Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/5f6d20f4-1ccf-376c-a4d3-1747fb90c69f.roa
File:                     5f6d20f4-1ccf-376c-a4d3-1747fb90c69f.roa (raw, json)
Hash identifier:          777pgdrsDSWBYkV9p1eDrXXCxXAUJ6AvVcnCvuYum6Y=
Subject key identifier:   6E:86:CD:5C:FE:33:DE:76:D7:3F:F1:E7:93:31:5E:22:BE:B0:26:B0
Certificate issuer:       /CN=d91f505a-0b78-4bc4-a857-f86d34163202
Certificate serial:       010D0C9F432858488F107D88D82242AB421EBBA0
Authority key identifier: B4:AB:B9:C6:85:42:EB:2D:83:E8:01:5B:2F:4A:89:ED:EB:A7:19:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/5f6d20f4-1ccf-376c-a4d3-1747fb90c69f.roa
Signing time:             Thu 16 Jan 2025 02:00:39 +0000
ROA not before:           Thu 16 Jan 2025 02:00:39 +0000
ROA not after:            Wed 16 Apr 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        216.211.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/d91f505a-0b78-4bc4-a857-f86d34163202.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/d91f505a-0b78-4bc4-a857-f86d34163202.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8f:10:7d:88:d8:22:42:ab:42:1e:bb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d91f505a-0b78-4bc4-a857-f86d34163202
        Validity
            Not Before: Jan 16 02:00:39 2025 GMT
            Not After : Apr 16 01:00:39 2025 GMT
        Subject: CN=480a8143-7d20-4221-821d-dde8e7897ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d5:2d:e5:ed:0f:a5:f0:3b:d5:e4:6c:d0:0c:
                    5a:8c:9c:88:5a:82:e9:22:b2:ea:d9:20:c6:07:bb:
                    75:bf:44:0a:2b:de:bb:f8:17:05:fa:e3:b7:e1:06:
                    ee:fb:80:d0:9f:95:c2:b3:66:12:b6:eb:e7:02:02:
                    7a:c1:c0:11:84:bd:d2:f9:c2:98:fa:2f:2b:66:18:
                    a8:a5:9c:3f:dc:d9:72:b7:89:9d:6b:98:b8:9a:86:
                    7e:e7:15:67:11:f1:89:a7:2a:52:88:12:40:51:fa:
                    14:bd:31:cc:05:7f:29:3b:30:bc:a0:f5:e5:87:f4:
                    21:cc:1f:9e:0f:80:3a:aa:d7:07:03:fc:c9:e4:eb:
                    4b:cc:41:bc:bc:ad:26:3a:3d:39:f8:14:df:71:98:
                    60:07:0d:1e:cb:59:f7:81:6b:5d:ea:a7:3e:27:de:
                    5b:c5:18:85:50:44:3a:e5:22:21:9d:74:0d:a4:f1:
                    cf:86:00:41:da:fc:1c:9d:98:28:fa:f1:b9:96:35:
                    57:97:0d:83:a9:6f:6e:28:84:ad:f2:b5:c0:10:23:
                    35:d0:37:53:42:52:77:cd:41:a8:05:ce:2b:a3:25:
                    70:2f:59:4c:89:9a:4b:50:25:9b:87:c2:be:6f:ef:
                    e4:ed:36:81:f5:26:56:5f:3b:26:4d:20:a1:0a:36:
                    f4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:86:CD:5C:FE:33:DE:76:D7:3F:F1:E7:93:31:5E:22:BE:B0:26:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/5f6d20f4-1ccf-376c-a4d3-1747fb90c69f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/d91f505a-0b78-4bc4-a857-f86d34163202.crl

            X509v3 Authority Key Identifier:
                keyid:B4:AB:B9:C6:85:42:EB:2D:83:E8:01:5B:2F:4A:89:ED:EB:A7:19:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.211.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:d2:db:8b:f4:e4:73:ea:68:d8:2d:1c:d3:78:27:e9:40:14:
         f5:17:d5:e6:2f:12:f2:b2:35:5f:20:ca:c8:cc:5a:64:59:e0:
         c8:a5:ef:0a:e7:22:17:cb:d6:5f:26:07:48:1f:3c:3f:89:ab:
         44:3a:73:dd:50:61:ab:e6:2d:25:2f:61:6f:12:22:c5:6c:f8:
         29:62:0c:d0:26:1f:67:de:84:01:1c:9d:eb:90:cb:1c:6b:2d:
         34:a3:32:22:83:4e:83:5b:6d:d0:43:65:37:16:25:5c:cb:03:
         fc:03:20:d7:f5:aa:0a:22:7e:eb:6a:e1:ae:e2:95:04:fb:cf:
         49:d8:bf:0b:bf:68:ad:d6:5b:22:bd:ac:1a:93:6f:aa:8d:b3:
         7a:98:bc:5b:f3:93:55:c4:e2:dc:6e:f0:6c:90:46:db:2c:8d:
         8e:de:43:eb:0e:31:52:2f:e0:9f:4b:54:cf:90:63:72:ec:62:
         c5:9c:50:4a:ab:3c:03:98:1e:d9:3e:28:20:25:19:45:2f:9d:
         b7:30:d6:42:4c:35:42:f4:eb:04:06:53:50:89:18:b8:a4:0b:
         47:51:18:9d:5e:f1:0f:fb:b0:34:fe:d8:d7:56:fc:a8:12:a0:
         d1:17:fe:e1:a2:27:50:28:e5:92:88:88:1b:0a:8f:59:31:f1:
         86:7b:fa:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:05 2025 by rpki-client