Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/212a0ab7-29e0-38c1-898a-18f324ed9e64.roa
File:                     212a0ab7-29e0-38c1-898a-18f324ed9e64.roa (raw, json)
Hash identifier:          yhVyiRTRheoA9gx8Pr8jDt4UcOIOBL+3wcx1UKUPVj0=
Subject key identifier:   BB:E9:C9:61:61:E0:DB:E7:83:82:BE:3A:0C:C1:60:CB:E7:7D:E3:01
Certificate issuer:       /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Certificate serial:       010D0C9F432858496A19988168FBF768277B8460
Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/212a0ab7-29e0-38c1-898a-18f324ed9e64.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     46841
IP address blocks:        162.210.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:98:81:68:fb:f7:68:27:7b:84:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=36fd4a58-4a18-492d-92ec-f610c3d7764c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:91:a4:a9:49:10:dc:a2:01:ef:c9:bf:cc:6c:
                    e8:48:a2:6e:0b:03:b0:e7:a8:72:8e:d8:18:ec:20:
                    cb:22:cf:d8:8c:aa:3a:94:50:16:1d:18:45:e2:0b:
                    c5:b4:05:1d:ff:6b:73:51:52:d2:ab:f0:87:bb:2d:
                    e6:a8:81:3c:b3:7c:72:a0:0b:f1:8d:41:53:1e:12:
                    5c:08:8f:3d:8c:fc:f8:29:b0:7f:17:c2:8c:39:b8:
                    0f:77:1f:27:7e:21:7e:dd:96:99:dc:35:5a:dc:68:
                    4b:e5:9e:12:d5:91:24:f2:6b:b6:19:bb:b5:17:bc:
                    bc:09:e7:e9:e3:62:ff:7d:96:29:6c:5c:40:27:31:
                    1c:7f:71:b1:99:b4:ef:b2:a9:52:6b:eb:9c:d8:cd:
                    28:af:97:2f:63:70:52:3f:72:40:a7:9f:c6:d5:70:
                    bf:98:a8:e1:53:22:3e:b6:d9:26:ba:ad:7d:e7:89:
                    8f:fa:91:9b:2b:08:92:c0:b7:03:da:1b:89:a9:8e:
                    3d:72:22:41:4f:e2:b6:65:bb:9d:5e:7a:db:11:f5:
                    79:20:47:05:47:0e:a2:4b:a0:24:4f:a4:d2:73:4f:
                    fe:ea:f4:2d:fd:1f:20:b0:36:96:d4:8d:6f:9b:da:
                    ca:e5:bc:1d:ec:21:d0:87:e9:f4:62:23:26:0a:ff:
                    e9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E9:C9:61:61:E0:DB:E7:83:82:BE:3A:0C:C1:60:CB:E7:7D:E3:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/212a0ab7-29e0-38c1-898a-18f324ed9e64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e4:54:97:b3:b2:33:2c:74:9b:36:79:c0:98:3f:35:ce:43:15:
         97:22:e7:b1:8a:55:c6:58:07:5e:3c:1d:44:ee:66:17:d8:42:
         f5:9a:e1:96:08:50:cb:6d:4f:47:e4:d7:08:ba:85:b6:b6:84:
         8b:0c:a6:64:f4:e2:ce:b2:fa:49:3c:3d:69:9c:b6:96:2d:d0:
         64:94:51:d7:09:bd:f5:42:7d:ac:81:c2:4a:c0:6c:cf:a4:65:
         3d:f0:d0:dd:bf:40:89:e0:3a:68:5f:71:40:fe:30:47:65:7b:
         02:6b:67:66:86:4e:0a:8f:5e:dd:b4:ec:10:d5:22:4d:38:69:
         5f:b5:7d:89:a4:4c:5d:f2:8f:cf:ba:bc:12:20:07:7a:c3:d9:
         eb:59:89:ad:68:0d:0b:21:7d:e1:aa:b7:ce:75:4d:01:5c:07:
         b5:b9:b7:be:06:98:9b:91:aa:4f:a8:1a:fc:e9:fc:e7:0a:df:
         13:18:cd:0b:37:75:f0:7f:39:f8:58:9b:5b:e3:1a:63:4a:7c:
         d9:d6:cf:02:0e:08:39:13:2f:c4:34:54:ad:4e:3f:15:4f:45:
         3f:9e:6e:9e:af:a5:ec:51:3d:c7:4e:fa:4d:7f:55:44:db:c8:
         52:fb:7c:3d:89:00:2b:1c:85:75:30:6e:9b:ab:89:75:6e:99:
         c2:83:1d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:18:35 2025 by rpki-client