Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4546b353-2b93-3374-800e-31fa05d20093.roa
File:                     4546b353-2b93-3374-800e-31fa05d20093.roa (raw, json)
Hash identifier:          0l/14JoyYY8RgDyuvWTNLYWFYoliWv15NEvhP3hK6QQ=
Subject key identifier:   33:5F:85:0D:CA:CA:C7:DB:32:E2:B7:AC:CD:24:12:C8:96:F4:00:C7
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584993FA09529B1950B5D8A631C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4546b353-2b93-3374-800e-31fa05d20093.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     41264
IP address blocks:        104.133.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:fa:09:52:9b:19:50:b5:d8:a6:31:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=c6fdd77e-e0a6-4954-b86f-4a1896745ce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8d:8a:bc:4c:9a:f1:3e:ee:01:6e:2c:71:22:
                    b8:06:c6:0f:a2:53:2e:8e:f2:7a:1b:ad:fa:78:39:
                    12:89:10:b9:89:6b:8b:fd:f3:18:81:74:f0:f0:d7:
                    6a:8f:23:ee:da:12:32:38:c6:21:12:68:a4:6c:30:
                    47:a3:6a:09:50:e8:73:00:ef:29:a2:b3:61:5c:6a:
                    20:8b:ae:4d:35:d2:5e:ef:27:31:7e:7d:b7:47:3b:
                    d9:d9:a0:16:ac:14:6d:59:fd:17:6c:44:a9:32:d8:
                    cd:53:5d:f9:3b:fb:2b:78:bf:cc:bb:89:db:fa:b0:
                    57:16:70:15:7f:db:98:01:ff:5c:01:53:2c:f3:f4:
                    41:bc:ac:6c:d2:fb:0c:ac:c7:b6:c2:b0:ef:24:9f:
                    32:e5:97:9d:50:e1:98:19:7f:6f:d4:f5:06:fc:89:
                    08:cd:62:cf:a1:43:21:47:b1:81:af:94:e5:ff:52:
                    f4:d6:bd:0b:ec:c6:5a:1e:42:14:09:e7:d6:56:39:
                    5d:19:f4:67:bc:e3:f1:39:af:fc:84:74:9e:db:ca:
                    bf:90:0b:62:36:2b:76:5f:09:b2:6a:d9:52:d5:46:
                    d3:8f:af:58:05:eb:d4:2c:eb:fa:03:7a:71:3b:b6:
                    5f:8c:cc:ff:4f:98:77:ae:bc:91:9f:fe:a5:74:1f:
                    cd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5F:85:0D:CA:CA:C7:DB:32:E2:B7:AC:CD:24:12:C8:96:F4:00:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4546b353-2b93-3374-800e-31fa05d20093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:32:ca:17:37:23:99:af:f2:64:ce:4b:9d:52:2b:61:f9:29:
         ab:fd:62:8e:82:19:96:af:b0:4a:13:48:7a:99:90:de:25:30:
         b4:41:1d:e3:bc:15:78:6b:c1:95:09:58:2c:0a:6d:29:d6:41:
         11:e4:6c:22:86:28:e8:09:65:58:e7:d3:00:00:bd:4a:57:bb:
         30:c1:f5:4b:e1:e7:11:f1:0d:a8:0a:76:63:9b:98:3a:fb:58:
         b9:df:39:a1:7c:96:5d:bf:1a:dd:1c:48:d5:0f:bf:05:06:55:
         5d:71:d6:83:c4:ff:9b:2a:56:2f:11:99:e7:4d:bb:e2:14:34:
         53:c4:05:03:cd:b7:19:f3:0f:96:69:23:de:c2:30:72:6d:d3:
         ef:8f:b4:a2:e3:b1:e7:6b:97:b2:02:5f:28:65:26:71:9b:47:
         5b:dc:24:2a:60:e9:9b:e9:69:6f:5b:d6:a7:54:99:1e:d2:ac:
         49:82:dc:d6:c4:07:fe:62:6c:63:62:60:30:8e:7f:67:e2:8e:
         fe:f6:fd:ad:e6:0e:b1:88:20:35:99:bd:00:05:f9:7e:20:fc:
         6f:34:0e:d8:4e:57:33:48:b9:65:63:59:8c:e3:22:20:59:d2:
         c0:0d:86:e3:bf:ce:fa:4b:51:74:06:a7:36:39:71:c3:22:b2:
         d1:a6:91:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:55:20 2025 by rpki-client