Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/0ce004c6-214f-3dc3-ab49-64615ce4a7f5.roa
File:                     0ce004c6-214f-3dc3-ab49-64615ce4a7f5.roa (raw, json)
Hash identifier:          F+9N574DhGMGLW/O3D8buLd1dYhJ5oMu+pFpK2q857g=
Subject key identifier:   43:26:F7:64:A4:A8:A5:3F:22:42:DE:F5:CC:E9:FE:4D:66:1B:3C:3D
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F432858484D7583C7025CFC6983DCE080
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/0ce004c6-214f-3dc3-ab49-64615ce4a7f5.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     376
IP address blocks:        207.162.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:83:c7:02:5c:fc:69:83:dc:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=2d769c66-c86f-493c-b20a-bfdd4670a3af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0b:ee:86:cd:ae:0b:81:a7:d6:9e:87:a3:4d:
                    13:26:1d:9d:e5:02:56:f3:11:4b:73:cb:2c:42:2e:
                    40:82:a0:7e:f4:bc:43:31:be:b7:bb:c5:21:10:9d:
                    66:46:1b:5f:79:de:92:51:b1:47:e7:0c:9a:f6:b4:
                    c5:06:b4:b1:17:1f:cd:65:43:66:e8:b7:cd:0a:b4:
                    86:2f:cc:59:f6:3c:39:2d:97:fa:12:ec:06:7f:17:
                    5a:70:2b:44:38:1e:35:95:2b:fb:15:aa:60:e5:84:
                    e7:93:e0:d6:4b:a4:cb:85:ce:49:21:64:a3:a5:e2:
                    15:92:66:d6:12:66:5e:f7:dd:6e:3e:74:89:e4:52:
                    37:a0:43:75:7a:71:ea:85:11:25:74:d9:2b:36:d3:
                    b1:67:27:ef:89:52:b3:e8:3a:da:d7:d7:c1:0f:82:
                    18:7e:ce:f3:be:f0:6b:d9:7d:18:fa:32:e3:7d:0d:
                    33:f0:08:be:55:6c:97:ba:ab:a5:29:71:fe:c7:4f:
                    dc:8f:32:1f:23:54:80:95:24:20:ac:a6:2d:72:b8:
                    d9:d2:04:f3:6f:39:49:a7:66:db:0c:39:07:39:40:
                    80:03:1f:69:c9:52:fc:88:87:18:e7:c3:47:bd:92:
                    88:26:14:42:a0:d8:8b:3d:c2:45:14:79:b7:0a:88:
                    06:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:26:F7:64:A4:A8:A5:3F:22:42:DE:F5:CC:E9:FE:4D:66:1B:3C:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/0ce004c6-214f-3dc3-ab49-64615ce4a7f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.162.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:f5:63:33:52:df:68:35:1e:91:27:12:93:53:2d:d4:21:bf:
         68:32:06:35:ba:65:0c:18:a1:47:75:08:f7:cb:15:88:1d:c9:
         44:c0:b5:8b:6b:98:8e:a8:26:8c:5e:bb:2d:9b:e7:9c:de:ab:
         e1:09:ea:89:6b:01:32:e4:5a:fb:8a:46:0a:ce:37:f1:d4:8c:
         c3:c1:ef:43:0d:b1:b4:43:a2:1d:ce:db:99:aa:48:31:2c:47:
         cf:53:2b:ec:a4:1c:6d:a4:15:ad:65:17:e1:de:b8:c0:0c:4f:
         b1:71:ca:00:d6:5c:ea:a7:2d:21:96:12:d2:56:56:30:75:7c:
         ef:d9:67:67:7c:2d:8c:e0:02:85:20:5b:83:9d:24:82:87:dd:
         bf:8b:83:6c:62:c4:1e:71:24:04:3f:6b:e3:ae:6f:24:97:0d:
         b8:04:34:ca:71:17:71:52:5f:29:0c:2b:6c:cb:5c:b3:be:36:
         61:94:e6:57:a2:d8:d7:ca:73:b5:cc:8c:30:a5:d2:29:eb:86:
         d0:30:ff:61:bc:53:9d:47:36:45:87:0c:57:38:3b:e8:0c:53:
         dc:30:3c:ec:4e:24:13:a6:6a:86:e7:70:dc:24:8a:d7:51:37:
         8a:cc:29:40:04:49:64:d8:4d:2a:03:2a:6d:f3:08:0b:49:06:
         66:4f:c8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:03 2025 by rpki-client