Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/9839c9bd-a878-33ad-b2b2-c19b11817703.roa
File:                     9839c9bd-a878-33ad-b2b2-c19b11817703.roa (raw, json)
Hash identifier:          wy/g45S7gbrN6GMWfG3IP/gsMmMymcmxElgxwh5Ckt0=
Subject key identifier:   94:83:41:40:43:85:29:87:6E:F2:80:D9:0B:38:E4:EF:2D:2A:AE:7C
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F432858492184119866A4E020BD6F1A80
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/9839c9bd-a878-33ad-b2b2-c19b11817703.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     26744
IP address blocks:        162.247.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:11:98:66:a4:e0:20:bd:6f:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=e4b6266c-e670-46e7-9bb0-e2406fb65b8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e6:2b:e7:a0:c3:34:81:73:5a:18:58:19:7b:
                    de:92:15:5f:20:68:cb:85:cd:70:ae:fe:bb:1b:27:
                    ab:36:da:eb:cd:13:8b:dd:4e:71:03:c8:e5:1c:20:
                    97:b0:5c:ec:f8:c7:18:f3:3c:24:bc:df:e5:0e:62:
                    af:b8:69:82:14:54:60:68:02:4c:62:bb:0e:75:5b:
                    50:9c:f0:6a:b7:23:5a:5e:77:25:ec:e1:47:e8:b0:
                    f0:95:b0:57:44:9d:1c:4c:c9:43:32:4b:04:5f:de:
                    ce:bf:c7:6c:be:c8:64:e9:19:2b:9a:b3:10:c3:33:
                    e6:87:cf:9d:58:04:6d:32:d9:78:16:20:e9:40:96:
                    50:cc:53:5d:93:ac:a4:90:a9:31:1b:50:9a:20:74:
                    f1:6e:22:01:15:55:de:5f:e4:3e:ca:5c:6b:d1:c3:
                    77:45:b8:ce:f4:c1:e1:78:75:e7:f2:9e:94:90:aa:
                    fd:bb:30:cf:f7:f5:0e:38:20:bb:a9:d0:13:ee:6d:
                    2a:63:f1:a7:b3:f3:07:13:99:c4:95:be:41:fe:30:
                    c9:c3:9c:de:60:f7:13:a6:87:ca:b5:08:df:b8:cc:
                    c1:1a:63:15:cd:d3:87:6f:c4:f3:44:61:88:35:91:
                    f4:6d:21:9c:d7:c7:82:aa:76:55:e3:b3:f3:d3:c9:
                    3a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:83:41:40:43:85:29:87:6E:F2:80:D9:0B:38:E4:EF:2D:2A:AE:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/9839c9bd-a878-33ad-b2b2-c19b11817703.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:df:4c:78:e8:ce:8f:f0:8e:26:b9:a2:53:4b:5a:45:07:b0:
         2c:6c:60:d7:b8:0a:23:f2:9a:ca:ec:35:ef:ba:de:9f:05:9e:
         66:d2:ba:e9:80:43:a9:07:04:23:cd:1e:75:49:6d:2c:12:b9:
         7d:0e:2c:83:67:fd:cc:03:4e:9b:bb:d3:06:ab:52:e4:fb:dd:
         65:05:65:29:19:73:1f:6c:08:ae:e1:1d:6f:9c:62:b9:d5:76:
         ba:fa:85:33:26:78:49:ad:4b:b0:32:84:dd:bb:05:23:86:bb:
         6f:1c:59:23:cd:bf:a9:58:8f:c3:5c:64:f6:bd:b3:c8:94:b7:
         42:e6:eb:a7:77:a0:4f:66:14:2c:e8:62:cf:e2:80:0f:d2:27:
         da:ba:a8:d0:5a:c4:6f:70:7c:f3:34:91:85:ab:24:3f:b1:8c:
         ef:15:76:bc:ee:d0:9f:5c:9e:47:0b:34:4c:28:36:3d:27:7d:
         1a:51:fa:c3:60:f8:2c:48:49:27:74:47:2d:53:2b:8d:c3:be:
         fb:21:5a:c8:80:13:77:08:a3:d3:ef:fb:be:96:98:7d:4d:47:
         60:72:19:5a:f4:76:e5:c2:fa:e0:94:77:7d:78:c8:c6:24:24:
         c6:38:25:e5:80:b2:e4:89:22:0b:cb:2c:f8:74:46:a6:0e:3d:
         07:f3:3c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:04:32 2025 by rpki-client