Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/f34c1328-2177-3d96-8c9b-b0b302f20e6f.roa
File:                     f34c1328-2177-3d96-8c9b-b0b302f20e6f.roa (raw, json)
Hash identifier:          3jZGE/fqDUQUwHhFZA/GDOuQQ26iqGUQQIMcbFy3gMo=
Subject key identifier:   EF:1C:A4:4D:1C:65:D5:CB:13:34:99:25:47:64:D4:AA:F1:B4:B0:14
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F432858498769B010D123B56581E9AD80
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/f34c1328-2177-3d96-8c9b-b0b302f20e6f.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     396982
IP address blocks:        162.214.48.0/21 maxlen: 21
                          162.214.88.0/21 maxlen: 21
                          162.214.104.0/21 maxlen: 21
                          162.214.112.0/21 maxlen: 21
                          162.214.120.0/21 maxlen: 21
                          162.214.144.0/21 maxlen: 21
                          162.214.160.0/21 maxlen: 21
                          162.214.168.0/21 maxlen: 21
                          162.214.184.0/21 maxlen: 21
                          162.214.192.0/21 maxlen: 21
                          162.214.208.0/21 maxlen: 21
                          162.214.224.0/21 maxlen: 21
                          162.240.0.0/20 maxlen: 20
                          162.240.16.0/20 maxlen: 20
                          162.240.32.0/20 maxlen: 20
                          162.240.48.0/20 maxlen: 20
                          162.240.64.0/20 maxlen: 20
                          162.240.208.0/20 maxlen: 20
                          162.241.32.0/21 maxlen: 21
                          162.241.40.0/21 maxlen: 21
                          162.241.48.0/21 maxlen: 21
                          162.241.72.0/21 maxlen: 21
                          162.241.88.0/21 maxlen: 21
                          162.241.96.0/21 maxlen: 21
                          162.241.104.0/21 maxlen: 21
                          162.241.128.0/21 maxlen: 21
                          162.241.176.0/21 maxlen: 21
                          162.241.192.0/23 maxlen: 23
                          162.241.232.0/21 maxlen: 21
                          192.163.192.0/19 maxlen: 19
                          192.163.224.0/19 maxlen: 19
                          198.1.64.0/19 maxlen: 19
                          198.1.96.0/19 maxlen: 19
                          198.57.160.0/19 maxlen: 19
                          198.57.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:b0:10:d1:23:b5:65:81:e9:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=15caf230-32a5-4122-98aa-a1047096386c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bf:1d:86:2f:f0:42:3d:ad:5c:be:e4:85:e6:
                    03:a7:a4:13:85:21:2e:65:5c:76:bc:be:13:ee:a1:
                    96:a4:84:0f:cd:bf:f8:f9:a9:a7:31:6b:7b:5f:39:
                    c9:36:af:c2:d2:82:43:41:c8:ed:cb:9f:60:79:45:
                    d7:49:7a:24:a4:25:c4:12:d8:8c:41:61:3e:84:d5:
                    e3:8c:ad:80:ac:57:d7:9d:ab:90:ae:3f:ad:b6:f5:
                    89:6f:b3:e6:6d:f8:d8:ae:66:ff:b4:2c:46:b7:8d:
                    60:3f:88:45:d1:7c:1c:90:84:73:cb:f9:bf:3c:fc:
                    65:03:0a:e4:6d:18:2f:d9:f2:fe:23:b0:f0:d5:16:
                    61:d7:54:8f:9f:fd:38:1b:9b:71:21:68:4f:c4:d8:
                    8c:38:54:6d:f3:84:6e:03:d4:32:7e:07:20:d6:bd:
                    1f:6e:8c:42:a0:f5:05:19:3e:d9:e1:8d:7f:68:68:
                    86:cd:81:f2:71:6c:c8:db:08:e4:c4:57:dc:d6:ce:
                    36:3a:56:1e:63:89:94:86:66:b2:79:f2:6d:ef:3f:
                    98:0b:cb:f3:03:78:dc:5c:d5:fe:87:1b:92:70:05:
                    98:b0:23:41:e1:8b:be:3b:f6:03:91:e9:47:0b:c5:
                    3c:8a:0c:61:91:1c:21:17:f9:29:2b:cc:68:8c:35:
                    63:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1C:A4:4D:1C:65:D5:CB:13:34:99:25:47:64:D4:AA:F1:B4:B0:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/f34c1328-2177-3d96-8c9b-b0b302f20e6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.214.48.0/21
                  162.214.88.0/21
                  162.214.104.0-162.214.127.255
                  162.214.144.0/21
                  162.214.160.0/20
                  162.214.184.0-162.214.199.255
                  162.214.208.0/21
                  162.214.224.0/21
                  162.240.0.0-162.240.79.255
                  162.240.208.0/20
                  162.241.32.0-162.241.55.255
                  162.241.72.0/21
                  162.241.88.0-162.241.111.255
                  162.241.128.0/21
                  162.241.176.0/21
                  162.241.192.0/23
                  162.241.232.0/21
                  192.163.192.0/18
                  198.1.64.0/18
                  198.57.160.0-198.57.223.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:1e:3c:d8:a1:73:d2:38:e9:35:10:7f:e9:a6:34:a6:51:13:
         96:28:c1:6e:a6:85:bd:f0:3c:8e:d3:f4:f3:f6:01:72:b9:43:
         f1:8e:64:2b:8a:fe:fd:14:83:ae:f6:3f:37:4a:99:13:e4:73:
         9c:d9:62:8a:08:9d:ff:bc:b1:5f:6f:fc:e3:37:83:eb:d5:d6:
         98:22:cb:db:6b:d9:8d:5a:36:f8:4c:aa:7b:e6:2d:d6:99:88:
         ef:5d:c3:83:e6:8e:61:fe:72:56:b4:e5:4d:14:b6:2b:a2:40:
         13:94:b9:66:bc:ac:c7:9d:06:7e:c2:b1:7d:96:26:95:b8:78:
         ac:0a:84:11:14:59:28:fe:6a:41:05:9f:1a:c7:73:47:44:b0:
         b7:9f:5d:6e:5e:6b:af:91:d0:7d:47:bd:39:5c:fc:fd:18:ab:
         fd:76:bd:46:a6:cb:57:32:e5:e6:fd:84:06:ae:db:3c:f8:d3:
         74:d8:6f:2f:57:b1:8d:86:6e:3e:c7:a6:06:2e:c2:73:a3:30:
         ef:c2:57:44:97:ad:0e:a9:97:75:1e:90:d0:0b:8d:f5:8e:8a:
         99:46:33:bc:59:a3:6b:06:f1:1b:6b:08:0f:21:4e:6f:15:f5:
         0d:59:d5:36:f8:eb:fd:fd:b1:67:fb:e0:a5:be:6c:e9:46:80:
         a0:be:9e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:52:43 2025 by rpki-client