Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/1279bc09-48d3-3f87-a5dc-f8cc01490fcf.roa
File:                     1279bc09-48d3-3f87-a5dc-f8cc01490fcf.roa (raw, json)
Hash identifier:          OjIN22PLBUyiePADBA4Sfrpyj/NVYxZ45NvZDh8Z2Hk=
Subject key identifier:   65:9B:9B:8A:88:47:CD:1E:F2:87:3C:78:AE:40:1F:D9:27:9A:02:16
Certificate issuer:       /CN=c418ca6f-20c8-4f1b-b4f5-e4f805862363
Certificate serial:       010D0C9F432858490E16BEBEC496128D8482C500
Authority key identifier: 35:FA:88:74:F9:80:ED:CD:A6:42:D2:0B:1E:D0:B8:8B:EF:EB:D7:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/1279bc09-48d3-3f87-a5dc-f8cc01490fcf.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     29909
IP address blocks:        162.252.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/c418ca6f-20c8-4f1b-b4f5-e4f805862363.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/c418ca6f-20c8-4f1b-b4f5-e4f805862363.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:be:be:c4:96:12:8d:84:82:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c418ca6f-20c8-4f1b-b4f5-e4f805862363
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=27670bb9-7053-4f77-adc0-0307858b00e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a1:12:0c:d2:c2:bc:d2:5d:9f:24:e7:e5:96:
                    3d:9e:c8:d5:71:d6:52:c1:b6:52:fb:c0:26:b7:26:
                    fb:e9:55:3c:cf:c1:50:3c:f5:a3:4b:4b:9c:9d:8c:
                    d5:d3:59:f9:02:25:4b:7a:6b:65:49:22:09:52:c3:
                    63:50:14:1c:e5:26:b3:cb:f9:cf:9a:50:27:09:e9:
                    2d:97:90:02:49:bc:6d:82:10:df:70:59:59:fd:cb:
                    5a:c5:a8:e0:05:8e:a6:89:72:af:d5:d9:55:89:d7:
                    33:4f:f9:8b:1e:b4:4e:f5:39:96:1a:20:e0:d5:9e:
                    a0:e2:ae:97:0d:28:a1:ec:13:a4:db:22:0f:5c:f1:
                    a8:aa:3f:ad:aa:f3:6d:a0:9e:ef:4b:c7:2b:f4:a9:
                    f0:bd:b1:36:3c:fc:d8:d0:87:1d:13:e1:9e:ac:21:
                    33:cb:1c:bf:ed:71:f9:84:cb:08:bf:c1:11:59:87:
                    00:1d:9c:f1:e5:32:7d:1b:27:38:df:2a:a6:2e:f3:
                    16:e5:cd:c3:26:a4:ad:91:cd:a1:80:c0:2e:55:4b:
                    6b:04:74:df:95:41:d4:cb:7d:85:29:39:ff:71:85:
                    1c:d0:7a:5a:e1:ac:aa:cb:b5:61:0a:46:c7:59:50:
                    c8:20:42:26:70:ad:56:12:74:6f:9f:d2:1f:64:51:
                    4d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:9B:9B:8A:88:47:CD:1E:F2:87:3C:78:AE:40:1F:D9:27:9A:02:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/1279bc09-48d3-3f87-a5dc-f8cc01490fcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/c418ca6f-20c8-4f1b-b4f5-e4f805862363.crl

            X509v3 Authority Key Identifier:
                keyid:35:FA:88:74:F9:80:ED:CD:A6:42:D2:0B:1E:D0:B8:8B:EF:EB:D7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:fb:76:1a:f9:6c:5b:be:f4:00:37:ed:aa:0c:d5:30:2f:c1:
         a4:a6:b1:7e:24:fd:ae:5d:9e:57:5a:f4:66:ae:47:4e:0f:03:
         97:33:27:dd:6f:94:03:cf:16:b0:dc:29:73:03:bd:84:e8:b8:
         21:04:3d:46:bb:9a:78:ea:5f:6d:ec:4d:04:1d:85:8c:ed:5a:
         ce:f6:16:b4:cf:7d:b5:b2:07:67:90:ce:82:63:d4:99:dc:f3:
         ab:4f:f0:d3:58:dc:30:d6:b2:1b:f0:ea:ba:06:32:ef:d3:9e:
         a6:e7:9e:47:14:a9:b4:61:38:eb:99:cb:bf:1e:2a:77:bc:19:
         dd:87:33:72:16:96:e6:ff:8d:a3:8f:6f:06:08:cc:d0:49:5a:
         fa:83:e9:ad:a4:27:cb:6d:69:54:d1:a0:be:cb:60:8b:eb:a7:
         a1:92:42:a1:6a:60:43:dd:cf:77:f8:92:60:5c:cb:03:a1:05:
         a4:53:72:b7:81:10:ec:b7:08:37:07:6e:ac:3d:a4:ca:51:14:
         f8:3b:28:83:4d:d2:b8:b7:5b:b4:99:4e:df:86:9c:a1:12:a3:
         e7:9b:98:9c:27:ec:d6:08:e9:3c:5f:e6:56:3a:4a:12:06:97:
         97:af:ac:93:c2:c8:59:13:57:ef:64:c6:e2:32:f3:5e:54:6f:
         1a:e4:64:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:20:33 2025 by rpki-client