Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/a4e09fff-effb-341c-b97f-cdb36ea277ae.roa
File:                     a4e09fff-effb-341c-b97f-cdb36ea277ae.roa (raw, json)
Hash identifier:          6aCQQMPOnnCaflZMrqJ3SQOagXE03g8oU8MI4lTgnko=
Subject key identifier:   CD:39:98:E9:96:13:3C:CE:0C:DB:F2:B7:A6:53:1F:6D:E5:0C:FE:0A
Certificate issuer:       /CN=70212b19-99d4-4532-a7e0-a5bdbef20170
Certificate serial:       010D0C9F432858492CAE7F0FA145BC6DF921DA00
Authority key identifier: 10:3A:37:8A:5C:7E:F2:98:FB:74:3D:2C:6D:62:04:89:CA:64:A2:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/a4e09fff-effb-341c-b97f-cdb36ea277ae.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     17151
IP address blocks:        216.147.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:7f:0f:a1:45:bc:6d:f9:21:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70212b19-99d4-4532-a7e0-a5bdbef20170
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=b9605c5e-3fdc-4b4c-b74b-3821dcb303f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0d:c4:cd:1d:2c:d5:10:3e:22:2b:8a:4c:43:
                    61:08:f2:9b:69:e7:6c:ea:39:3f:87:bb:d1:5a:3a:
                    71:ee:0e:70:b6:e7:09:13:5c:74:b6:8c:50:bf:5a:
                    95:67:b4:e3:ee:1e:cd:74:cc:6b:62:c6:22:17:98:
                    2e:22:d7:35:15:10:70:c9:0c:7a:4f:db:3f:45:0b:
                    0e:8c:27:71:fe:ed:17:a3:a4:5e:ce:e9:e3:6c:e5:
                    32:58:e9:f8:60:86:0a:a1:91:da:bc:46:8b:61:c6:
                    3f:27:48:78:42:74:59:ed:74:f7:54:68:31:de:d0:
                    7e:b8:75:7c:37:12:92:8d:82:63:32:19:92:5d:1b:
                    74:c0:42:00:1d:39:c0:4e:92:92:ab:16:47:60:2c:
                    95:5e:ba:16:ad:92:6c:c0:7a:ec:79:c8:bd:7b:67:
                    41:19:5c:45:3d:18:8b:02:90:1d:b1:0b:b1:e2:28:
                    17:cb:f1:fe:72:54:69:fa:f1:ca:81:22:5a:15:77:
                    9f:64:e8:03:81:50:63:da:1f:c6:10:27:e8:0f:95:
                    bc:9f:b2:3a:e4:5d:1b:b7:15:18:84:0d:35:20:db:
                    a6:ea:2d:9a:6e:7d:c8:63:e2:ee:59:91:e0:a8:48:
                    f0:5d:ff:32:d2:24:b5:11:e4:8b:1b:24:08:95:c6:
                    7b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:39:98:E9:96:13:3C:CE:0C:DB:F2:B7:A6:53:1F:6D:E5:0C:FE:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/a4e09fff-effb-341c-b97f-cdb36ea277ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.crl

            X509v3 Authority Key Identifier:
                keyid:10:3A:37:8A:5C:7E:F2:98:FB:74:3D:2C:6D:62:04:89:CA:64:A2:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.147.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:7b:97:16:5b:5f:83:36:93:e3:90:c1:14:37:5f:72:a9:86:
         f0:7f:c5:28:a1:bb:e4:6c:2f:d1:f9:ce:5b:25:35:d3:7f:a8:
         f0:62:fc:05:e9:12:fe:0f:26:55:23:cb:81:63:78:34:d7:71:
         3f:b3:18:4c:cf:12:bf:d0:7b:5d:66:cf:71:60:99:f7:b6:9f:
         12:84:57:e7:0c:87:26:84:08:b5:3b:7a:76:4a:d5:1b:05:81:
         3e:c7:34:2b:d5:c7:9d:3f:c4:40:41:66:88:98:95:58:89:b4:
         3f:6c:33:0f:5a:e6:30:21:6e:99:a3:0f:9c:33:b7:33:e9:52:
         b5:00:96:79:c1:97:e4:dc:97:57:c1:96:74:78:65:d5:d9:6b:
         68:1a:8d:05:1a:f0:ce:0d:7e:5b:ac:40:fb:9a:ef:25:03:92:
         89:59:53:9c:e3:ea:6d:2d:11:eb:07:8a:48:18:4f:35:2e:75:
         29:65:10:87:c5:ad:ad:fd:29:64:f1:1b:be:17:1e:23:eb:64:
         9f:42:44:46:b1:e5:9f:63:0a:db:04:b1:8c:78:6c:34:44:b3:
         30:8f:35:60:58:7c:43:16:96:b5:9a:b3:aa:ef:ca:fa:52:44:
         88:54:46:ee:27:b1:34:72:ca:9b:fa:34:c5:41:02:ab:09:3c:
         7b:37:df:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:44:57 2025 by rpki-client