Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/92f610da-d744-3192-8187-4236b8d26527.roa
File:                     92f610da-d744-3192-8187-4236b8d26527.roa (raw, json)
Hash identifier:          LCTfZeff9G+HUUgFxzuEL87NwRvAvmO0TSukptugGjM=
Subject key identifier:   1A:C3:82:AD:8F:6C:39:D5:54:A7:F7:22:AC:D9:79:F8:2D:C6:BC:17
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F432858499294A18EFD929A7359666300
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/92f610da-d744-3192-8187-4236b8d26527.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     399130
IP address blocks:        162.218.12.0/22 maxlen: 24
                          198.22.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:a1:8e:fd:92:9a:73:59:66:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=a0fff543-a3cd-4fae-93de-29c24d884e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a4:e5:38:01:1b:75:f3:9b:51:b7:fb:fc:64:
                    ad:87:db:74:72:c6:19:ce:9d:91:db:f0:44:ce:9e:
                    79:7e:bd:c0:49:e2:7c:c3:6e:8f:37:04:c3:3d:78:
                    53:76:d4:9a:32:19:04:0b:5a:cb:69:10:22:02:39:
                    cb:87:5b:9f:26:90:d9:87:59:0e:8d:44:83:8b:08:
                    0b:05:6b:5a:0e:43:e3:da:86:ea:ee:7c:58:e6:99:
                    8b:a4:0d:b6:da:15:19:32:62:3a:61:89:13:e6:7f:
                    29:41:c3:4c:2b:74:20:a6:9d:2e:d1:28:5e:c7:3e:
                    cc:d5:a9:95:8d:ac:3b:06:f4:98:f3:dc:72:a9:1f:
                    4f:c3:8c:37:68:83:a0:76:3d:70:25:1d:a3:e2:ff:
                    1f:64:9b:1b:fd:df:8b:5a:10:48:83:5c:20:83:1f:
                    bf:9e:07:59:a6:80:43:55:47:3c:4c:76:dd:a2:f9:
                    1d:0f:1c:f2:70:a9:58:16:53:c0:ce:7f:e1:17:20:
                    e9:cd:ce:b5:72:9c:46:05:5d:f7:b3:8c:f5:f8:b8:
                    ae:a4:3a:13:43:de:a6:ec:e5:31:43:7f:76:94:3e:
                    1b:03:f8:c5:f2:a2:81:79:ab:0d:6b:87:41:ae:19:
                    c8:5b:ad:d5:bd:4e:e5:1d:8b:4b:7e:21:bc:d3:70:
                    f0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C3:82:AD:8F:6C:39:D5:54:A7:F7:22:AC:D9:79:F8:2D:C6:BC:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/92f610da-d744-3192-8187-4236b8d26527.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.12.0/22
                  198.22.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:7f:c5:ed:98:aa:22:92:23:8e:cb:dd:61:f4:30:85:5c:66:
         f8:22:83:31:e4:68:9a:04:b5:76:a4:bf:c0:7b:30:de:af:5e:
         ba:c5:42:e0:75:f5:d5:e0:50:28:6f:ea:82:be:e6:8d:f0:2e:
         2d:e1:f8:f4:6a:98:92:9b:d2:b6:e6:04:84:e6:ce:fa:97:9f:
         d3:b5:8b:4e:0d:9f:65:2a:72:44:88:e1:37:58:76:51:6c:d3:
         f2:7c:b6:51:ff:b7:23:99:57:a3:ed:24:24:94:f3:df:a3:f5:
         16:17:fc:c7:e8:82:87:15:dd:c5:7d:0c:39:bf:5a:fb:c0:5e:
         bc:af:26:7f:f9:33:f9:0b:3c:cd:79:b5:46:a9:46:ad:a3:d0:
         d7:61:e5:e0:21:0d:86:49:5d:fb:0e:85:60:84:72:93:52:c6:
         19:87:e6:5b:01:40:e6:a7:fa:68:6b:87:b5:35:99:cc:7c:39:
         ee:4f:41:04:65:e8:c4:27:68:48:8a:7e:dd:f0:8b:12:ac:26:
         f8:d3:24:1a:8b:b7:1e:eb:10:a9:f1:f5:69:d6:1b:7a:a8:74:
         19:02:e7:b6:e2:2b:5b:24:ed:de:ac:d1:db:68:64:3f:9b:18:
         0a:82:fa:7c:be:67:01:c2:8e:20:46:d4:62:84:3f:dc:e7:61:
         a0:fa:48:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 06:04:55 2025 by rpki-client