Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4231ea01-66be-33db-8fda-9d4902834d22.roa
File:                     4231ea01-66be-33db-8fda-9d4902834d22.roa (raw, json)
Hash identifier:          NmKrzdTyOUCMGVy7c481O7U4hnWVCFWCDHRrxMvySVs=
Subject key identifier:   9A:11:C2:4C:3A:DD:06:BD:9D:50:DF:92:9A:68:98:48:70:91:EB:17
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849912F336E58198FB5956CCAC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4231ea01-66be-33db-8fda-9d4902834d22.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     7922
IP address blocks:        162.151.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:33:6e:58:19:8f:b5:95:6c:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=00a354dd-e430-441b-b3b8-387ed04b2e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3a:a7:b0:98:73:d5:65:35:06:23:1d:4e:e2:
                    b1:1c:dc:44:56:2a:3e:90:1f:f7:42:b0:2e:38:d4:
                    20:b8:94:99:e9:c4:c8:da:f1:79:9d:f8:8b:79:21:
                    06:6d:48:0c:f6:2d:27:8f:10:46:a5:5d:8f:4c:0a:
                    13:4f:90:68:f2:94:db:a9:b9:a3:06:4d:81:a4:ee:
                    37:fe:33:c0:92:83:23:50:fe:7e:73:25:62:cb:0f:
                    de:47:8b:f7:35:16:8b:ec:80:5a:df:30:d0:4d:95:
                    d7:2d:da:78:49:3b:f3:9b:2f:6e:66:bd:e0:f2:70:
                    9c:5a:af:09:ca:29:46:4f:36:c6:62:f7:30:9b:79:
                    72:a4:60:26:eb:ad:a6:b6:60:df:b6:25:c3:b3:f0:
                    d5:93:6d:a3:3b:4d:98:da:92:be:4b:68:41:5b:7c:
                    a9:95:3e:4e:46:89:33:3b:19:f6:7a:e0:db:c1:5e:
                    38:59:fb:7e:ec:90:97:d8:76:ab:f1:fb:22:21:c8:
                    89:d8:cf:83:5d:13:18:ef:34:e5:e1:24:34:ab:80:
                    43:56:be:49:0e:93:e2:47:3f:96:b7:e2:b7:e6:f6:
                    74:8d:a6:96:a6:8f:d3:58:30:b8:9c:04:6d:99:4c:
                    5d:2f:9c:71:1a:30:f6:93:35:f3:fe:f7:8c:85:44:
                    da:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:11:C2:4C:3A:DD:06:BD:9D:50:DF:92:9A:68:98:48:70:91:EB:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4231ea01-66be-33db-8fda-9d4902834d22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.151.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:b1:22:d4:47:f8:2f:94:b5:a5:1f:64:de:46:67:4c:08:56:
         c6:e1:61:08:0a:22:ab:66:57:d4:8e:ec:3b:5a:a0:1d:0b:81:
         49:1f:72:12:3f:b9:2b:74:ee:b2:36:47:54:b7:80:e0:2a:3f:
         93:1e:6b:ae:1d:3b:73:f3:8a:d4:2c:ee:81:48:65:c3:c3:e5:
         9d:b4:2d:66:41:57:52:e0:25:c5:ed:36:dc:b4:09:e7:f8:90:
         83:13:8d:29:c6:88:7e:b4:8b:00:c8:c2:1b:66:a4:a3:f4:42:
         2d:01:d7:c7:b6:7e:35:e3:97:57:a4:ea:6a:36:41:41:18:22:
         2d:c8:39:7c:df:57:37:f8:2e:60:37:73:56:31:57:9e:d0:e9:
         61:ab:c1:da:f1:cd:17:5a:a2:74:7c:ad:de:55:c4:cb:0c:5f:
         5b:23:ad:3e:26:04:97:f5:06:d1:57:ae:d2:3e:c9:1e:89:7d:
         af:9e:9a:59:bc:4a:18:90:a6:73:c0:c0:98:1f:37:a2:f0:ac:
         02:23:b1:d5:a3:63:80:0d:2d:a6:d0:f4:ce:e5:69:57:79:81:
         95:a4:77:e0:2f:1e:0b:31:f7:ad:6f:a0:8c:db:c8:32:c2:b7:
         c5:b0:39:14:d8:a5:ef:c0:cc:3c:b5:96:72:8f:79:1e:21:90:
         04:bc:7e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:23:39 2025 by rpki-client