Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d62ad987-bafa-37f4-9d39-ebd8d2f0e2d8.roa
File:                     d62ad987-bafa-37f4-9d39-ebd8d2f0e2d8.roa (raw, json)
Hash identifier:          AQMismknF66Qi2gHuHYX2p00DWfUIwZ16DUfYuf14E4=
Subject key identifier:   36:E7:1B:E1:9A:7F:63:1C:37:0C:C2:3E:7B:55:6C:31:21:42:17:40
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849912F32C0E623210DB282D180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d62ad987-bafa-37f4-9d39-ebd8d2f0e2d8.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     7922
IP address blocks:        162.151.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:32:c0:e6:23:21:0d:b2:82:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=b1e32433-8234-4016-ba85-5dbe60a2ed90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:35:79:d9:2f:11:6c:75:70:30:25:47:03:98:
                    d1:0c:99:2b:43:a5:b3:20:46:c7:4d:d5:f5:d2:8e:
                    a9:50:23:ff:c9:a9:77:87:d2:3d:ee:bf:04:59:56:
                    ce:68:60:91:f0:4c:a7:ed:46:2d:d5:26:c3:8c:f1:
                    1f:b8:e3:62:c7:75:d8:b7:8f:95:f1:19:d9:3e:b8:
                    a8:5b:47:64:21:86:68:93:62:e3:1e:a7:75:6c:4b:
                    f0:aa:4b:8a:dd:19:ab:fb:6c:04:4e:bd:9e:44:ea:
                    6f:b9:fb:3c:21:9d:d7:ef:d7:5d:8a:6b:2b:f7:f5:
                    6b:07:d0:b4:81:1d:cc:3f:2c:32:d8:1e:1b:ce:04:
                    11:d7:8e:90:65:39:f6:c2:6f:6d:fa:83:af:f5:06:
                    1c:6c:2b:44:5b:0f:b6:06:70:d0:05:70:09:c6:79:
                    07:8c:f5:72:15:ba:bd:63:50:ce:8f:76:19:36:af:
                    91:65:b9:29:0c:94:43:61:87:7c:86:a2:89:95:a2:
                    e3:d9:7e:2a:59:78:23:ad:20:dc:64:7f:32:e9:51:
                    49:7d:94:ab:e9:c8:89:ac:99:83:52:ea:dc:65:66:
                    eb:4d:bc:85:95:b5:d3:9f:04:cd:1f:f4:9a:38:fe:
                    e0:21:b3:1f:df:f3:60:ac:9c:8d:e0:db:a4:63:01:
                    50:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E7:1B:E1:9A:7F:63:1C:37:0C:C2:3E:7B:55:6C:31:21:42:17:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d62ad987-bafa-37f4-9d39-ebd8d2f0e2d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.151.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:29:ca:80:ad:a2:89:68:c9:de:9e:b0:f8:d8:66:d1:35:93:
         f4:d0:1a:23:f0:cf:f2:d7:23:96:29:ee:c2:08:c3:39:cc:50:
         26:74:66:a2:2e:69:9b:a8:d1:ab:ab:97:46:0d:6c:26:73:8e:
         09:23:39:bd:5d:36:72:3b:24:9e:3c:80:73:f9:8b:29:6d:d0:
         2e:03:fd:d6:47:d9:84:13:16:40:93:11:32:66:1d:a0:73:3e:
         4f:7a:d0:5d:99:76:5b:b4:79:bc:ac:b8:a2:76:bd:ec:7f:8f:
         71:76:9d:af:4c:e5:a8:77:79:0f:69:b7:60:40:0f:33:2d:8a:
         e1:dd:2d:39:0d:8b:79:9a:17:75:d3:31:65:47:ca:db:5c:59:
         bc:db:27:e8:f0:54:0b:fc:f2:6f:c7:fa:4a:40:5d:c3:13:85:
         78:a1:91:ad:04:fb:56:11:75:87:3e:73:fb:3f:f0:cb:05:d9:
         94:25:12:04:0c:38:e1:49:90:49:42:a0:06:e9:70:96:23:1a:
         96:b0:07:d6:63:7f:57:1e:32:48:32:20:af:19:7b:6e:f6:5b:
         4a:6e:6b:14:c6:40:80:48:7d:02:47:7c:52:ac:74:e1:eb:31:
         e6:d5:90:a7:0a:f6:e5:11:c3:d7:a4:e7:72:8d:fe:bd:0d:36:
         de:29:eb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:48:51 2025 by rpki-client