Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/be070d10-f5a4-3468-b574-f6ee7a234742.roa
File:                     be070d10-f5a4-3468-b574-f6ee7a234742.roa (raw, json)
Hash identifier:          ZkCY0Spt5J6mfZUeQ84HyPuHvOsks3zRn/5CRnN0LB0=
Subject key identifier:   50:84:1C:2B:31:1E:7E:4E:74:84:F5:20:73:A7:AE:23:61:21:9A:73
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F43285848A136182E5F68179F905B5DC0
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/be070d10-f5a4-3468-b574-f6ee7a234742.roa
Signing time:             Wed 22 Jan 2025 14:00:52 +0000
ROA not before:           Wed 22 Jan 2025 14:00:52 +0000
ROA not after:            Tue 22 Apr 2025 13:00:52 +0000
asID:                     20253
IP address blocks:        162.222.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:36:18:2e:5f:68:17:9f:90:5b:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Jan 22 14:00:52 2025 GMT
            Not After : Apr 22 13:00:52 2025 GMT
        Subject: CN=376a0312-5549-4f78-87fd-2373225d1b7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:17:e2:9a:1f:5f:99:f2:08:f1:59:3e:d0:6c:
                    a5:63:da:f5:ae:f5:8b:e4:19:f2:33:8c:32:fe:98:
                    03:b3:d7:91:78:cd:19:d7:14:5a:5e:ba:b7:2a:db:
                    ca:8a:a6:5d:61:9b:ad:a9:5b:a1:10:dd:66:45:6c:
                    ca:78:be:b9:1d:51:a6:fc:20:cc:7d:10:5d:c6:f6:
                    83:25:ca:7d:4e:4c:6e:a0:0d:c4:1c:6f:01:0b:c2:
                    ec:71:26:72:bb:ee:d5:2d:a4:99:ee:eb:34:53:98:
                    74:7b:8e:c2:a1:69:f9:31:1c:92:fe:fa:83:eb:9a:
                    29:ad:f3:76:ca:28:af:d1:41:38:a4:93:a9:80:0f:
                    b2:58:fe:76:10:2b:d2:66:7f:6a:9f:0d:5d:db:1e:
                    95:90:2d:7a:6b:c9:a2:5a:e5:8e:91:8d:4f:fa:52:
                    44:ab:b1:a5:51:40:5b:e6:54:cb:01:84:fc:51:7d:
                    ce:c3:1c:c0:98:5b:28:92:cb:50:d1:a0:4b:4c:d6:
                    43:dd:c5:cd:9f:95:7b:e3:64:15:cf:3e:92:d2:d0:
                    a0:97:b4:89:bd:17:f2:99:5f:ab:f7:d0:46:5c:8f:
                    35:ef:93:1e:35:9e:ef:cd:fd:11:02:d4:0f:a5:ce:
                    4c:b3:b5:6f:01:5a:30:9e:c3:6a:71:18:1d:44:89:
                    3b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:84:1C:2B:31:1E:7E:4E:74:84:F5:20:73:A7:AE:23:61:21:9A:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/be070d10-f5a4-3468-b574-f6ee7a234742.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:f0:e3:49:f0:d2:28:ed:e6:43:de:da:4d:42:b9:45:c6:7a:
         33:bd:7b:89:f9:70:b4:25:c9:c4:c0:3c:18:a3:5f:30:00:03:
         46:5c:fc:dc:91:4a:46:f4:95:03:34:bb:95:9e:31:32:c2:67:
         1e:1a:e0:dd:15:3b:67:c0:f8:c5:86:cc:82:7f:69:1e:e7:15:
         ad:d8:88:5b:f6:8f:85:4e:ad:4d:80:3a:11:c6:ff:8f:9e:95:
         93:d7:0c:34:b1:4c:c9:13:a1:86:f6:8b:cc:b8:0f:f7:95:97:
         02:48:d1:74:e3:a0:71:47:09:3d:d9:0d:e0:8b:7f:af:4f:13:
         23:eb:88:11:bf:4b:38:b6:d8:6f:f9:49:f2:6f:7c:48:0c:56:
         1d:80:d4:6f:da:9c:21:92:37:81:cd:05:9b:12:a4:51:c5:75:
         c7:3a:99:07:4f:89:13:d2:00:e1:c5:69:b4:04:c8:a7:b6:21:
         e6:75:d5:93:68:f4:d4:0c:fe:23:f2:cb:89:c8:6c:74:79:f1:
         80:d9:ed:e3:6a:af:0f:b2:a5:51:2c:23:99:bf:ee:08:22:63:
         c5:a9:01:4d:df:c1:fa:5c:1d:2e:49:ca:0b:86:57:7d:99:7b:
         08:40:b0:b1:e2:e7:0f:7a:f2:d9:b6:af:61:53:4d:b9:49:8c:
         2f:fa:5a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:59 2025 by rpki-client