Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/854b0a44-2729-3877-9228-b831fa9a2dec.roa
File:                     854b0a44-2729-3877-9228-b831fa9a2dec.roa (raw, json)
Hash identifier:          iu3DToaiBaSmk1XQJFj0Via9ycdJKig40x9nA4vmJqE=
Subject key identifier:   D1:46:B3:CF:2C:B7:9F:34:B5:D1:89:42:32:99:45:8F:28:DB:FF:77
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849AD1A0CD3AD1BD546C9FC7FA0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/854b0a44-2729-3877-9228-b831fa9a2dec.roa
Signing time:             Mon 28 Apr 2025 13:01:00 +0000
ROA not before:           Mon 28 Apr 2025 13:01:00 +0000
ROA not after:            Sun 27 Jul 2025 13:01:00 +0000
asID:                     64267
IP address blocks:        162.244.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ad:1a:0c:d3:ad:1b:d5:46:c9:fc:7f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 28 13:01:00 2025 GMT
            Not After : Jul 27 13:01:00 2025 GMT
        Subject: CN=b5799092-2c43-43bf-b27e-3ec4a60846e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:82:99:37:92:11:fd:13:dc:f0:cf:a7:89:29:
                    5b:af:82:de:85:b4:69:f4:77:67:8a:4d:03:a4:5b:
                    3e:cd:9c:41:51:ac:8e:f9:8a:47:b1:4c:fa:51:8d:
                    a9:46:1c:2b:1d:2f:f9:39:d1:ab:30:93:2d:74:bc:
                    77:9f:52:73:39:86:67:f7:2d:a5:08:65:ae:03:a1:
                    15:cb:1b:80:a1:9a:80:3f:56:44:87:80:c8:e3:d1:
                    e8:24:0f:2b:91:dc:dc:59:e9:2d:06:9b:20:34:ac:
                    71:30:c0:57:09:4e:c1:88:31:8c:3c:09:83:52:e8:
                    85:f7:e8:86:20:7b:57:fa:65:60:2a:a0:33:f2:cc:
                    98:c7:68:24:6a:74:49:cf:aa:6d:8f:6b:0a:b1:2e:
                    8c:cc:34:99:62:6e:99:a8:a2:e9:d5:ab:6c:62:e6:
                    d9:22:5f:bd:de:8d:57:85:d3:15:f3:11:a4:8b:53:
                    2b:54:07:a4:d6:c9:b1:f1:9c:d7:4a:9d:d0:29:a9:
                    da:8b:bc:6e:c4:d1:c4:f3:75:46:e1:76:8c:6a:d8:
                    ac:b1:a3:c9:0c:ba:16:ef:0f:c5:3b:fb:52:74:f0:
                    1c:b6:6d:f3:d5:1c:2e:dd:b8:f7:7b:f1:f0:92:74:
                    ce:6c:95:1e:b3:c8:5b:74:14:bb:17:61:eb:43:b3:
                    92:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:46:B3:CF:2C:B7:9F:34:B5:D1:89:42:32:99:45:8F:28:DB:FF:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/854b0a44-2729-3877-9228-b831fa9a2dec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:aa:1d:c0:eb:8a:4a:ad:c8:71:4b:71:0f:3e:d5:a9:a5:57:
         ee:25:d3:dc:ff:c0:fb:37:e1:4c:85:14:05:fd:1e:c4:2b:d1:
         fe:15:a3:9a:46:de:12:fb:d6:24:aa:7d:1c:97:73:43:e4:e9:
         86:95:7a:86:41:ce:ef:6b:3d:7a:c4:87:d6:c2:09:18:b1:bf:
         f9:48:48:67:cd:0f:de:c7:e5:d6:38:33:17:66:a7:df:76:7a:
         16:1a:81:02:c6:82:c7:36:95:11:c7:bd:4b:69:e3:70:66:e1:
         da:56:7a:2b:eb:4b:65:83:94:c4:1b:48:d1:1d:6b:4c:ee:8a:
         17:27:60:86:9d:19:a7:c3:90:44:52:0e:ca:af:e6:23:91:3d:
         f8:d2:13:0b:3c:df:55:f4:3c:34:18:2a:5e:13:44:23:58:15:
         42:f0:ea:ee:02:38:74:98:e9:bb:6c:5e:fa:de:c4:6b:75:17:
         4f:34:3b:31:9f:cc:0e:b5:44:dd:46:58:89:ff:73:a6:7e:3b:
         ce:ba:d6:24:1d:b3:98:ed:3f:5f:65:1b:4d:f0:b1:15:6e:56:
         14:a1:fb:19:93:13:2c:83:1f:5c:2b:b0:88:34:40:04:3a:1c:
         0f:54:13:4b:8a:4d:b6:e6:39:eb:df:46:60:9a:54:c8:51:50:
         27:47:05:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:49:56 2025 by rpki-client