Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/28c091a7-3921-32da-8ea6-ea44e7007b7b.roa
File:                     28c091a7-3921-32da-8ea6-ea44e7007b7b.roa (raw, json)
Hash identifier:          GnQuoRbX+GVkB876CR1l5htNC3EEDpPyUNo9ijQF+aQ=
Subject key identifier:   28:6A:16:B3:70:63:41:4E:85:4D:EB:8F:05:AF:6C:69:B3:5D:FA:05
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F432858492184116ADCF5AE24479A4240
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/28c091a7-3921-32da-8ea6-ea44e7007b7b.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     26744
IP address blocks:        162.247.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:11:6a:dc:f5:ae:24:47:9a:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=4c0448df-f23b-4b3b-b3d6-1e7cec5307f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ad:30:5b:92:df:c8:30:a3:55:31:c0:2a:c2:
                    8b:2e:cf:1c:1b:81:02:b2:06:70:6e:e2:d5:1d:1e:
                    33:49:fa:7d:17:43:30:3e:c4:e6:b1:c4:77:9a:4e:
                    f6:13:f4:f7:70:21:19:d8:51:cb:d9:7e:59:a8:5d:
                    32:3b:16:51:a9:e7:42:0b:1e:ce:e5:e0:e0:d8:3d:
                    02:51:3a:8c:8c:f4:c8:7f:34:bf:a2:19:a5:95:79:
                    e9:cc:7f:d5:08:4f:83:53:3c:89:de:d8:42:13:e2:
                    bf:56:08:7a:fb:1d:e8:2b:31:98:a4:f6:bb:22:cd:
                    71:b9:76:7f:5e:93:58:d6:94:df:ab:bd:e0:43:6e:
                    8a:1d:11:35:61:02:96:76:0f:b1:04:4d:67:b9:26:
                    1f:a0:44:e8:d1:eb:1a:67:0e:e8:9b:fe:55:b2:c5:
                    9a:30:f1:ef:19:82:f2:72:2e:6f:fa:01:6e:56:55:
                    a5:41:3b:82:97:6f:64:95:c3:c0:60:22:d6:4f:f0:
                    9b:22:8c:0d:d3:6c:31:aa:5d:4a:5e:b8:13:3e:06:
                    ed:6c:d4:1a:74:a3:ba:22:fc:cf:a5:0f:58:e8:60:
                    b5:a1:79:75:a6:88:e7:c2:97:06:f5:0a:92:43:af:
                    27:48:96:9c:4e:d9:f7:7d:50:f7:34:35:4d:e0:b9:
                    b5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:6A:16:B3:70:63:41:4E:85:4D:EB:8F:05:AF:6C:69:B3:5D:FA:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/28c091a7-3921-32da-8ea6-ea44e7007b7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:46:26:1c:30:dc:64:4c:4d:0e:f8:2a:d5:e2:b5:cc:db:5e:
         e0:ad:bd:68:6c:05:bc:5c:f0:22:e0:63:98:be:1f:2a:96:73:
         83:d6:06:0e:00:0c:55:99:17:55:8d:dd:9b:61:1b:74:d7:c4:
         d5:36:ee:99:cf:19:84:23:df:f3:e8:e9:49:8b:c7:51:85:f0:
         b8:ac:92:d8:b9:f3:a4:65:71:80:ee:75:55:59:59:9d:f8:64:
         38:22:ec:9d:a5:32:b8:69:d4:34:4b:7e:d9:94:9a:1d:8d:21:
         fc:65:cc:b8:c6:0b:e2:18:90:f0:64:3f:ab:c0:36:db:35:e9:
         9a:38:09:d9:78:2e:df:da:c9:0b:46:55:0f:3a:46:3d:4e:f7:
         1c:ea:88:52:09:12:28:14:af:45:0d:64:80:13:18:60:3e:e7:
         a0:01:92:8d:a4:f4:02:9e:6d:49:06:57:f1:5f:11:03:40:bd:
         fc:60:1c:29:42:57:3d:a8:83:de:0f:25:8a:52:1b:0b:aa:d7:
         d2:ed:9d:f8:d3:0f:35:da:f4:95:be:5d:48:52:b8:90:7d:33:
         c8:98:2e:73:11:63:27:f1:cd:86:99:14:eb:d1:85:eb:07:7e:
         83:16:49:d2:14:a3:d2:5f:45:8e:45:2d:e2:d2:ff:9e:d0:ec:
         31:cc:0a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:07:00 2025 by rpki-client