Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8a866931-42d4-3e24-b1d4-8fe4bbfacad7.roa
File:                     8a866931-42d4-3e24-b1d4-8fe4bbfacad7.roa (raw, json)
Hash identifier:          zmwK2l553nnie66zR5tlUJN+cUnw+1v/lFWQ20FHaFI=
Subject key identifier:   40:4E:39:7C:A5:42:E3:A3:FD:D8:9E:D7:D4:AD:A9:98:9C:58:7C:7D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584993FA04F4C517684146FACF54
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8a866931-42d4-3e24-b1d4-8fe4bbfacad7.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     395973
IP address blocks:        104.134.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:fa:04:f4:c5:17:68:41:46:fa:cf:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=f1aea0e9-7c87-4059-af7e-13fb6d17c5c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ca:21:f8:07:b7:86:11:a3:18:d2:96:cc:ae:
                    69:ed:1f:36:9d:c2:99:2b:bc:b2:0a:38:19:42:a6:
                    22:65:63:2d:aa:bb:09:27:b1:4a:04:67:93:c5:c2:
                    e6:05:ba:e4:fe:5c:81:9b:e7:49:b9:e1:6b:59:48:
                    d5:eb:ba:e9:0e:d9:27:49:8f:59:46:6b:b4:5e:b0:
                    3c:bd:7b:84:34:cc:dd:60:01:f5:fb:8e:5e:22:49:
                    5b:0c:b7:fc:02:5f:41:dc:5c:6c:12:69:eb:12:a5:
                    77:08:b5:08:ec:0a:d0:43:8a:4c:88:25:ad:7c:d4:
                    64:5d:34:40:58:08:17:8f:82:a1:06:2d:91:a7:31:
                    8c:b7:d2:41:29:c1:c8:2c:ba:80:06:5b:ab:fd:7f:
                    bd:b9:42:05:ae:7a:77:77:6c:71:0a:6f:82:d9:dd:
                    3e:34:c4:d3:f0:c7:00:4b:d6:72:52:8f:31:f2:17:
                    e6:65:ba:79:a6:a2:e8:a9:73:83:00:a2:50:67:13:
                    a7:0a:15:cd:a7:0b:12:ba:60:f0:59:f4:71:f2:34:
                    cb:78:69:a4:14:98:5d:4d:dc:2b:6e:9d:d2:30:39:
                    4c:de:e4:fb:4d:cb:1f:2d:f3:c7:9c:44:06:d3:84:
                    bb:4a:bd:96:e9:d4:0e:f1:f4:cc:f6:1e:18:6e:80:
                    dc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4E:39:7C:A5:42:E3:A3:FD:D8:9E:D7:D4:AD:A9:98:9C:58:7C:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8a866931-42d4-3e24-b1d4-8fe4bbfacad7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:ea:f3:ef:25:6d:d3:4d:02:d1:68:dc:a4:d7:b7:99:08:2f:
         ee:12:69:de:e7:bd:db:c4:c9:e2:4a:5c:cb:d0:f1:75:fe:28:
         3d:9c:86:2c:f9:fb:1e:30:89:c5:1b:65:a1:ab:16:c7:bb:37:
         e4:b9:07:1b:11:9a:ee:46:55:03:5c:f1:fe:92:c5:d7:c1:8a:
         a9:47:6c:aa:bd:dd:3b:79:6d:c3:0a:ed:3b:7c:53:12:28:00:
         52:16:cc:48:95:ff:53:90:58:4c:30:36:a5:df:99:8f:be:84:
         41:ce:00:53:a0:c7:bb:cf:04:db:a5:09:a7:0d:b2:02:35:ef:
         5d:bf:5e:05:88:88:d6:97:ad:6b:93:d4:99:35:d1:f6:2f:8e:
         9b:fc:6e:8e:d4:c1:4b:9d:be:31:b6:78:52:05:9b:22:ef:fe:
         f5:49:c5:ad:fb:27:da:07:5c:96:36:22:db:9d:09:2c:74:ca:
         27:d2:ae:a9:31:d8:db:d5:02:a3:01:9b:09:65:ab:38:73:8b:
         8d:19:24:b7:e1:69:7e:18:9e:3a:d6:ef:dc:5a:9a:ef:12:31:
         bd:e4:2e:9e:93:45:cc:d3:bf:d0:ad:64:f4:a4:58:40:a3:7b:
         bb:6b:60:67:99:77:04:d2:a8:0d:89:67:e0:77:00:6c:9d:96:
         2c:12:e0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:58:52 2025 by rpki-client