Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/03a3d1da-564d-36a0-bbe4-7f01c51b3c86.roa
File:                     03a3d1da-564d-36a0-bbe4-7f01c51b3c86.roa (raw, json)
Hash identifier:          YsCJVLCJmPYyzj50a9/IWGrzEWux12EwwKq3amAsJ20=
Subject key identifier:   91:DE:EC:E9:1C:FA:AF:DC:F0:BF:C5:19:D2:45:C2:C3:18:4F:94:48
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F43285849E225215046B3FC0E13CC6340
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/03a3d1da-564d-36a0-bbe4-7f01c51b3c86.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     16509
IP address blocks:        104.218.201.0/24 maxlen: 24
                          104.218.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:21:50:46:b3:fc:0e:13:cc:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=f1a7dc7e-5b23-415a-a1a5-cc5cf4d96a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e4:fb:ca:50:c7:08:d5:09:e1:0b:f9:d3:03:
                    5e:1b:39:93:56:8d:06:19:6c:3b:95:03:ef:a1:69:
                    85:0c:71:f1:7b:f4:74:5c:6c:05:ef:f2:42:73:d5:
                    56:67:07:c9:9b:81:3d:ae:d8:80:53:4a:f2:14:ee:
                    c8:46:b0:bd:88:f7:77:48:5f:3e:c6:12:65:c3:8a:
                    59:7a:38:91:6f:7a:9b:ed:60:39:51:e1:64:ba:f3:
                    65:77:e0:e3:6e:5d:ff:1c:40:fd:d0:9f:fc:86:b2:
                    99:06:76:3a:9c:e1:34:1a:55:1a:e4:70:69:a5:98:
                    28:00:00:f3:61:ca:56:56:00:ff:1f:e8:14:0d:34:
                    f4:21:a4:17:a4:9f:20:f6:82:6e:dc:f2:5b:eb:24:
                    28:49:1c:0c:85:8d:88:da:82:d3:2d:fb:f2:06:d0:
                    2f:bc:f8:2a:43:b0:35:82:31:d8:87:0c:e9:55:9c:
                    78:cc:86:8b:e9:83:57:61:59:83:da:73:70:16:17:
                    ef:04:c4:f6:e5:70:2e:ae:b5:ca:b0:76:9f:57:14:
                    e9:6b:12:2c:bc:d7:a9:49:6a:63:7a:f9:49:ac:35:
                    36:c3:7d:ba:ee:71:84:f7:db:19:97:3f:c4:45:a2:
                    ef:d1:87:52:45:f6:03:5d:b4:a1:0b:15:db:9e:59:
                    fe:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DE:EC:E9:1C:FA:AF:DC:F0:BF:C5:19:D2:45:C2:C3:18:4F:94:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/03a3d1da-564d-36a0-bbe4-7f01c51b3c86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.201.0-104.218.202.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:72:a6:53:99:6d:51:e6:97:1f:55:e5:dc:de:10:03:5f:61:
         69:a5:fc:33:a1:d1:21:16:9c:d9:ad:65:e1:04:ea:c8:06:de:
         bd:73:de:69:ed:e7:71:dd:96:40:3e:b9:0b:a5:5e:b1:26:21:
         86:ae:c6:57:f4:79:77:0c:d3:3f:d5:5e:76:21:8d:a0:9e:d7:
         d9:bd:61:ad:12:06:da:32:64:06:e5:f5:aa:fc:05:eb:78:76:
         de:66:26:2f:58:72:ce:ea:94:eb:7d:dc:68:85:54:37:85:4a:
         21:1d:c6:1b:5b:b5:98:5a:eb:d4:c3:d7:9a:66:2c:7a:0e:ac:
         32:c2:14:7e:f7:67:33:cf:6f:4f:2f:16:10:2c:8c:08:ee:32:
         2a:40:96:49:9b:00:65:d4:9c:75:49:a7:c4:6b:42:29:f4:a4:
         2c:85:f2:73:6e:a5:69:3e:85:40:fa:4e:a8:57:13:ab:46:04:
         66:48:1e:55:65:e2:3b:5e:00:27:fa:93:d5:86:f7:d3:ca:f7:
         81:a3:77:2c:27:c3:98:c6:16:49:0c:8e:f2:ab:85:de:6d:91:
         b2:ed:1e:2d:d6:dd:ed:d6:dd:6a:1b:92:bc:5c:09:8c:af:49:
         0f:89:82:de:f5:11:fe:69:31:12:3c:6c:c0:86:ea:a4:22:33:
         0e:0d:aa:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:43:23 2025 by rpki-client