Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3374e6da-cdd4-3d28-b856-cac58f1f5736.roa
File:                     3374e6da-cdd4-3d28-b856-cac58f1f5736.roa (raw, json)
Hash identifier:          4WSnKMXPgAbbN4Wtmku8t7I35WagTzkIlXQJSIqzRsc=
Subject key identifier:   1E:64:21:44:B1:03:E4:12:8B:12:3E:A2:AD:F7:FC:FE:5F:71:55:8B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA65F6DC37A0A4C04CC76C2
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3374e6da-cdd4-3d28-b856-cac58f1f5736.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        162.148.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:5f:6d:c3:7a:0a:4c:04:cc:76:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=ed382756-39e6-413a-b3b8-74957bf7a31f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:70:46:bf:87:4c:a7:72:22:57:44:f2:2d:95:
                    48:8c:cc:0a:9d:5b:50:cd:6d:fe:1d:52:ec:0c:3c:
                    a0:f4:ae:3f:c8:58:31:a5:3e:29:92:b4:d2:16:a1:
                    26:02:7c:37:33:f1:49:be:62:ef:4b:c8:88:58:94:
                    5f:cb:1f:c1:dd:47:83:d6:aa:41:f5:fb:18:a3:0a:
                    ff:d7:12:2a:1f:d0:b1:97:fd:b4:d6:bf:2b:b4:91:
                    bf:d5:e7:60:fd:a3:b9:93:84:77:26:1e:af:8c:2e:
                    36:d4:9f:18:bd:50:af:2a:3d:7c:3f:53:d7:48:d5:
                    3f:f0:21:65:20:8a:0b:d6:38:73:eb:70:b2:00:7d:
                    23:90:57:28:35:8f:b6:36:2b:53:e9:ae:79:8b:12:
                    50:64:bb:bb:bd:9e:98:ad:87:a6:53:36:8d:22:99:
                    7a:1a:2a:cd:41:6e:fe:17:9a:c6:ca:9c:4a:07:02:
                    92:ba:60:65:ad:9d:ff:89:73:f5:c0:fd:9e:65:c7:
                    d3:94:fd:b7:08:23:b6:41:1b:39:ba:a8:38:09:ba:
                    c0:86:e9:98:d3:c6:a0:43:4c:b9:6d:92:7c:4a:65:
                    54:d3:da:df:e9:46:1e:d5:12:bd:76:aa:1f:c2:0e:
                    e5:65:49:1c:63:fc:55:d3:31:d9:52:48:6e:13:ea:
                    98:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:64:21:44:B1:03:E4:12:8B:12:3E:A2:AD:F7:FC:FE:5F:71:55:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3374e6da-cdd4-3d28-b856-cac58f1f5736.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.148.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:58:dd:eb:99:52:8f:a1:3b:17:11:6a:73:fa:7e:25:77:94:
         61:4f:0d:84:ee:e0:72:0e:fd:4a:e1:2c:aa:40:7a:5e:7b:ee:
         f8:94:58:15:4e:f3:2b:f2:4d:b5:b6:b4:b4:42:a4:14:ef:ae:
         fb:b6:1d:ea:ec:7c:7e:c1:39:56:86:51:d5:40:5e:95:fd:06:
         ee:5a:b2:32:1e:03:bc:16:0d:e1:61:94:bb:60:a0:d9:7a:10:
         18:a4:36:a3:b4:04:56:4d:65:50:cd:1f:b6:97:03:23:fd:9c:
         a4:d7:9b:c7:04:30:9d:33:d5:40:d9:18:93:98:c3:84:4a:61:
         74:b6:e6:52:69:50:9a:ef:ac:0b:c8:1c:0e:72:a7:3c:a5:5c:
         b9:14:22:35:44:49:38:ba:b7:25:00:49:f0:07:f3:7d:da:e2:
         eb:59:b0:46:12:38:7b:89:c7:e7:ce:22:a8:c6:97:50:3c:f9:
         92:ca:07:12:fb:08:65:22:5a:9c:90:76:29:57:79:70:e1:4f:
         8d:d1:4e:c6:d0:2a:29:53:09:b8:2b:be:10:89:78:b2:8f:56:
         74:65:3a:e0:db:20:df:30:bf:11:14:95:69:6f:5d:eb:50:e2:
         68:31:ae:6d:ad:c1:46:c8:d4:88:9a:e4:66:47:2f:59:f3:5c:
         2b:4e:c4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:12:35 2025 by rpki-client