Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c5d4421c-acdd-368c-adb9-c16500f4a0d6.roa
File:                     c5d4421c-acdd-368c-adb9-c16500f4a0d6.roa (raw, json)
Hash identifier:          hQCK26x90COrpCR13JWJWM6YYkyIaUla6S70HJxidGI=
Subject key identifier:   FA:95:34:76:94:FD:43:17:60:3E:E1:5D:F3:0B:CC:48:0A:6A:C0:C6
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584993FA048EE429E51092352800
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c5d4421c-acdd-368c-adb9-c16500f4a0d6.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     15169
IP address blocks:        104.134.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:fa:04:8e:e4:29:e5:10:92:35:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=86477af2-3b41-403a-9a45-510b257c7e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a2:34:6c:e1:4d:64:bf:7e:96:9f:b8:cd:77:
                    76:60:79:ee:75:da:fa:be:33:b0:9b:ba:15:14:0d:
                    5a:6a:bd:05:88:f1:2f:41:55:5d:9d:86:4f:d9:d7:
                    e7:7d:ad:8b:5c:2a:41:2e:ae:2e:59:b3:47:a2:78:
                    31:da:08:c9:47:71:8f:81:52:64:30:db:33:9b:48:
                    91:cb:0d:54:c0:a9:91:d1:57:da:6a:84:3f:c7:9e:
                    24:24:29:a6:43:8c:11:99:c0:62:bd:2a:41:bd:fe:
                    90:ec:66:d6:ce:92:6c:64:21:44:81:2e:28:29:3e:
                    9a:38:b3:76:af:74:33:8d:e9:3d:ff:c4:7b:57:dc:
                    71:2c:2e:f1:1e:04:35:82:f9:7b:06:ee:6a:93:ca:
                    2a:06:9d:7d:32:f0:9b:54:e6:76:99:03:02:ba:1f:
                    39:9f:12:c1:89:a9:5b:b2:5b:93:fd:b1:39:2b:65:
                    8d:45:6c:db:9d:18:4e:ea:9d:da:06:c9:15:81:1c:
                    71:5f:e3:ff:d6:a0:ed:08:3b:b1:c8:3d:d4:24:e3:
                    2b:dc:b2:94:2e:a7:13:0e:e5:1c:c9:42:5f:ad:32:
                    24:ff:f6:d2:06:1f:21:d3:57:10:2e:cf:4c:3e:12:
                    31:f9:b3:88:59:3a:c2:ba:b0:d1:39:af:6a:c5:6d:
                    11:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:95:34:76:94:FD:43:17:60:3E:E1:5D:F3:0B:CC:48:0A:6A:C0:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c5d4421c-acdd-368c-adb9-c16500f4a0d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:f7:dd:50:07:2f:12:cf:35:be:e8:82:fc:51:0f:70:08:fa:
         31:d5:2d:26:46:26:e0:57:2f:dc:c0:0d:2c:40:c5:39:81:db:
         46:fc:f5:34:1d:83:87:7e:fe:ed:08:be:8d:80:ef:e0:4c:c6:
         03:6a:cc:81:80:cf:c2:c3:89:a5:50:8d:a5:f1:9a:88:00:b7:
         30:56:e3:36:32:9d:b4:a7:7e:a2:c5:bc:5a:35:78:de:6b:c0:
         d3:87:94:c1:88:52:8b:bc:a8:cd:be:74:0d:7b:98:d5:cd:7c:
         cf:f5:ad:3a:d4:13:e5:d6:8b:34:58:b2:bd:b9:6d:73:46:04:
         ce:42:ce:63:46:c3:ac:a7:7c:ec:1f:32:65:f1:06:f8:a7:c5:
         00:3e:64:a5:81:e7:a2:5f:31:ef:21:22:3f:b8:3c:cf:a6:92:
         44:e1:0c:34:f6:11:19:c4:b4:24:7d:54:22:60:f8:ff:2c:82:
         18:32:07:89:4c:24:50:3e:91:e8:96:c2:b3:9f:d4:dd:55:ef:
         c7:e9:45:ce:85:eb:ca:05:78:9b:be:b3:37:26:d8:74:f3:81:
         7d:2d:25:6e:26:1e:fb:4c:94:6a:29:1b:8b:8b:8b:5d:f7:f7:
         be:a5:b8:3f:f6:4a:87:05:5d:99:d2:77:fa:73:e5:99:8d:50:
         5c:3c:98:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:32:36 2025 by rpki-client