Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/80f7d4d7-487f-3638-a386-c2c90556e0c6.roa
File:                     80f7d4d7-487f-3638-a386-c2c90556e0c6.roa (raw, json)
Hash identifier:          UHY7ZIVOkDLnJYOJxA7WDSZkpmOtuizGoG2u7snC00E=
Subject key identifier:   20:F6:C5:78:CA:63:F5:5D:D2:1F:8E:14:96:08:B7:3A:90:A5:F5:8F
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858499F24D0C18DC9453CB39B5200
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/80f7d4d7-487f-3638-a386-c2c90556e0c6.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     15169
IP address blocks:        104.134.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:d0:c1:8d:c9:45:3c:b3:9b:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=9a3ec984-eb93-4e35-9f4a-9a249f8398ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0d:c3:84:d4:4d:43:5a:a6:d8:ed:8a:8a:1c:
                    6d:9e:c4:b6:09:c9:a7:85:fe:ab:4e:fa:36:28:34:
                    c1:9d:e5:02:b3:c7:26:96:e7:0b:fd:22:a3:65:01:
                    64:31:0f:e3:f7:3a:69:0e:65:cd:03:6e:c0:5f:6a:
                    d4:c8:14:50:9e:1f:29:9e:d3:72:13:f5:ea:e8:12:
                    83:fe:11:aa:08:2a:17:94:ef:2b:6b:05:d9:e8:0d:
                    c0:07:e3:15:40:5c:c9:9e:36:bd:d2:88:ff:2f:60:
                    78:45:43:70:de:fb:39:c4:89:25:ed:d8:fc:35:a3:
                    75:23:d7:94:b0:3e:f5:20:b6:cf:c2:1c:3d:b1:66:
                    86:e5:02:71:19:f7:5f:d3:30:13:f0:44:79:73:cf:
                    cf:3c:45:7a:50:29:2b:f8:8b:05:c2:74:c9:20:02:
                    f9:aa:1d:db:70:87:b0:7f:83:84:35:a8:6d:12:63:
                    5a:54:d4:d6:38:96:4b:10:a6:64:ef:2e:3e:34:b3:
                    1f:b2:e1:54:26:d9:d5:fb:36:e8:d7:72:ca:49:ca:
                    b8:7b:e3:81:f0:e8:89:79:99:ce:de:8c:5e:8e:23:
                    e3:55:61:7e:a1:27:21:3e:7c:9c:43:b7:72:ce:c8:
                    48:dd:30:09:df:4d:05:67:bb:03:ca:b9:fd:46:ee:
                    f9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F6:C5:78:CA:63:F5:5D:D2:1F:8E:14:96:08:B7:3A:90:A5:F5:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/80f7d4d7-487f-3638-a386-c2c90556e0c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:ac:87:02:af:19:ca:3f:02:0f:7b:dd:82:79:e7:81:12:f6:
         cf:90:21:ba:28:88:34:31:1b:b9:30:79:09:ba:3a:20:62:47:
         d3:d4:86:ce:11:60:fa:a2:f3:ff:42:c8:d4:18:a8:0c:3a:ca:
         df:11:3d:68:1c:cd:0c:42:13:ca:f0:30:88:3e:ea:58:91:65:
         34:e8:cb:f9:c1:eb:4d:5d:2a:80:e7:8c:13:37:8b:f9:f5:28:
         a7:f5:ad:32:d7:7e:3e:db:3e:ee:d7:8c:65:43:5b:35:3d:a5:
         2d:c3:6f:ca:77:76:81:dd:e5:c3:aa:48:17:22:f5:9e:aa:be:
         51:9e:37:57:11:e9:4b:18:e5:22:20:b7:6f:5e:fa:fe:af:e4:
         0e:b2:be:46:a9:53:82:4b:16:93:ae:61:e0:e9:63:45:8e:3f:
         d1:8c:b5:c8:34:ca:65:16:be:5b:87:8d:47:8c:05:e8:b7:70:
         44:80:2b:2e:0c:3c:ca:20:f4:fd:ac:e9:f8:53:bc:5c:69:d4:
         86:3a:18:8d:d0:03:98:6a:d4:4d:67:b4:52:ed:07:f4:5f:9c:
         39:d4:f2:34:33:2b:6c:f0:02:d1:13:c0:16:e5:f4:8b:aa:7f:
         89:e3:56:6d:cc:4b:4f:01:27:f8:08:7f:d0:0e:3a:b3:24:8c:
         ff:30:2f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:55:27 2025 by rpki-client