Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/79fb5224-2185-307a-972f-aefdd9878f1b.roa
File:                     79fb5224-2185-307a-972f-aefdd9878f1b.roa (raw, json)
Hash identifier:          +yLp8WxwU5J2PrjP8YyW/+YaO6kjpWtQk6bZ9Kh8QRk=
Subject key identifier:   58:19:15:EB:3B:BC:87:BB:10:D0:65:D0:8D:A6:27:43:D7:88:21:32
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285849912F478207132081125A3680
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/79fb5224-2185-307a-972f-aefdd9878f1b.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     41264
IP address blocks:        104.133.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:47:82:07:13:20:81:12:5a:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=22ccbce1-4e20-41b1-9d88-6a2bb0facdd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e4:0c:0c:c1:cd:a1:c1:3b:d8:99:f0:40:0b:
                    aa:56:5f:c7:0c:ac:30:e1:39:5d:02:44:b1:e8:ed:
                    cd:c0:86:48:6f:db:5d:f4:a5:d8:dd:63:04:e5:60:
                    94:3e:6b:ba:ba:58:3d:ff:82:55:00:10:00:7d:7f:
                    e9:ff:0c:0c:c7:6a:55:e1:16:ef:66:ff:f4:3a:bd:
                    08:0d:67:20:2d:85:67:d5:0f:29:c7:cc:80:a9:a2:
                    2b:df:72:9d:ed:08:2f:d2:f7:1c:74:69:11:b1:1c:
                    c9:4a:3a:70:12:46:f9:66:cd:52:5b:2b:38:46:c5:
                    2d:23:0d:55:8e:29:d2:d1:d6:fe:31:57:32:bb:59:
                    f2:1d:94:dc:84:6b:36:33:d1:55:4d:0c:f0:aa:2e:
                    c8:61:43:7b:2d:89:3f:68:96:9b:a1:b5:65:e5:87:
                    14:9a:56:15:a7:62:b4:32:fb:36:ca:86:e1:2a:7c:
                    d1:c3:4c:f3:21:78:d1:7c:cc:95:54:78:81:5e:79:
                    38:38:24:16:05:03:ff:6f:38:03:de:18:db:41:b8:
                    24:91:84:33:dd:14:a3:a3:19:cf:cb:f2:bd:0f:ff:
                    65:ae:45:65:02:89:e6:db:2b:3b:67:dd:2e:41:b9:
                    55:87:4c:c1:a2:79:de:f9:76:c3:33:6a:c2:28:d1:
                    4e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:19:15:EB:3B:BC:87:BB:10:D0:65:D0:8D:A6:27:43:D7:88:21:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/79fb5224-2185-307a-972f-aefdd9878f1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:a8:bf:ba:d6:2b:05:b6:8b:39:d4:fe:f9:0c:2d:22:27:21:
         e6:7e:9a:ae:e5:38:f9:c4:fa:08:3b:62:20:53:bb:f4:17:b1:
         35:38:d0:c8:6a:c3:90:c0:93:78:50:31:ef:10:a0:5a:14:01:
         7e:f7:85:89:f4:b9:7b:fc:c6:08:41:7f:3a:3d:20:c3:e2:33:
         7d:67:cd:47:44:c1:b3:d1:f2:2b:55:fd:3e:f6:ae:5e:01:c2:
         27:a7:60:8f:04:e7:ac:1a:a5:12:51:75:98:27:ba:a3:2a:35:
         4c:67:bc:f6:15:79:ea:3a:49:bb:08:6e:6c:be:83:cf:95:e0:
         21:1d:dc:7e:86:75:7f:61:64:d7:ff:3f:4e:ae:79:05:99:e6:
         d5:5f:a5:99:8a:80:1d:dc:ce:1d:d8:a3:71:c4:6d:85:ef:27:
         8f:1f:b3:e3:f6:fe:1d:78:62:97:4b:c0:08:b3:f7:e6:d4:e6:
         63:ca:8c:fb:55:9f:82:fe:e2:31:91:7e:1e:03:24:b4:3e:3c:
         1d:f9:7c:da:b6:5a:fd:12:97:fa:1d:aa:bb:a0:66:65:3b:fb:
         12:0d:3c:fe:07:b8:2f:ed:a0:5f:7c:40:9a:b1:a4:3d:48:1c:
         99:44:c4:7f:52:61:54:b7:37:ca:8b:ac:00:9c:a0:f5:45:ca:
         cc:e2:4b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:32:51 2025 by rpki-client