Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a865188e-8adc-3877-94df-7f4e8768dbad.roa
File:                     a865188e-8adc-3877-94df-7f4e8768dbad.roa (raw, json)
Hash identifier:          eVsfonuHTSaS1JH1iwkrCRt6vZaOQj0w2JphRtEMFws=
Subject key identifier:   76:29:52:E3:8E:B9:42:5A:67:14:C7:6D:54:55:1B:FF:14:71:86:A5
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584917DC017819DF8182E3E88800
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a865188e-8adc-3877-94df-7f4e8768dbad.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     7018
IP address blocks:        158.62.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:01:78:19:df:81:82:e3:e8:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=5738821b-462f-4c67-9d30-a73e4fcff6bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:79:cf:13:58:45:6b:41:ce:f3:ca:77:42:53:
                    19:be:1b:03:27:68:c4:05:5a:d4:a9:d7:68:c8:7c:
                    ee:3b:7d:a1:8f:a1:b5:82:7e:4e:64:cc:3b:e5:1f:
                    0c:d0:b6:69:24:6e:63:8e:af:cc:11:8c:07:27:5b:
                    59:89:4d:4f:70:57:15:87:81:f1:4e:44:f7:78:c3:
                    6c:e0:6c:95:6e:99:b9:00:52:f3:87:45:6c:61:b5:
                    f6:b1:8f:77:fd:46:df:6e:ca:b9:0d:aa:ba:1f:b5:
                    4b:5e:c5:9f:b3:c4:49:0d:e2:9b:c7:b9:b5:b2:34:
                    49:84:72:8b:0f:7e:7d:f5:5a:db:eb:d1:71:90:1d:
                    34:98:65:b1:44:8f:3f:3b:e5:fa:42:d5:e4:be:c7:
                    e8:e7:96:08:c2:67:be:f1:7b:5d:fb:5c:41:18:c7:
                    f4:60:27:29:68:1c:06:f7:d2:dc:e2:b2:ad:75:2e:
                    64:87:b2:9b:57:8b:f6:0e:b8:dc:ac:dd:9e:4a:e4:
                    47:be:89:e1:e1:c1:e1:37:12:9c:69:c9:72:a6:87:
                    6b:06:01:b4:40:92:d5:c3:37:99:5c:82:45:74:45:
                    d1:dc:2f:81:8b:46:e1:38:d0:65:58:47:9d:11:f4:
                    42:32:a8:a9:77:c8:57:cf:ab:b2:1e:f3:f0:2f:0d:
                    63:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:29:52:E3:8E:B9:42:5A:67:14:C7:6D:54:55:1B:FF:14:71:86:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a865188e-8adc-3877-94df-7f4e8768dbad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.62.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:56:c2:0f:d6:41:32:47:0e:39:2b:a5:02:a0:6c:80:32:ec:
         c4:17:f9:7d:e8:3b:db:fe:ff:54:cd:be:65:63:07:7d:a9:3f:
         40:d0:ed:65:1c:10:95:8f:11:bc:2e:61:f2:38:32:4c:a2:cc:
         99:8b:96:71:ef:48:a3:0c:03:1d:e4:95:58:3a:55:0e:d6:c8:
         29:1b:74:3d:32:74:6a:41:9b:fd:a4:5b:6a:c6:75:8a:85:f2:
         5b:7a:53:90:18:64:08:eb:d3:4f:3c:8f:db:86:88:50:50:7e:
         cc:66:21:14:14:4f:50:75:d5:a3:98:71:91:6f:1f:5b:c7:1d:
         87:6f:ef:4c:04:f1:5b:6b:11:41:c0:07:12:dd:13:75:8b:b6:
         c6:8f:fe:6c:7d:cd:65:16:e1:43:1f:54:03:f3:ab:25:05:4a:
         3b:f9:25:4a:54:a6:0b:c3:7b:82:bc:c1:64:59:93:77:5f:c1:
         ad:da:93:24:89:67:51:35:a7:f1:a1:92:8a:3f:19:a4:ff:a5:
         0d:de:03:89:24:2e:3b:e6:1f:66:1c:49:bb:c6:54:c1:41:dd:
         87:e0:ea:10:62:cc:11:73:e6:6c:32:9b:be:ef:d9:42:2e:a3:
         c2:15:9a:7c:c7:bb:e0:c5:fa:91:f0:0b:05:23:2b:a2:87:36:
         d3:72:97:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:50:21 2025 by rpki-client