Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca89da4f-c69d-3094-b678-d8cc2946ecca.roa
File:                     ca89da4f-c69d-3094-b678-d8cc2946ecca.roa (raw, json)
Hash identifier:          UWwnJgSeuU1ykCPunxc+NOi4gS0tA+R3m4//s7SFEEI=
Subject key identifier:   F3:85:E7:9D:A9:3C:68:05:9A:89:6E:9D:1D:81:77:1C:2C:1E:F2:53
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849071C0CEE2B2D10697795CD40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca89da4f-c69d-3094-b678-d8cc2946ecca.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        162.158.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1c:0c:ee:2b:2d:10:69:77:95:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=6ce92146-01ba-4e4d-9a07-8387e92b68a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3e:b5:5c:c3:58:7e:84:2e:40:6b:3b:39:14:
                    f6:c4:40:e3:ea:ec:21:a6:a7:4b:16:d9:73:19:60:
                    05:79:4c:aa:ca:ee:cb:1b:ff:4e:b6:a4:e6:28:40:
                    31:1b:14:33:1c:b8:1a:d8:9d:fd:10:f4:cb:70:48:
                    8b:3b:1e:e7:e6:71:3c:79:53:5b:52:ee:d3:80:4f:
                    94:9a:65:13:51:a9:7c:93:2f:1e:6c:c9:8f:d8:5f:
                    a6:3d:36:71:e6:49:76:90:18:d6:e8:16:07:c7:49:
                    34:26:33:41:c5:da:eb:55:12:02:b8:8c:54:c1:8c:
                    a7:c2:89:2e:92:d5:59:41:3c:8e:72:b1:93:4a:fb:
                    d8:0b:69:9a:ef:b8:55:08:41:05:63:84:9d:81:0f:
                    40:06:cc:2a:33:df:c0:da:86:3a:02:23:ea:f4:90:
                    00:91:7b:97:e6:2e:98:0e:4f:4a:2e:f6:05:8f:a9:
                    0a:01:bb:68:cd:5b:51:e0:ea:2b:2e:3c:10:e1:62:
                    c6:04:6d:d4:44:ce:ae:dd:50:04:c4:cc:fa:a9:a5:
                    3d:55:79:39:27:bb:cc:ea:23:d5:7c:63:05:33:4d:
                    43:33:44:44:24:05:03:4b:33:6e:7f:04:d0:e9:be:
                    ea:96:9e:2a:53:70:10:f3:53:0a:f6:8d:92:19:aa:
                    ff:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:85:E7:9D:A9:3C:68:05:9A:89:6E:9D:1D:81:77:1C:2C:1E:F2:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca89da4f-c69d-3094-b678-d8cc2946ecca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:9b:50:91:45:b6:2b:08:60:f5:9b:14:09:cd:b3:de:7e:ee:
         ba:f9:7f:47:02:28:a5:8b:78:a1:04:e2:63:f2:dd:3f:2e:10:
         9b:41:05:4a:3c:f5:69:ed:78:c7:bf:a5:0a:2d:6a:16:72:0e:
         58:a8:6e:6a:f5:89:46:b7:88:5d:ca:55:81:99:8d:a4:aa:2c:
         b0:c1:dd:83:36:e2:e6:09:ea:db:94:ac:20:95:63:94:1c:d4:
         7d:af:37:34:6b:19:82:ae:f8:f7:17:46:79:86:e4:ca:98:0b:
         58:16:89:ce:2c:6b:64:78:01:7d:75:31:70:f4:8a:2c:89:ba:
         3d:d4:eb:3c:63:39:c6:3c:08:63:d3:8b:50:ae:17:64:e9:56:
         85:02:3d:d4:c8:ae:c2:29:9f:39:8e:a5:fa:72:fa:87:af:29:
         3d:8b:99:1a:40:7f:02:2e:4a:56:fa:a4:73:03:b9:18:f7:59:
         33:40:b1:c9:7c:c0:0b:2d:e5:09:49:c1:34:c6:e3:18:2a:21:
         11:25:31:cc:fc:2f:a0:67:6b:af:19:36:8b:7e:d0:df:db:e1:
         93:c8:62:a9:3a:dc:45:c4:a7:ce:8b:3f:76:5b:f6:89:24:73:
         2e:42:a9:f8:2a:4e:a2:00:a4:1a:90:a8:58:0d:f8:9a:b2:e6:
         7b:69:dc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:01:17 2025 by rpki-client