Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/23d5671c-ede2-3a99-ae4e-d6cee0290e11.roa
File:                     23d5671c-ede2-3a99-ae4e-d6cee0290e11.roa (raw, json)
Hash identifier:          rd7qiB3UMq9+NUKPv1+Be5Tq62BfpIQwS767ZKO7oqc=
Subject key identifier:   6C:06:A8:58:E6:CA:0B:3E:5C:DE:9F:62:74:0C:7A:9E:3B:ED:BD:5D
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F43285848424AE453FD8ADF24123FC380
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/23d5671c-ede2-3a99-ae4e-d6cee0290e11.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     26744
IP address blocks:        162.247.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:e4:53:fd:8a:df:24:12:3f:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=624ad42f-470b-4231-bc7d-4d4bf6666ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e2:90:4b:c4:5d:e2:82:f6:b9:96:e4:f4:b4:
                    5a:e6:0d:61:de:44:ed:56:2b:51:d3:38:ba:53:d5:
                    b8:e0:87:22:72:9b:47:4f:29:40:6d:d1:36:d8:44:
                    a0:4b:fa:82:5e:de:80:ce:ce:b2:f0:db:5c:41:e9:
                    df:38:0e:51:4d:db:5a:c0:14:6d:77:f9:84:ac:6e:
                    97:3c:d0:2f:2d:50:b5:bf:3d:cf:92:ca:a7:49:01:
                    6e:d0:10:88:67:63:c7:24:ec:71:b6:6e:1f:c1:7a:
                    b1:b0:69:6d:a0:a2:81:0d:a2:a7:56:fb:f0:e9:8b:
                    84:31:37:11:6a:8e:81:2d:15:42:3f:fe:e2:08:eb:
                    cc:fa:ad:0a:89:1e:f5:93:4d:3e:4d:e1:50:b4:12:
                    35:60:46:5c:ff:93:ed:c7:64:b6:0a:77:12:7a:6a:
                    dd:75:e3:78:4b:b5:e2:4f:ce:0f:ef:ce:ff:97:c3:
                    49:7c:ec:2f:e2:1c:c2:e1:95:1b:df:63:6c:84:31:
                    37:a2:ef:21:22:fa:ba:27:ed:a7:ae:79:a3:d0:df:
                    39:d7:3e:d1:ac:e8:19:d6:f4:91:10:d9:99:68:ba:
                    99:3f:92:e9:4a:53:98:c5:64:1c:1f:10:64:76:8c:
                    29:ba:c4:33:cb:ca:0c:92:fb:5d:8c:7a:2f:a1:bd:
                    56:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:06:A8:58:E6:CA:0B:3E:5C:DE:9F:62:74:0C:7A:9E:3B:ED:BD:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/23d5671c-ede2-3a99-ae4e-d6cee0290e11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:a7:72:a8:df:63:3a:2c:dc:36:8c:68:ae:b8:84:80:65:ff:
         1f:48:6b:71:3c:fb:33:2d:86:cb:fe:df:67:d0:b3:9c:20:5e:
         df:a0:6d:b7:0b:b5:4d:d5:38:f3:f5:9f:b7:67:ab:e3:bf:59:
         ab:60:f8:d5:08:7c:e0:8e:a3:8c:d1:d0:5a:e1:61:be:2b:aa:
         9f:37:6f:85:96:c3:02:a0:aa:22:b7:cb:c3:0d:96:37:ad:c3:
         6a:05:c0:b7:81:f6:23:6a:8c:2c:66:20:b7:e9:40:e5:09:1f:
         fe:7d:c4:8a:2f:4e:d4:c7:22:82:4b:37:c8:bd:0b:87:43:8d:
         3c:8f:f1:0b:5d:eb:fe:e6:89:8f:3d:2c:20:fd:3a:09:ff:64:
         a3:ce:33:c7:8d:d3:a8:db:b4:fd:86:be:60:b4:42:7e:2e:de:
         7c:e8:ed:1e:f4:8c:46:66:29:85:b5:66:9d:42:72:0f:ed:e2:
         d9:99:8e:93:a6:5a:41:df:72:35:29:c8:2e:13:a9:66:67:52:
         80:15:ff:b1:11:f8:75:38:8b:b6:af:fd:62:e8:b1:e2:97:f2:
         14:c8:b7:3f:71:be:ca:6d:41:57:1d:cb:a8:e2:f6:1a:a8:94:
         1e:dc:d8:1d:14:eb:1c:b2:c5:1c:3e:f1:4d:95:93:b2:a3:1c:
         9d:02:f8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:08 2025 by rpki-client