Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6d3f34e2-6b13-3987-a0bd-c3965e7e7523.roa
File:                     6d3f34e2-6b13-3987-a0bd-c3965e7e7523.roa (raw, json)
Hash identifier:          1Wc1PL6OQLeov6GN04hiJ1ZdYRCZ9wYMDQLU42CGDQo=
Subject key identifier:   CD:AF:AF:A2:7B:02:DA:36:F5:C8:AF:3C:55:C7:53:F4:66:50:8D:EE
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584993FA07595857DC81BA2466F4
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6d3f34e2-6b13-3987-a0bd-c3965e7e7523.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     15169
IP address blocks:        104.134.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:fa:07:59:58:57:dc:81:ba:24:66:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=c75e59b9-810a-4ce8-b323-0a7752eefb88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:93:72:e7:58:06:0b:98:58:97:db:27:ea:83:
                    b4:d6:b4:4e:fb:89:e9:8c:dc:87:79:a8:b8:83:e0:
                    d2:6f:58:f1:6d:8a:a7:c7:40:41:78:ae:13:32:7c:
                    7a:85:19:8f:26:ba:0a:44:5f:98:3b:73:35:2b:9d:
                    14:84:ed:f4:5d:e8:a3:d2:14:b8:d8:42:74:9d:ac:
                    d5:7e:ae:de:1f:87:25:14:21:88:ff:0f:84:ac:d6:
                    fb:89:1e:5f:1f:1f:51:6a:19:44:52:39:bf:58:d0:
                    fb:26:16:56:ee:fc:b7:9b:05:2e:13:7b:d2:3e:ff:
                    c0:f4:53:ae:7f:0c:c7:36:74:82:10:1a:7e:9b:c5:
                    4f:82:5e:bc:1a:31:73:fa:ec:6f:1b:9d:ad:43:14:
                    b1:9c:9c:24:e4:e7:ee:fa:69:f1:8e:e5:43:e3:e3:
                    77:63:64:10:85:94:cd:77:89:dc:33:2b:12:06:97:
                    71:e0:72:9d:2c:a4:c9:af:7b:dc:db:d3:25:3a:19:
                    96:ca:0d:a6:8b:2a:8a:66:8d:19:1c:53:60:54:55:
                    87:e0:bb:1c:05:1c:e0:2e:26:b2:22:3f:5c:44:39:
                    49:77:3b:c8:7c:b1:aa:19:67:50:2a:42:5e:c7:a9:
                    62:c2:8d:b1:13:37:26:76:3e:31:f3:fb:ec:fd:7c:
                    3f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AF:AF:A2:7B:02:DA:36:F5:C8:AF:3C:55:C7:53:F4:66:50:8D:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6d3f34e2-6b13-3987-a0bd-c3965e7e7523.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:d8:f0:2e:0a:30:06:12:d0:f6:03:60:19:3a:3d:2c:be:e9:
         2c:a4:f1:9e:00:1c:0f:b5:c9:5f:7e:5a:6b:67:40:3a:ee:0a:
         6e:a0:e4:c7:36:11:d6:26:06:03:36:e5:74:c7:f8:35:98:df:
         c0:9a:df:b0:71:6d:ef:d0:5c:29:a5:0d:cb:c1:7f:b2:87:03:
         b6:db:7c:eb:cc:da:14:e0:5a:19:32:8d:c1:38:9a:73:2b:eb:
         95:b9:7c:c2:84:08:22:33:ff:7c:d9:1e:27:8d:14:e9:98:a8:
         59:66:88:59:31:6f:4b:7d:7f:2d:d0:42:9c:50:ed:f2:9b:e1:
         86:33:ec:fa:68:32:68:d0:72:46:2c:97:6b:e0:a8:68:9a:32:
         1e:72:62:ea:af:a4:31:04:16:c4:9b:ff:01:a6:a8:68:f5:13:
         99:9e:5b:ee:c9:25:a1:3a:ab:84:09:ac:99:f4:33:1f:ef:e8:
         9f:20:b6:59:ba:9a:97:93:53:c5:69:38:ee:48:b3:60:d3:14:
         b1:b3:d3:65:df:d2:46:12:3a:57:e1:7e:92:d7:64:89:37:55:
         8d:f5:d2:82:ca:b5:56:bd:ed:86:25:0e:c6:32:5f:32:9d:a5:
         a6:2b:89:b2:6f:d4:df:0c:51:64:7e:da:b9:c6:39:e4:ee:81:
         47:40:2e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:57:08 2025 by rpki-client