Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/0ce004c6-214f-3dc3-ab49-64615ce4a7f5.roa
File:                     0ce004c6-214f-3dc3-ab49-64615ce4a7f5.roa (raw, json)
Hash identifier:          l31SzoOyqWE8K7w7uRe/cadc1mAUWAumFD3ha2AcLzQ=
Subject key identifier:   CD:36:0A:F5:77:ED:EE:35:4C:D2:C3:09:E3:D4:4B:5F:D7:4D:46:AA
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F432858492CB22D9A731007B9AA07F9C0
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/0ce004c6-214f-3dc3-ab49-64615ce4a7f5.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     376
IP address blocks:        207.162.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b2:2d:9a:73:10:07:b9:aa:07:f9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=6b2033f9-1f8b-4e0d-b5a9-2afbc1274dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ad:ba:d3:94:81:39:c1:77:3f:71:24:8b:0b:
                    c1:0e:e2:94:29:43:54:f9:8b:93:af:fd:31:14:04:
                    f8:e4:a7:e8:2d:29:55:90:5d:57:83:a4:56:e6:42:
                    53:45:19:d6:db:1e:8a:60:41:52:57:cd:7b:fc:cc:
                    28:50:59:f4:99:2e:0b:48:3f:73:db:da:84:20:f6:
                    ea:e4:44:9d:c1:ad:88:d1:71:e7:fa:56:d1:59:11:
                    db:5c:cb:dc:03:94:53:74:68:be:ec:98:b1:fd:61:
                    c2:83:de:62:48:16:c5:00:c1:77:06:43:c3:eb:fe:
                    12:c4:10:96:15:94:da:90:90:dd:67:c5:3b:66:06:
                    75:73:dc:d3:5c:d9:77:9d:d3:f1:89:ca:f9:c9:ec:
                    b8:30:af:c7:e2:ec:3a:2f:f8:16:de:1e:92:24:fb:
                    bd:84:e9:0b:ac:7f:ed:1b:65:af:d5:ff:f2:05:59:
                    f9:e5:8b:c8:71:b4:49:a9:fa:44:a0:c4:9a:34:28:
                    f6:5d:63:70:58:58:f1:31:70:15:3e:26:aa:f3:15:
                    42:52:57:96:ce:de:47:6c:8d:02:75:73:c2:6a:38:
                    02:6c:c3:64:bf:73:9c:dd:15:27:ad:4f:3f:67:b8:
                    f4:d7:26:15:52:73:72:d1:c9:c8:2d:c3:b9:dc:c6:
                    b9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:36:0A:F5:77:ED:EE:35:4C:D2:C3:09:E3:D4:4B:5F:D7:4D:46:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/0ce004c6-214f-3dc3-ab49-64615ce4a7f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.162.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:c8:1c:e0:c5:e9:16:bf:66:49:d6:6e:63:c6:d3:cf:70:a1:
         98:c4:e3:07:b5:51:04:fb:ef:6b:a6:7a:15:e6:1b:50:49:ba:
         f9:c0:e3:d7:bf:04:51:ab:01:d7:14:b0:8a:e1:ae:63:ae:5d:
         08:19:69:f6:d3:3d:d9:ed:fc:7f:ab:b0:dc:2a:c3:11:04:31:
         62:bb:05:1a:09:ec:d2:59:df:de:5c:9b:b1:15:13:c8:1a:b8:
         19:7d:c0:0f:ab:3f:9c:41:4d:3a:a9:b2:89:e3:0d:25:04:d6:
         d9:05:3b:13:09:68:80:45:cd:84:11:19:71:d6:f9:be:37:62:
         87:04:f4:87:32:ec:4c:61:40:c9:56:d1:6b:c9:a8:a6:80:c9:
         77:fa:01:43:46:7a:37:43:ee:36:2d:47:af:c4:3b:9a:ee:f4:
         60:95:22:c9:9a:3d:81:8e:3a:1f:fb:57:b1:48:c2:84:cf:d7:
         6c:94:1e:b6:9e:f9:2d:d7:33:46:36:9f:bd:6f:0a:e4:49:ec:
         81:4b:95:5c:fb:57:0c:55:51:df:19:f8:6f:46:b9:50:c1:b4:
         a7:9f:6b:56:26:f6:ba:b3:33:0e:bd:b5:25:12:d6:a2:e5:52:
         86:84:1b:81:70:86:c2:a4:62:3b:43:48:2d:d3:ec:8a:ec:c4:
         98:93:9e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:08:46 2025 by rpki-client