Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/03b38318-9228-3d9b-9da4-a755b157ed1f.roa
File:                     03b38318-9228-3d9b-9da4-a755b157ed1f.roa (raw, json)
Hash identifier:          GxeuThYv2tTbLTrPP7Coa+zs7bET7xbF5Yjgxf2bvoE=
Subject key identifier:   3E:61:AE:77:FA:96:1C:05:8D:A1:9E:E4:49:9B:95:BF:BD:67:FF:3C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858499F24D0527324C03255548580
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/03b38318-9228-3d9b-9da4-a755b157ed1f.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     15169
IP address blocks:        104.134.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:d0:52:73:24:c0:32:55:54:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=5fb31b04-7213-4153-9822-aeda010533f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b1:bf:15:e7:5e:4e:c7:92:c8:c8:0c:e4:4f:
                    79:46:6c:19:e5:d6:c6:21:6e:9b:7a:7a:2a:3b:05:
                    ae:5a:76:42:76:c1:72:e1:74:57:fa:7c:f9:f9:87:
                    d2:7c:4f:c8:2d:b7:f9:e1:60:8e:27:9d:79:93:17:
                    8f:6e:b3:33:1e:ef:9d:1e:66:69:ca:1e:6f:18:d1:
                    f2:40:04:17:a7:66:f0:1c:6f:88:0e:43:d4:f2:8a:
                    92:96:67:22:0e:8e:af:64:c0:a9:c3:84:6c:b6:23:
                    c8:2b:38:7f:59:34:3d:c4:b4:35:12:c1:d5:a9:f0:
                    f3:10:4e:31:85:00:59:d1:9b:68:6b:0e:27:8f:a6:
                    a1:55:34:f6:2b:4b:ce:05:e5:02:ed:ea:5c:2b:2b:
                    88:4d:ee:ab:39:ab:e8:f3:11:5d:b3:6f:99:ac:42:
                    d1:0a:04:92:3f:5b:1f:a8:f1:29:eb:86:c9:03:66:
                    d8:b4:c7:85:00:44:2c:c1:be:fc:53:e1:88:d5:43:
                    e5:18:fd:bb:1d:4e:84:78:ed:a5:7e:72:34:41:4e:
                    77:96:67:21:26:6d:e0:88:64:69:95:8a:f3:9a:6f:
                    bb:2f:8a:e1:8d:6f:56:b6:14:8d:80:10:4b:45:70:
                    76:54:3a:71:b3:b3:2b:b6:ad:70:54:e9:cc:ea:29:
                    9a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:61:AE:77:FA:96:1C:05:8D:A1:9E:E4:49:9B:95:BF:BD:67:FF:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/03b38318-9228-3d9b-9da4-a755b157ed1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:c4:d4:c1:ab:1c:8a:b8:4d:58:5a:3e:be:8e:00:d7:1b:fc:
         aa:a5:8c:f3:aa:36:b0:d4:04:4a:99:80:80:fb:22:b8:09:dc:
         c6:6c:bd:5d:fd:ab:aa:f4:c3:a7:d3:4e:c9:31:54:6e:45:b1:
         71:c8:51:8a:26:90:cc:b8:a7:b8:00:57:cc:f6:06:4c:21:5c:
         e3:f5:18:0b:cb:ac:dd:46:75:60:06:c7:bb:02:92:4d:77:51:
         25:6c:ee:c4:b2:e5:88:80:4e:a5:e0:2f:c0:17:0d:66:d6:ba:
         6b:df:fc:09:26:5d:59:83:2f:db:81:f3:c2:c0:0f:10:e8:3e:
         1f:aa:38:ff:fe:a0:a8:f6:24:f5:29:aa:61:41:a0:a5:73:78:
         28:c0:0f:42:07:ef:13:a1:35:88:9f:74:91:56:a0:72:0e:9a:
         fb:ab:34:52:1e:42:e7:f7:10:81:8e:86:ae:9e:94:77:a2:60:
         6f:f7:51:ea:17:b9:5d:1a:28:62:e4:be:cc:51:2e:34:6f:f3:
         8f:08:70:9c:92:21:cf:50:84:71:9e:1a:47:12:25:37:2b:03:
         13:de:9b:fc:cc:46:df:5e:a8:98:2d:d2:23:7e:02:9b:e2:d3:
         37:82:c0:f2:c4:89:80:04:c2:46:aa:b1:c0:11:e7:fb:78:db:
         09:1a:02:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:54:05 2025 by rpki-client