Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773/397ed46c-7f68-3dcf-a6a3-bf79d552e954.roa
File:                     397ed46c-7f68-3dcf-a6a3-bf79d552e954.roa (raw, json)
Hash identifier:          uyrvFnArlYoAtQJzTtWvUZATSkbGG2IUSHZW13vEbTs=
Subject key identifier:   E6:6F:17:84:96:1A:8B:BF:01:AC:BF:6E:23:C1:DF:7E:F1:2B:B0:9A
Certificate issuer:       /CN=6d105620-7389-4837-b50f-6d9bfdfd3773
Certificate serial:       010D0C9F43285849EBEA53ADE044A818D9C34C40
Authority key identifier: 2B:00:D1:85:F5:BD:F4:8A:21:0C:9E:1D:2E:DA:B7:EE:D9:E1:AA:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773/397ed46c-7f68-3dcf-a6a3-bf79d552e954.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        163.123.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773/6d105620-7389-4837-b50f-6d9bfdfd3773.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773/6d105620-7389-4837-b50f-6d9bfdfd3773.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:53:ad:e0:44:a8:18:d9:c3:4c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d105620-7389-4837-b50f-6d9bfdfd3773
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=3e3a97e9-e60d-4c0c-afe9-ca8696c40020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d6:ae:90:70:16:fa:0d:59:6f:98:dd:08:dc:
                    3a:0c:53:6e:21:81:20:77:99:30:2f:6e:b8:ee:e1:
                    b0:ba:ba:78:73:45:a7:52:ea:61:9d:de:3a:73:b7:
                    96:99:a6:6a:96:d3:ce:93:9f:53:a0:f2:33:f3:68:
                    70:db:42:21:09:af:4e:9e:7a:8c:4f:eb:01:96:52:
                    b6:78:68:a5:ed:34:a7:98:ad:2b:b2:a8:3d:7d:9c:
                    49:51:59:85:06:53:70:15:51:c0:0b:c0:29:29:bb:
                    95:22:0a:a6:00:da:eb:4e:87:82:56:51:37:ec:86:
                    6c:ef:81:a7:76:ba:9e:b0:1f:a4:f5:57:a4:ae:2f:
                    a4:41:b7:82:78:b5:c7:b2:1b:52:26:98:de:d6:93:
                    69:b7:ab:a7:ee:47:b6:99:92:5d:30:7a:6e:a9:95:
                    c7:0d:52:f1:24:b4:60:e2:3e:74:5d:3a:60:c8:fb:
                    e6:f2:8f:d7:52:12:35:40:08:ea:b1:0c:bc:8f:d2:
                    89:f3:f2:c1:70:dc:08:7a:06:59:a1:06:ec:fe:5f:
                    79:36:c4:f3:61:44:a1:1f:1c:bf:66:f8:bf:62:84:
                    6d:c8:8f:6d:a6:b0:9f:46:56:35:ee:c1:20:63:55:
                    54:c4:e7:f0:1b:d2:6d:67:5a:fa:1a:d1:d4:9c:b0:
                    bf:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:6F:17:84:96:1A:8B:BF:01:AC:BF:6E:23:C1:DF:7E:F1:2B:B0:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773/397ed46c-7f68-3dcf-a6a3-bf79d552e954.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773/6d105620-7389-4837-b50f-6d9bfdfd3773.crl

            X509v3 Authority Key Identifier:
                keyid:2B:00:D1:85:F5:BD:F4:8A:21:0C:9E:1D:2E:DA:B7:EE:D9:E1:AA:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:7c:7d:38:bd:22:d3:86:65:d1:81:ac:0d:65:35:23:95:c9:
         e7:a3:e3:a4:3b:2f:da:a3:ed:23:a2:74:25:c7:23:e3:13:a8:
         46:e8:af:d5:74:73:64:e1:46:3b:3d:f3:6c:82:0b:dc:ff:8d:
         8a:f1:4f:37:f0:3c:28:54:fb:c8:15:e7:3f:0c:b1:54:63:35:
         93:83:18:1b:54:81:01:3e:9a:21:db:d4:44:34:4d:66:2c:f3:
         4e:c8:b8:fe:eb:be:30:29:c4:dc:ad:1b:e3:67:0d:a1:94:45:
         a3:a7:00:92:f0:54:2d:0e:91:4c:1b:0b:bd:2d:90:57:16:10:
         e9:db:73:70:d6:29:5b:d1:eb:ed:cf:7c:bc:8c:d5:1e:f9:11:
         12:0f:b4:c3:d4:ee:c8:48:03:a8:a8:bf:1f:b3:6e:72:9c:c9:
         af:1f:56:30:16:e0:b8:9a:32:d6:25:bb:29:1a:6b:24:0c:67:
         75:56:3f:4b:f7:d1:6d:4a:54:42:20:5f:d6:f5:f3:49:04:04:
         6e:31:fb:f3:98:c7:cd:ea:2c:e3:b2:03:d2:f3:30:12:c4:87:
         c2:20:a5:22:aa:29:63:c3:b2:b8:d5:0b:f1:ce:51:a1:ef:47:
         60:37:6e:c8:99:a7:16:3e:89:55:21:b0:41:e3:4d:84:ba:c0:
         cf:f8:17:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:12:44 2025 by rpki-client