Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/38446997-5291-39e4-9e78-1e5c939d64cc.roa
File:                     38446997-5291-39e4-9e78-1e5c939d64cc.roa (raw, json)
Hash identifier:          WROxwbM5vHkp6nbbnE7naKS2XCWiTM3s7BFAd63Wgs0=
Subject key identifier:   17:86:B5:58:4A:EF:C4:F0:B6:18:CC:DC:EE:B3:AF:6A:A0:06:1D:8B
Certificate issuer:       /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
Certificate serial:       010D0C9F43285849DC8FC78A3C3EAA7CE250DA80
Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/38446997-5291-39e4-9e78-1e5c939d64cc.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     19257
IP address blocks:        162.222.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:c7:8a:3c:3e:aa:7c:e2:50:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=b9019d29-8d04-45ff-af3e-ec9177782841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f9:12:7f:4d:7e:e3:65:1d:56:88:29:dd:a9:
                    bf:48:e3:15:58:49:fa:bb:ae:39:ff:42:9c:32:08:
                    e2:af:9e:d7:ca:92:6b:c7:86:61:f9:34:74:43:34:
                    44:1b:10:32:b5:d1:1e:09:54:b7:e7:0f:16:0d:81:
                    e1:e0:82:30:3e:6e:58:02:90:86:b9:f4:09:04:72:
                    37:11:b8:b0:3f:e3:f2:28:30:1a:be:fc:8c:31:8a:
                    2d:fe:79:e3:4a:25:c9:ec:49:a5:fc:c5:cf:3b:33:
                    6f:d7:b0:cd:e9:53:91:6e:56:9c:13:fa:38:08:57:
                    93:b5:dd:45:65:1c:df:d9:48:e1:1b:40:f5:df:64:
                    ae:d2:58:a6:b2:8e:a6:91:a3:27:dc:65:0f:a5:91:
                    53:c6:cb:4c:22:8d:73:65:89:f8:17:c0:41:34:bd:
                    28:19:d6:76:f3:5d:d8:a6:77:75:10:e1:54:eb:1b:
                    c3:48:6b:64:d6:f5:d7:03:91:b9:11:b9:63:b6:6d:
                    76:b9:68:ed:0d:99:8d:da:ef:f7:39:53:c6:97:a0:
                    f7:df:95:9b:1d:b1:00:5c:17:47:d9:3e:bf:f3:30:
                    0f:4d:6d:d5:40:60:63:81:6e:7e:77:f8:fd:bb:94:
                    d4:86:0a:64:b3:29:b0:7b:3b:1f:e8:b5:ec:0c:c1:
                    64:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:86:B5:58:4A:EF:C4:F0:B6:18:CC:DC:EE:B3:AF:6A:A0:06:1D:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/38446997-5291-39e4-9e78-1e5c939d64cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl

            X509v3 Authority Key Identifier:
                keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:ef:63:6a:1a:18:55:02:86:12:76:72:94:d2:91:9d:16:80:
         e8:e9:3e:2c:43:22:a9:c2:a8:1f:f2:0c:d0:06:2d:18:c8:dd:
         68:d2:8a:59:fa:2f:ca:57:0e:75:16:80:55:10:0b:88:59:e0:
         5f:fb:7f:01:ce:06:cb:22:00:e6:f2:f0:d3:92:89:d8:b8:0e:
         dd:e3:ea:3d:5b:a7:6b:82:b1:e1:e8:b2:89:25:71:a0:0e:88:
         07:8b:d9:f2:af:c9:d8:c6:68:c1:f4:65:67:aa:fd:a4:c7:de:
         b8:21:58:80:46:f4:53:66:95:c5:e5:6e:e5:f1:53:17:a2:5f:
         a5:2a:6b:73:ce:82:56:2f:30:c3:04:a0:6b:38:0b:52:2e:1e:
         93:cb:54:5a:71:17:2d:f4:1f:ae:39:45:53:22:d7:84:28:d6:
         5d:cb:a9:70:08:cc:16:99:1e:b3:30:a4:32:3d:ca:2e:8e:00:
         36:b1:77:b0:45:e4:73:df:35:9b:e1:3c:bf:02:e4:39:3c:ff:
         94:3f:93:b9:5e:82:6f:53:2d:f7:cd:7f:1b:bd:c9:87:96:15:
         4c:27:c8:8c:5d:4f:0b:0e:43:ec:e0:24:14:24:28:77:56:d1:
         59:da:38:b1:29:74:ad:96:a5:37:02:82:89:e8:c6:ac:b1:7a:
         c2:fa:95:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:11:41 2025 by rpki-client