Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/37aa74d1-cc51-3786-9d2a-6aa300c7cf51.roa
File:                     37aa74d1-cc51-3786-9d2a-6aa300c7cf51.roa (raw, json)
Hash identifier:          h10zkW9dyf5iLrbHvfYl5NpRHeHiDZyfHtxUnl8BDrg=
Subject key identifier:   7A:50:D7:FC:08:AA:FC:BB:0F:11:35:15:AB:8C:0E:52:73:C9:92:8F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849914E4920B73CB78F13B6FE00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/37aa74d1-cc51-3786-9d2a-6aa300c7cf51.roa
Signing time:             Fri 18 Apr 2025 14:03:46 +0000
ROA not before:           Fri 18 Apr 2025 14:03:46 +0000
ROA not after:            Thu 17 Jul 2025 14:03:46 +0000
asID:                     13335
IP address blocks:        104.29.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:4e:49:20:b7:3c:b7:8f:13:b6:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr 18 14:03:46 2025 GMT
            Not After : Jul 17 14:03:46 2025 GMT
        Subject: CN=6f463a45-4464-4b5e-b082-4152df2a3282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:63:91:99:0f:57:02:25:e1:df:f0:40:d3:2a:
                    c0:a0:c3:53:93:03:dc:b8:12:30:b2:fe:a0:73:00:
                    38:46:96:9c:e0:ce:8a:6b:18:86:2c:7e:81:82:03:
                    db:6f:47:e1:12:76:13:df:9b:1f:c2:a3:e1:45:e6:
                    8e:35:45:fe:82:03:79:20:41:6b:a2:58:9e:7d:2e:
                    11:77:66:64:a1:7e:f3:b6:f9:c5:f4:3a:ef:00:3b:
                    39:c2:24:36:02:1e:a4:a1:80:4e:9a:7d:f0:74:fe:
                    1b:1f:c0:8c:64:72:27:a8:f9:44:64:9d:86:eb:3b:
                    b7:f4:e1:7b:5a:ed:a3:ae:36:4c:2b:f9:9d:9a:fa:
                    75:b5:d9:c8:76:04:32:6c:dc:3f:50:7b:14:68:52:
                    0a:81:14:ba:a2:e0:67:61:98:94:76:c1:bc:eb:4c:
                    ed:4f:d6:da:77:e9:54:46:49:c0:92:0e:1b:e0:63:
                    20:82:8e:a9:41:52:26:d4:be:47:60:ae:c3:b5:90:
                    b7:8b:58:c5:70:52:16:c0:e7:ba:36:ce:2d:c2:43:
                    80:a0:9f:5b:e0:10:7a:5e:75:6d:d1:97:f8:e4:20:
                    41:6c:ce:a6:14:3f:b8:d6:f4:44:8a:75:8c:ff:3d:
                    fa:26:d9:9f:5e:42:71:eb:59:8b:24:06:e6:6c:28:
                    3a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:50:D7:FC:08:AA:FC:BB:0F:11:35:15:AB:8C:0E:52:73:C9:92:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/37aa74d1-cc51-3786-9d2a-6aa300c7cf51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:95:58:fc:75:e7:87:b9:d0:01:7c:a8:36:5b:15:9b:a8:c3:
         75:ea:34:98:b0:14:92:e2:65:f7:73:74:22:ac:80:c3:7b:81:
         2d:1e:3e:92:d1:b0:fc:4c:29:79:3d:ce:33:ff:24:71:0d:3e:
         fa:df:a0:d9:73:0d:d0:13:cb:f1:58:78:27:c6:ca:92:63:75:
         ac:66:79:70:43:08:c9:3d:4c:62:89:ad:96:b6:d4:bd:1e:df:
         d4:0d:b5:33:35:f5:45:2d:40:1d:cc:0b:ce:a4:a3:c5:3e:a9:
         a0:28:83:f1:43:93:8b:be:cd:77:7e:6c:32:a7:95:c8:2d:c3:
         95:00:ae:18:28:e3:d9:ac:e6:fb:63:90:b5:42:80:39:b5:1a:
         41:cc:ba:6b:23:21:f5:85:67:08:2d:78:ca:9a:08:20:50:19:
         36:47:61:33:d6:40:65:ba:2e:03:61:d3:58:38:73:94:05:17:
         98:b6:7a:de:3e:84:0a:72:02:69:20:02:15:1d:19:5f:80:f2:
         07:c4:e0:66:f3:3f:6e:fb:c5:34:31:c1:79:d6:7d:d5:19:b0:
         0a:c4:90:d1:4d:0c:1f:e6:f8:b7:00:81:36:f1:0c:46:bb:c7:
         03:ad:11:b6:01:c7:bf:d6:4b:de:3f:ed:9b:9d:74:44:9a:cc:
         dc:00:9c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:37:19 2025 by rpki-client