Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/70abb78e-0ea4-389d-addf-e58129c2bff6.roa
File:                     70abb78e-0ea4-389d-addf-e58129c2bff6.roa (raw, json)
Hash identifier:          Ef1mup6SBqcF2TxCVgIlY+kcyv7P2RbVNFGwY9rFWe4=
Subject key identifier:   65:D2:41:52:9D:40:7E:5A:08:13:CA:BB:57:67:4A:34:2F:02:1A:BE
Certificate issuer:       /CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113
Certificate serial:       010D0C9F43285849D42FB5607784EB8CEC4612A0
Authority key identifier: A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/70abb78e-0ea4-389d-addf-e58129c2bff6.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     22504
IP address blocks:        162.118.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:b5:60:77:84:eb:8c:ec:46:12:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=9fa46e01-b29a-4743-9302-b8905eb653d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c0:6c:d6:de:00:3a:b9:44:ee:17:f5:c2:1c:
                    6b:55:6c:14:7f:5e:92:50:cb:87:4a:51:22:8f:f9:
                    e1:36:2c:27:5e:e6:38:7f:2a:59:27:0e:3a:84:76:
                    79:21:8c:d1:34:ac:ef:4b:0d:99:07:41:53:8e:97:
                    98:cd:ba:84:d8:ca:d4:89:b5:b8:fb:b8:d3:5a:35:
                    db:00:14:31:3f:27:b7:62:6c:06:13:ad:62:f5:d0:
                    e4:98:ff:35:b0:20:f3:d1:6c:7e:ba:35:6e:c2:b1:
                    66:5d:7a:1a:df:81:ce:e3:7a:0e:f3:4f:a1:68:83:
                    7d:99:2d:fd:9c:ef:a4:ef:53:a2:50:fe:8a:f0:25:
                    e7:97:fb:61:99:01:da:9d:38:cf:4f:e6:7d:56:c2:
                    8c:e1:83:bf:0f:99:69:35:9c:11:8f:a6:9e:fd:f6:
                    a0:f9:56:0c:ce:83:bb:0d:14:fe:e9:b2:61:8e:a0:
                    62:3a:8c:01:3c:45:4c:a4:50:56:a1:05:48:2c:06:
                    69:d3:0f:1a:35:06:b6:02:dc:89:fb:1d:6c:78:17:
                    2e:82:a6:30:8e:e2:1a:f2:1c:bf:dd:06:18:d6:c8:
                    f8:c8:d6:97:e0:09:8a:7f:e3:0a:0b:58:d5:ff:79:
                    30:02:20:08:5d:e4:d1:c5:68:0d:cf:e2:4c:f6:62:
                    8e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D2:41:52:9D:40:7E:5A:08:13:CA:BB:57:67:4A:34:2F:02:1A:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/70abb78e-0ea4-389d-addf-e58129c2bff6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl

            X509v3 Authority Key Identifier:
                keyid:A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.118.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:d7:fe:cc:62:8b:fd:d6:91:db:22:31:06:3c:1c:39:77:41:
         0f:69:39:cf:0e:c4:1b:62:48:cd:d2:a7:98:e2:4e:42:c7:87:
         13:9b:62:62:e5:2e:7b:93:5d:1f:af:cb:b8:9c:91:80:51:11:
         a6:d1:5a:b3:b7:3d:c7:01:1f:ca:c7:45:3d:09:f9:2b:f8:0a:
         f9:fb:f2:86:f6:65:ce:3a:9f:ff:ec:7d:11:f5:92:9c:c0:81:
         88:57:57:1d:a0:e5:9f:f0:94:3a:17:70:17:88:e1:d3:d7:f3:
         2b:d8:73:8c:b8:ba:a8:8b:91:98:07:f1:5f:65:8d:52:00:39:
         17:0f:e3:16:8b:1d:2f:e0:77:2d:96:48:7b:2b:7c:7a:20:e6:
         91:7e:13:aa:ab:f8:d8:00:49:d3:cd:ba:87:97:ee:fe:06:29:
         f8:18:50:5f:4d:4c:85:27:ce:f8:74:c2:22:5b:74:de:d3:39:
         da:0d:89:fe:69:36:63:39:e5:4d:3c:6d:bb:13:c6:e8:b6:30:
         aa:1a:56:0f:38:5c:10:49:ce:4e:eb:dc:39:0f:21:12:f1:d2:
         e1:3e:21:88:c1:f0:e1:cf:43:d3:4f:b6:14:b3:e0:fc:fb:e1:
         19:8b:f7:19:50:6f:d3:6e:d3:09:4b:43:64:43:c6:7f:e1:50:
         e6:13:44:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:50:53 2025 by rpki-client