Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/89cbf199-d065-3e52-85c6-721088fc29c4.roa
File:                     89cbf199-d065-3e52-85c6-721088fc29c4.roa (raw, json)
Hash identifier:          KHf5UByQB2DQCVw9F6ytCs8p7sR5POiRRf8UYeYMzmA=
Subject key identifier:   1A:4F:7C:EF:33:66:8E:F5:1D:67:C1:A9:59:45:B3:97:5F:46:9B:8C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285849912F461A092D7F24AD11F1A0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/89cbf199-d065-3e52-85c6-721088fc29c4.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     41264
IP address blocks:        104.132.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:46:1a:09:2d:7f:24:ad:11:f1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=1fb2cc68-b9c8-4d03-a32e-79a716a0ab1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1c:c7:e8:4e:f7:ac:30:48:92:0c:40:d4:52:
                    f0:1c:4a:59:32:bc:03:17:ca:0b:fc:fa:f0:2c:ce:
                    a7:17:98:4d:9d:7a:30:92:cb:b3:2d:15:79:08:b1:
                    90:55:10:27:f9:b7:ef:ee:c5:6d:c0:ec:77:d7:d0:
                    9d:ed:29:b8:95:d6:77:b2:fb:68:41:ff:33:0b:96:
                    0c:86:60:86:20:ed:25:c8:f4:ff:5c:10:d1:cb:83:
                    f3:06:45:95:0c:22:9c:a8:e0:66:4e:b2:15:25:b4:
                    fc:18:6c:29:c1:d4:56:e8:17:90:50:4a:92:cd:2e:
                    f8:06:48:e4:6f:22:e1:9d:9e:2e:68:9f:d6:16:8d:
                    a0:b2:88:fd:27:1f:51:cf:b4:2c:02:23:96:16:ec:
                    01:26:d9:4e:4f:d9:e6:96:90:40:1c:4c:19:f1:56:
                    65:fe:80:b4:8e:b1:75:0c:da:f0:d1:b7:bb:17:0d:
                    33:63:b1:77:ee:46:a0:a3:40:a7:c6:2e:28:1b:7d:
                    1c:18:e9:d2:05:e4:54:c7:50:e8:91:84:43:3c:62:
                    34:b0:ed:02:77:a8:f0:9b:01:1b:d8:d8:0f:36:aa:
                    6a:ec:ef:68:4c:79:7f:e9:16:cf:99:93:8c:4b:d0:
                    6a:68:5c:a0:53:42:5f:65:92:a0:fc:2b:27:55:c2:
                    2f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:4F:7C:EF:33:66:8E:F5:1D:67:C1:A9:59:45:B3:97:5F:46:9B:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/89cbf199-d065-3e52-85c6-721088fc29c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:6e:9f:26:23:ec:10:84:95:1e:7a:05:04:84:42:0d:13:a3:
         1a:a2:bc:6d:51:eb:4a:a0:76:6c:d0:66:66:a3:73:b1:a0:79:
         57:5e:05:64:19:76:70:ea:50:7f:27:b9:5a:e3:09:bf:d4:f5:
         a6:8c:c4:34:67:c6:c0:a2:87:40:40:40:34:6b:68:1b:84:7e:
         63:14:8b:94:5a:cf:16:86:3f:9b:87:91:5c:d5:d2:a5:9d:a4:
         94:8e:a3:87:16:ac:75:73:fc:de:a2:59:38:57:a1:dc:31:f5:
         59:9c:86:5e:8b:15:72:d7:fc:9c:42:27:d9:53:ed:76:d7:57:
         9b:3c:20:de:89:12:80:9c:6f:ba:18:92:f6:ca:8d:31:cd:9d:
         8a:bb:0a:bf:9d:81:5d:50:aa:29:87:d5:9a:eb:03:35:43:5f:
         47:39:6d:4c:77:7e:8f:3e:36:26:92:b5:b9:ee:5b:0c:4e:dd:
         a0:93:c7:a0:23:8a:ff:0c:80:49:54:a1:ec:d9:b7:df:95:c8:
         2c:90:00:b5:b6:14:83:25:5c:15:c4:02:b4:12:1a:62:2e:20:
         a9:22:07:aa:f3:96:88:9f:52:3e:eb:59:74:d8:12:72:db:36:
         84:c6:4d:69:42:03:fb:16:57:a8:29:48:29:0a:d4:87:67:52:
         99:32:6d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:18:44 2025 by rpki-client