Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/701bbccb-a0e2-33f8-a2f8-105ae7199914.roa
File:                     701bbccb-a0e2-33f8-a2f8-105ae7199914.roa (raw, json)
Hash identifier:          TGr/SwCjbf9bGvMEnsFPvH7ikBVZPgWfbh/xidL53xs=
Subject key identifier:   ED:EF:8A:1A:1F:6F:62:58:7C:B7:66:87:12:88:CA:B3:FD:DD:9E:C1
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584993F9F133838E20E202D0FA60
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/701bbccb-a0e2-33f8-a2f8-105ae7199914.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     15169
IP address blocks:        104.134.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:f1:33:83:8e:20:e2:02:d0:fa:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=229e941f-f2cc-456a-8f5c-520bcb175cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:10:52:ce:4e:2b:24:20:ad:36:43:43:e4:bb:
                    da:4e:cf:fe:fa:f4:25:72:c9:01:65:6e:b9:4e:75:
                    de:f6:d4:fd:3a:52:b0:88:4b:7e:1d:16:ca:52:58:
                    82:94:74:22:b8:6e:95:6a:ae:e0:9a:72:73:f7:14:
                    c4:aa:ad:c3:3c:52:2e:90:7b:a3:b5:dc:e9:63:cb:
                    23:cb:63:3c:12:db:0e:52:0a:0b:d6:05:d4:b5:b1:
                    01:b0:cb:32:c6:03:36:a5:58:64:41:99:ef:7c:16:
                    86:c1:a2:91:27:80:56:c3:9e:58:32:9d:d8:ee:9f:
                    c5:45:19:9d:e5:88:ca:9d:33:2f:0e:bb:68:21:d3:
                    89:a1:77:ea:7c:de:b1:7b:55:b0:be:30:83:b8:72:
                    47:45:f0:45:d1:b6:a9:ee:9f:af:48:7b:21:4e:09:
                    3f:8f:21:db:bb:9d:a3:05:37:26:b1:50:e6:6f:1d:
                    9a:09:9a:2b:0b:ec:fa:00:c9:b3:e2:e3:12:dc:99:
                    e0:74:6f:c4:c0:62:e2:43:3f:d9:96:c9:65:5d:df:
                    5a:53:4e:4b:e0:f0:07:ad:45:07:d0:5e:b0:71:de:
                    76:02:1a:f4:c6:2d:1e:46:65:28:6b:c6:60:74:e9:
                    4e:70:94:02:54:b7:42:84:8e:56:e7:1a:18:58:74:
                    1c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EF:8A:1A:1F:6F:62:58:7C:B7:66:87:12:88:CA:B3:FD:DD:9E:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/701bbccb-a0e2-33f8-a2f8-105ae7199914.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:4b:d3:f8:bd:2a:15:4a:11:b7:74:6b:ed:0f:7b:49:f0:58:
         d3:c6:fd:45:e7:f7:5b:52:ba:d1:b2:32:1a:68:02:4d:3f:8d:
         5d:68:b9:53:ad:7b:4e:10:cd:f3:90:7c:21:d6:8c:48:2b:1b:
         8d:32:60:3c:0b:df:c9:47:35:be:c4:95:7a:8e:e2:2f:de:25:
         6e:c8:21:91:99:71:38:12:dc:e8:f4:90:2a:6c:6f:99:71:f6:
         44:0c:c3:cb:1c:b7:12:ce:c9:da:0b:4d:cc:a2:74:1f:9d:46:
         eb:78:c6:9c:f1:c4:f5:14:a9:c8:63:68:17:68:2a:70:76:b3:
         5f:c8:c8:26:c7:cc:d4:90:69:ab:c3:3e:ab:6b:ec:c2:7f:38:
         cf:8d:c4:0b:e0:6c:48:fd:7a:75:97:26:4f:13:12:fa:85:e9:
         ff:47:22:d1:41:62:f4:c3:32:2f:c3:f7:8f:07:b5:0e:7e:1e:
         60:72:53:ab:46:b1:3f:84:9a:37:43:12:fe:9c:b0:76:24:fc:
         1e:95:34:af:47:ba:f2:3e:b6:a9:e6:68:20:66:13:19:18:ac:
         cb:eb:a7:c4:12:78:58:e1:68:b5:aa:3b:90:6a:f5:d6:f3:83:
         90:1e:d8:35:82:d9:6e:f0:e1:8f:88:4e:00:cd:1e:7f:e6:2f:
         d8:7e:0e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:55:39 2025 by rpki-client