Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/ee7f25d5-8126-3570-b00a-bee2079ed6a9.roa
File:                     ee7f25d5-8126-3570-b00a-bee2079ed6a9.roa (raw, json)
Hash identifier:          Az4sQ50wd4ooTVbvgxaFGaB+pSHon+VNx5CwIT/DIkQ=
Subject key identifier:   CA:BB:0D:B4:77:04:83:8C:CF:5C:4C:6A:38:BA:F3:47:54:AF:47:2D
Certificate issuer:       /CN=3df29669-3733-4127-bbde-a71cc4b5a661
Certificate serial:       010D0C9F43285848D7A64E710F649D68DDD9EBA0
Authority key identifier: 95:AD:24:54:D0:1F:09:B5:B4:E4:A5:D2:66:AE:73:F2:D4:9B:55:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/ee7f25d5-8126-3570-b00a-bee2079ed6a9.roa
Signing time:             Tue 11 Feb 2025 02:00:39 +0000
ROA not before:           Tue 11 Feb 2025 02:00:39 +0000
ROA not after:            Mon 12 May 2025 01:00:39 +0000
asID:                     55247
IP address blocks:        162.211.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d7:a6:4e:71:0f:64:9d:68:dd:d9:eb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3df29669-3733-4127-bbde-a71cc4b5a661
        Validity
            Not Before: Feb 11 02:00:39 2025 GMT
            Not After : May 12 01:00:39 2025 GMT
        Subject: CN=218f6a45-2642-4321-aded-ebacd01e5b55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:bd:f9:83:c8:10:99:cb:75:6d:7a:02:7a:a8:
                    ab:ba:e4:31:83:16:b9:be:a0:4d:09:e9:88:d7:d4:
                    ef:4a:e0:07:0a:be:f3:09:7c:85:ac:42:f4:1f:0c:
                    fb:9a:95:be:f5:f4:3e:9e:9c:38:5e:7c:e9:a8:99:
                    b0:35:69:1c:56:63:59:1d:aa:27:e8:35:00:10:7a:
                    a9:73:f4:51:fe:29:99:5a:4d:2e:ab:16:63:e7:d9:
                    d2:62:a2:16:f0:70:41:5d:0a:26:db:c3:f5:38:c5:
                    45:56:b2:7a:19:4e:62:50:ea:97:f7:fc:d0:6b:8f:
                    16:31:af:d0:a3:f9:e6:56:59:b0:db:01:59:48:48:
                    bf:0b:89:20:69:38:1a:96:74:b8:16:26:23:e3:a9:
                    a8:00:ad:e9:f9:4c:1d:8e:fb:77:42:08:e8:ba:91:
                    bb:97:28:36:3d:da:90:3d:82:63:3f:4b:a0:2c:8a:
                    27:b6:59:2c:19:74:cc:10:b5:9b:4c:93:7e:5f:52:
                    5b:00:cd:31:b1:95:2b:5c:37:02:78:1d:fc:7f:33:
                    9d:14:f0:77:ba:31:d7:19:ff:46:e7:d6:01:f0:71:
                    e4:25:f1:4a:e0:75:08:fb:56:29:20:11:cd:7b:e8:
                    6c:e2:6a:c8:20:d6:8f:51:8b:86:e8:fd:b8:ec:ff:
                    23:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:BB:0D:B4:77:04:83:8C:CF:5C:4C:6A:38:BA:F3:47:54:AF:47:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/ee7f25d5-8126-3570-b00a-bee2079ed6a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.crl

            X509v3 Authority Key Identifier:
                keyid:95:AD:24:54:D0:1F:09:B5:B4:E4:A5:D2:66:AE:73:F2:D4:9B:55:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:b2:3a:31:d4:88:47:79:47:83:4c:d0:e9:9c:8b:15:0f:4f:
         f2:44:f6:f3:ab:ca:1e:64:81:a3:bc:b2:77:92:2e:be:7e:d8:
         6f:43:2e:73:2a:9f:3b:1b:b1:d7:69:93:52:ef:f4:49:55:c2:
         0b:64:10:7c:94:d3:55:d5:e9:6e:25:55:67:db:13:84:b0:9d:
         7f:a2:91:3e:d9:07:56:ec:c5:59:56:eb:c4:a9:a3:cf:d0:94:
         f0:18:ce:60:f3:6d:e9:38:4b:2f:69:bf:68:fa:e2:0f:ce:91:
         a8:6b:99:99:23:fe:cd:e7:86:3d:87:5e:74:01:06:2b:52:43:
         60:e8:09:81:a5:ee:8f:0e:76:57:f7:12:e1:f6:93:56:74:2e:
         0d:d9:a1:80:ce:02:93:0d:65:83:35:ac:b9:f1:a1:6e:76:4a:
         dc:71:f9:53:f7:c5:5d:37:0f:7f:6c:8c:75:81:6d:39:35:6e:
         8f:ac:42:40:c0:ef:0c:5b:96:62:1a:ac:4a:ae:ff:7c:44:4d:
         06:31:55:fd:4f:2d:f9:2d:a7:a6:ef:1a:79:94:e2:6b:98:7a:
         8e:c0:07:8d:9e:95:aa:e9:e2:11:b6:7b:66:66:6f:a6:f1:a1:
         23:fe:c0:11:57:7d:34:b7:74:7d:68:e5:9e:2c:27:6a:4a:62:
         eb:cb:1f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:21:40 2025 by rpki-client