Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/13799451-54fa-34dd-b52f-0a27ba83acb9.roa
File:                     13799451-54fa-34dd-b52f-0a27ba83acb9.roa (raw, json)
Hash identifier:          GhTwBuCFyPe6jiqWy3tLD1ZWSgUMf1tUTLdXn9MDJqQ=
Subject key identifier:   79:60:2F:9D:9D:57:F1:C0:11:59:70:F8:C4:86:99:0B:A3:41:B5:97
Certificate issuer:       /CN=3e65c610-fa49-4d7b-a2e7-69124f1e5c85
Certificate serial:       010D0C9F43285849B9AA044F970170B4AE30E800
Authority key identifier: F1:40:ED:33:FA:99:FA:E6:68:C3:42:37:01:C2:6B:4C:6A:AE:35:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/13799451-54fa-34dd-b52f-0a27ba83acb9.roa
Signing time:             Sat 03 May 2025 01:00:47 +0000
ROA not before:           Sat 03 May 2025 01:00:47 +0000
ROA not after:            Fri 01 Aug 2025 01:00:47 +0000
asID:                     14228
IP address blocks:        162.249.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b9:aa:04:4f:97:01:70:b4:ae:30:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e65c610-fa49-4d7b-a2e7-69124f1e5c85
        Validity
            Not Before: May  3 01:00:47 2025 GMT
            Not After : Aug  1 01:00:47 2025 GMT
        Subject: CN=a1d91804-a373-42a7-9a33-5415e95a4808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:df:ed:02:69:8f:4d:a0:11:39:b6:a8:5e:a5:
                    e3:40:a5:18:89:72:39:f1:1c:3c:ab:47:19:b8:87:
                    a2:ca:37:c7:a9:5e:02:68:c5:35:c4:e3:dc:5a:e9:
                    01:76:6b:b9:bd:95:0a:61:24:58:05:ea:16:2b:65:
                    78:e9:64:1b:17:71:11:66:f4:93:50:7d:e3:42:48:
                    b0:bc:85:03:4c:eb:db:1b:cd:a6:59:94:1e:6f:5e:
                    0d:6f:9d:f9:f4:65:64:52:81:37:3f:9e:43:08:a6:
                    e1:1c:df:ae:e9:6c:03:8e:38:87:af:b7:48:6d:9e:
                    01:0c:9f:05:ad:7b:ca:cb:55:f0:cc:6b:e6:1b:ed:
                    67:5e:70:6b:dd:6c:12:39:aa:fb:1c:32:06:e7:3a:
                    b6:b3:cf:4a:ad:0f:f9:e9:e7:8f:ef:dc:fb:2c:fd:
                    71:34:71:b6:36:50:7b:d4:8c:8b:6f:5b:86:87:f8:
                    41:87:ae:ff:e1:9e:14:28:70:eb:57:64:b4:56:d1:
                    d8:48:59:b0:52:95:5e:8d:95:6f:98:11:85:f4:af:
                    ab:4b:aa:9f:04:41:fa:14:a4:f1:3b:88:f2:34:f0:
                    45:da:94:37:39:9a:c0:be:a4:d5:c8:0d:7e:36:0a:
                    50:62:a7:e9:5e:78:7a:24:d5:14:9d:29:f5:85:b5:
                    cf:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:60:2F:9D:9D:57:F1:C0:11:59:70:F8:C4:86:99:0B:A3:41:B5:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/13799451-54fa-34dd-b52f-0a27ba83acb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.crl

            X509v3 Authority Key Identifier:
                keyid:F1:40:ED:33:FA:99:FA:E6:68:C3:42:37:01:C2:6B:4C:6A:AE:35:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.249.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:de:d0:70:5d:59:18:ae:c5:b1:f0:d7:a8:02:48:ee:b1:59:
         b2:3a:4d:bb:50:27:15:a4:4e:c5:9d:ff:9c:48:24:46:0f:61:
         ca:b0:43:36:18:10:d3:34:27:1a:fb:ce:3c:9b:b4:ae:b2:8d:
         28:29:8f:6b:d0:ca:31:98:e5:4d:51:4a:f8:05:b7:42:a7:a8:
         09:4e:08:ed:88:8e:79:e9:9f:0c:18:ad:a2:43:09:60:42:eb:
         02:ea:23:8b:c7:61:30:29:ed:0e:97:fb:b9:68:07:12:f2:25:
         1c:c6:83:d1:53:56:07:c1:d8:34:0f:38:06:2c:68:60:ad:61:
         c5:be:17:c7:40:46:8b:d6:a9:87:94:51:7c:fa:8f:db:a4:df:
         60:1c:3f:78:ce:3c:1e:7e:dc:89:5a:92:4f:b8:cc:bc:e3:e6:
         15:b0:81:b4:42:df:9f:af:6d:ae:79:29:49:a0:02:a9:b1:a3:
         d8:d2:2d:df:6f:46:8c:bf:36:4a:30:67:91:49:75:2d:cf:bd:
         32:0a:4c:d5:ab:4a:b5:f3:21:16:4a:da:57:9f:8e:5d:f5:c1:
         ae:4f:bd:bc:aa:36:87:84:1f:95:ac:0e:0c:0a:23:f2:5a:fa:
         8f:dd:02:d3:c3:1d:0a:ee:16:36:a5:83:3f:d0:8a:64:dc:5b:
         60:04:fc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 15:46:26 2025 by rpki-client