:ba:5e:75:99:
         4a:1d:ad:42:06:a4:15:f3:72:ab:1d:35:27:4c:57:bc:20:58:
         91:df:95:f1:58:65:54:cf:6e:b8:22:24:e1:8e:d8:ea:06:37:
         7a:6c:02:38:4e:84:55:98:ef:91:5a:f4:72:90:23:7b:b5:23:
         0c:a4:82:09:04:ec:ec:2d:08:c0:f0:85:aa:1c:ea:6d:8e:d6:
         99:dd:48:55:a6:29:06:4e:b2:18:ca:c3:39:46:14:93:23:87:
         e8:b8:a4:8f:40:79:b5:d7:7c:ee:a4:ff:44:3f:5e:23:ca:8a:
         78:5c:50:fc:b5:b8:fa:dd:dc:73:05:a9:d1:a2:84:7f:d3:93:
         5e:0f:cb:c1:4e:be:79:cb:1a:2f:b6:eb:88:ed:34:5b:14:db:
         71:2b:f4:ee:d7:45:bc:06:26:28:cc:aa:d5:57:2c:4c:c8:77:
         0c:6f:1c:90:03:97:1a:a1:3f:be:50:71:52:c9:02:eb:73:8c:
         e0:cd:a2:54:2b:55:1d:1f:a8:f7:50:87:7e:83:5a:d7:4d:8e:
         67:49:b6:43:06:58:7b:c5:1e:05:ca:9e:fc:0e:19:90:b9:0f:
         f3:6a:17:d0:55:1d:df:a4:aa:94:d9:4e:c7:69:5b:34:f8:21:
         d3:95:5f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:24:06 2025 by rpki-client