Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9a25bd38-26db-48f8-81c1-1d6ef02c8dd6/936e642b-5e18-3189-b075-170888e88f15.roa
File:                     936e642b-5e18-3189-b075-170888e88f15.roa (raw, json)
Hash identifier:          ts8jRz0zNli9XWxbTg+RjbbGT09H+GxY7k1CuZ6F86Q=
Subject key identifier:   E4:FE:EA:85:57:D3:DE:D8:84:17:D3:96:22:CF:DE:B9:B7:D5:7F:9C
Certificate issuer:       /CN=9a25bd38-26db-48f8-81c1-1d6ef02c8dd6
Certificate serial:       010D0C9F432858490881732FD2297584A53D8620
Authority key identifier: 20:70:2D:4F:7C:F7:0C:0D:0A:5C:6A:44:8D:C9:94:82:12:8E:BE:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9a25bd38-26db-48f8-81c1-1d6ef02c8dd6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9a25bd38-26db-48f8-81c1-1d6ef02c8dd6/936e642b-5e18-3189-b075-170888e88f15.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     55216
IP address blocks:        162.210.216.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9a25bd38-26db-48f8-81c1-1d6ef02c8dd6/9a25bd38-26db-48f8-81c1-1d6ef02c8dd6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9a25bd38-26db-48f8-81c1-1d6ef02c8dd6/9a25bd38-26db-48f8-81c1-1d6ef02c8dd6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9a25bd38-26db-48f8-81c1-1d6ef02c8dd6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:73:2f:d2:29:75:84:a5:3d:86:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a25bd38-26db-48f8-81c1-1d6ef02c8dd6
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=d6d02c51-eb78-4afa-88e1-9a33a8b553eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:58:06:24:5c:74:a4:8e:02:77:57:7c:b9:88:
                    3f:d0:b0:b6:db:e3:88:d4:a0:6e:97:92:37:56:b2:
                    c1:02:94:41:c3:d2:c9:e9:97:6d:c9:c0:8f:32:27:
                    5b:db:38:29:a7:38:12:58:2a:92:e0:ea:ea:74:d9:
                    e2:d6:8d:06:e0:ee:e7:d8:70:90:60:64:50:c5:1d:
                    a1:64:61:38:71:99:f4:42:c8:da:28:72:41:8b:1d:
                    78:2e:12:f1:4a:74:b5:48:2f:3c:1a:df:54:cc:65:
                    da:92:d5:1e:ae:f1:26:0c:3c:ac:ca:f8:79:58:5c:
                    79:ed:bb:86:5d:83:4e:3f:ed:cf:86:84:89:36:d8:
                    3d:e6:11:fd:da:2d:29:93:83:77:69:11:a6:4f:2b:
                    25:47:91:7d:04:64:33:b9:11:b0:f2:47:d0:03:14:
                    d6:75:04:4e:fd:37:5c:e4:d7:34:f4:36:34:b1:80:
                    d6:5b:84:8b:4b:19:ff:f5:32:e5:d4:b3:f2:7c:3a:
                    8f:cc:a8:8d:e8:26:5b:66:74:50:f9:f5:4b:25:e1:
                    a5:70:ef:14:02:e5:2a:40:ea:85:24:9b:c4:82:08:
                    ff:b6:84:80:f6:95:03:e8:9e:ea:61:d9:71:90:ba:
                    95:f9:38:f1:27:54:00:ff:90:79:9a:22:ad:1b:e5:
                    8a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FE:EA:85:57:D3:DE:D8:84:17:D3:96:22:CF:DE:B9:B7:D5:7F:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9a25bd38-26db-48f8-81c1-1d6ef02c8dd6/936e642b-5e18-3189-b075-170888e88f15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9a25bd38-26db-48f8-81c1-1d6ef02c8dd6/9a25bd38-26db-48f8-81c1-1d6ef02c8dd6.crl

            X509v3 Authority Key Identifier:
                keyid:20:70:2D:4F:7C:F7:0C:0D:0A:5C:6A:44:8D:C9:94:82:12:8E:BE:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9a25bd38-26db-48f8-81c1-1d6ef02c8dd6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:ae:21:8d:01:a0:00:e0:59:83:bf:42:47:96:28:cb:0f:41:
         89:43:68:b0:fa:d9:0f:53:35:03:26:c1:8c:7a:45:ef:4f:74:
         fe:03:fe:92:1a:f9:ee:f6:fa:28:71:6e:d6:a4:2e:cc:04:21:
         2f:51:c2:4c:6b:6d:02:a0:51:a0:61:8e:01:20:ed:c1:5f:bb:
         75:ff:6d:0a:44:1a:52:fb:1c:c4:1e:83:ef:d3:02:c6:b4:e2:
         a1:08:f1:a0:bb:14:ee:b8:2b:9e:66:da:0d:17:2e:39:25:5d:
         0f:e1:ec:09:74:d4:2b:b2:e2:54:ad:75:c1:57:76:8b:29:1a:
         f2:aa:af:ab:b9:43:58:3a:ad:f3:d7:1d:13:e1:de:b2:ec:32:
         b0:07:fd:31:cb:4d:de:ba:22:bc:82:25:13:ec:dc:ab:01:a3:
         9b:8d:83:99:df:4c:da:e7:db:c4:e6:df:76:d1:44:8b:dc:35:
         b0:be:0a:db:8e:fb:53:8c:60:25:8e:39:b7:68:1d:af:33:02:
         c7:40:65:e0:6f:3a:a9:38:ab:3f:a4:be:8a:77:9d:80:4e:c7:
         cd:43:60:cd:c2:22:53:30:5a:79:f7:36:9e:55:13:f2:ed:b7:
         3f:a4:bf:d3:b7:4d:9c:83:48:f1:ba:90:15:19:b8:7c:c4:66:
         bd:ec:e8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:36:12 2025 by rpki-client