Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/fe913e69-ea35-3e6a-9e69-ba1710bbef02.roa
File:                     fe913e69-ea35-3e6a-9e69-ba1710bbef02.roa (raw, json)
Hash identifier:          3bV+naTNpfkpyoRSMH7fteh9R8WuVFZaSKCkYoKr5Kc=
Subject key identifier:   51:96:34:43:14:A2:C5:1E:93:82:B7:C7:0B:D5:7B:80:30:BA:49:76
Certificate issuer:       /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
Certificate serial:       010D0C9F4328584A2D858B4DC866A3F05FDBD200
Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/fe913e69-ea35-3e6a-9e69-ba1710bbef02.roa
Signing time:             Fri 13 Jun 2025 13:01:04 +0000
ROA not before:           Fri 13 Jun 2025 13:01:04 +0000
ROA not after:            Thu 11 Sep 2025 13:01:04 +0000
asID:                     23470
IP address blocks:        104.194.8.0/24 maxlen: 24
                          104.194.9.0/24 maxlen: 24
                          104.194.10.0/24 maxlen: 24
                          104.194.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2d:85:8b:4d:c8:66:a3:f0:5f:db:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
        Validity
            Not Before: Jun 13 13:01:04 2025 GMT
            Not After : Sep 11 13:01:04 2025 GMT
        Subject: CN=2c0132e0-2994-4a2a-838a-83ead4bc5970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4d:f0:70:46:0d:0f:1c:08:e0:df:ca:99:b2:
                    69:5b:7b:98:a2:e7:ed:eb:26:2f:7d:e6:94:1d:d4:
                    ca:04:30:c3:fd:2d:80:b6:64:57:ac:f3:2f:53:1e:
                    a2:d5:35:39:b1:95:1b:ee:02:ba:52:13:24:fa:7f:
                    a1:4f:49:20:2d:ff:c6:86:04:b6:27:e7:c0:4d:54:
                    ed:14:63:f0:d9:6e:0f:86:0d:d9:be:a0:ef:9c:78:
                    f1:40:02:9d:92:f3:b3:9e:9a:99:35:e1:20:8e:04:
                    42:92:32:ab:06:07:0c:de:d2:ed:d2:c0:a5:8f:5e:
                    08:d7:ca:61:34:d1:2c:19:32:96:2b:74:8b:b4:eb:
                    0d:c2:88:99:a5:6c:82:b2:5b:92:68:ee:cf:1b:e8:
                    86:b2:ba:66:06:46:c5:2f:0a:76:8d:43:e9:56:c0:
                    f6:b6:61:ca:bc:4a:02:3f:6c:71:2d:b2:85:2b:f2:
                    11:05:17:7b:4a:97:d9:94:8f:a0:e3:f8:29:2b:36:
                    30:4a:f0:0b:70:3c:af:b7:a2:1b:6b:10:28:98:c7:
                    e2:67:d0:b6:28:8a:dc:fa:56:2e:57:4b:86:b1:6f:
                    56:e5:1a:b2:c3:db:1e:5e:92:ab:99:51:04:3f:51:
                    73:46:6c:00:a0:af:01:bb:3f:67:92:83:02:1d:c1:
                    34:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:96:34:43:14:A2:C5:1E:93:82:B7:C7:0B:D5:7B:80:30:BA:49:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/fe913e69-ea35-3e6a-9e69-ba1710bbef02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl

            X509v3 Authority Key Identifier:
                keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.194.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:04:52:e0:f3:30:9f:36:4d:27:09:b1:0c:6f:c1:87:c9:35:
         d2:0a:dc:fc:a7:77:bf:43:37:ec:fd:fd:2a:d3:ad:12:20:47:
         0c:9e:05:b6:d4:84:16:62:d3:2d:49:5f:9a:05:dc:cf:f1:dd:
         74:e4:bc:91:53:f0:27:12:5b:47:9f:2a:dd:9d:dc:04:f5:1d:
         ef:17:e2:5e:84:29:f4:df:d7:eb:e7:7d:a0:8b:94:a1:4c:e0:
         cd:8e:f3:19:a9:81:4e:cf:13:99:f3:99:65:1e:22:e1:82:1f:
         5b:a3:7f:4b:57:e4:a2:57:dd:a5:6f:2f:1e:f8:35:37:a9:dd:
         51:22:32:34:d3:78:e5:64:1e:28:b4:f0:bd:a5:f4:be:68:93:
         5e:50:f9:a4:b4:c5:45:4b:34:33:fc:b0:14:4e:b1:56:2b:f0:
         8b:6e:a9:53:fb:9e:fd:5c:6b:28:6a:a0:3d:d5:0d:96:5b:ea:
         6c:4c:bc:06:e6:d2:34:b7:70:48:ff:56:d1:0c:cd:ac:dd:a2:
         bd:88:10:18:60:ef:47:9e:a2:de:08:bf:aa:e5:74:8a:04:96:
         c5:90:bd:6e:13:94:24:a0:bd:b3:95:3f:c3:e4:b8:ee:c3:80:
         e8:3a:0c:4a:71:65:b4:51:87:ad:94:95:66:41:3f:64:93:ce:
         ad:d0:d3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:01:50 2025 by rpki-client