Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/27681493-a8a9-3015-afde-7a0187aad668.roa
File:                     27681493-a8a9-3015-afde-7a0187aad668.roa (raw, json)
Hash identifier:          LiLWUH7EO0WKPOihpqwZkRGNLZRVqSq57GB4osRKnow=
Subject key identifier:   94:C9:75:1D:CB:3B:A1:C0:F2:CC:EE:D5:77:E5:E9:75:72:26:FC:5A
Certificate issuer:       /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial:       010D0C9F43285848748B1A021356C6B496A6D880
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/27681493-a8a9-3015-afde-7a0187aad668.roa
Signing time:             Mon 06 Jan 2025 14:00:52 +0000
ROA not before:           Mon 06 Jan 2025 14:00:52 +0000
ROA not after:            Sun 06 Apr 2025 13:00:52 +0000
asID:                     8987
IP address blocks:        162.247.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:74:8b:1a:02:13:56:c6:b4:96:a6:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
        Validity
            Not Before: Jan  6 14:00:52 2025 GMT
            Not After : Apr  6 13:00:52 2025 GMT
        Subject: CN=f0e08ae9-c1d2-4bfa-a273-8a6ae28549a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:00:13:54:64:8e:16:6f:43:14:8f:d5:79:a2:
                    df:c5:0a:a8:9b:d0:04:b1:99:65:17:6c:30:20:7c:
                    81:49:2f:c2:b0:73:fb:42:25:a4:2e:c2:32:0e:a5:
                    a1:d1:02:1e:b8:75:75:76:22:07:ba:4d:1a:4e:73:
                    cc:a1:86:3d:cf:6e:a7:31:05:46:04:f7:7c:77:6b:
                    0c:74:64:be:51:48:22:ba:2d:bf:21:57:ef:96:e6:
                    6b:96:23:8d:9a:90:89:d1:c3:e0:fa:b4:d0:ca:cf:
                    02:16:02:9b:22:1b:a9:ec:30:16:c5:4b:5c:6f:cd:
                    06:fe:ee:f7:23:32:16:7d:f6:76:06:b6:dd:a2:4a:
                    68:60:82:b0:c6:c6:19:2f:e3:64:bb:c8:4a:65:41:
                    bd:cf:c3:1e:c8:20:e5:67:b8:82:11:bf:e3:b3:4b:
                    3b:f9:b1:c0:b0:b4:04:fb:2a:bb:da:ef:5b:b2:fb:
                    c2:2b:06:83:71:e5:8f:89:22:cf:f9:ce:98:7c:35:
                    61:73:2c:bc:76:67:58:99:c4:0f:42:17:b4:a9:19:
                    73:f7:c7:ff:71:46:42:b6:b4:c3:87:b7:b0:d7:c4:
                    90:d3:03:ba:b5:3e:44:cb:a7:f3:2c:1c:82:93:79:
                    89:29:64:57:21:17:ab:58:7d:56:e8:d8:d8:55:c9:
                    de:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C9:75:1D:CB:3B:A1:C0:F2:CC:EE:D5:77:E5:E9:75:72:26:FC:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/27681493-a8a9-3015-afde-7a0187aad668.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl

            X509v3 Authority Key Identifier:
                keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:b2:03:de:a6:d0:7d:11:37:c3:47:15:a6:52:f8:a3:20:6f:
         ea:b7:8e:2f:e7:6e:1d:46:6a:fe:d4:3c:fe:7c:b8:8c:10:e2:
         12:7d:0b:1a:c3:1f:5e:f0:94:94:3a:6c:b4:4a:8b:59:5f:3e:
         55:53:20:b1:67:0c:e7:f4:ab:0d:4b:cd:ae:58:a0:64:c3:d5:
         28:3f:0c:e7:3c:c5:6b:7f:2a:ed:21:1f:fb:bf:69:ee:e7:ac:
         71:42:f8:ab:36:40:cc:2e:d1:76:09:35:58:3e:b4:71:36:e9:
         ba:84:40:1a:84:9a:17:86:ae:34:19:ab:ac:6c:83:80:89:54:
         89:d4:2b:1c:10:28:b9:7e:ad:a2:34:51:b2:f6:cd:76:8c:bc:
         89:23:9f:9e:89:89:6c:f2:2c:c1:3a:ca:db:ea:24:38:7e:7e:
         35:84:b4:d8:4b:6e:2b:b9:63:42:20:63:46:7f:03:0d:b1:c3:
         63:ae:d9:11:b6:bf:fa:c5:4d:96:17:2b:23:68:cf:07:e8:b5:
         d1:81:ba:98:18:9f:5e:86:1c:0d:8f:7d:26:9b:3d:4c:de:f9:
         16:1e:75:d4:f7:5a:d2:8e:db:64:dc:ae:fa:0f:25:a0:08:ec:
         24:f8:61:14:1f:5c:67:e8:72:2d:37:d8:a8:fb:6d:6a:a6:98:
         94:8d:13:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 11 15:50:04 2025 by rpki-client