Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e06d1592-2552-3da4-965f-8a0eba0a4a3e.roa
File:                     e06d1592-2552-3da4-965f-8a0eba0a4a3e.roa (raw, json)
Hash identifier:          Y5NJ259SGwRd070woEaC7hUKJqtQivwgHuIVXvM9zXk=
Subject key identifier:   EA:FD:69:A3:1E:F8:19:7F:9F:5C:81:13:16:ED:D0:65:3C:05:F8:EB
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285849912F47ABC47BD9101944F000
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e06d1592-2552-3da4-965f-8a0eba0a4a3e.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     41264
IP address blocks:        104.132.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:47:ab:c4:7b:d9:10:19:44:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=d1b05704-4fa0-4d51-b9ea-90da2da7dc59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:99:9a:59:96:03:2d:dc:22:c0:0f:3f:fe:43:
                    9e:f4:31:ab:85:e5:56:76:75:4a:3b:d2:3a:45:ca:
                    16:55:2c:7f:eb:dd:05:b6:0b:5e:a7:b6:67:5e:6c:
                    a5:64:8f:87:68:97:63:59:21:f4:3f:d3:94:ed:df:
                    45:48:aa:91:98:4e:f9:0f:a8:f5:83:74:db:ae:a6:
                    03:21:32:d9:03:7f:f2:62:1f:ad:92:8a:87:7f:a0:
                    3c:9d:8a:bf:94:dd:67:05:ca:83:15:85:8c:4b:26:
                    5c:69:5d:ef:5c:7e:f1:94:9b:23:82:b0:fa:19:e0:
                    e0:59:e4:79:03:bb:87:e7:41:04:4a:0e:ce:d0:c0:
                    dc:b2:b4:57:3e:f2:00:1d:d4:14:ca:be:12:9b:55:
                    af:a8:94:fe:8d:93:93:30:e9:8d:bd:68:eb:9c:c4:
                    ef:a0:b1:82:8b:db:13:80:e6:e9:0b:5f:9f:13:a0:
                    4d:0e:bd:13:b2:0c:f2:87:43:da:f1:4d:31:fc:c1:
                    6e:92:22:28:5d:b5:8e:4e:9c:d4:18:1c:7f:b1:30:
                    16:0a:d9:ac:5b:1d:83:96:1d:18:0d:dd:6d:f1:37:
                    6a:28:cd:9e:42:30:04:bb:78:b0:43:e7:1a:40:24:
                    15:bc:ac:f5:ad:98:8d:2e:08:1f:2a:bb:08:d5:1f:
                    cb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:FD:69:A3:1E:F8:19:7F:9F:5C:81:13:16:ED:D0:65:3C:05:F8:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e06d1592-2552-3da4-965f-8a0eba0a4a3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:dc:4a:93:cc:8a:f6:30:1a:66:bd:f7:51:71:e8:ae:3a:65:
         be:00:68:fe:be:37:51:e1:d2:d0:bc:4d:68:53:3d:ea:dc:ad:
         ef:84:98:5c:71:c8:9b:a5:83:68:40:94:5d:d9:f5:e6:4e:8a:
         8e:4c:ba:85:52:01:c8:3b:89:3d:07:92:9d:8d:1a:b8:35:3e:
         70:89:14:64:1e:52:2e:ee:9a:a6:16:81:9e:10:1f:a1:99:c6:
         8e:e9:db:70:d5:99:48:ca:d6:16:88:a5:be:39:fc:0c:ff:db:
         08:c1:78:5f:17:f4:ec:31:51:b9:05:a8:01:2f:95:bc:5d:93:
         b4:2e:01:55:53:8a:25:ac:0d:78:48:ae:5e:ed:99:56:e4:52:
         68:02:44:d1:5b:d2:95:76:cd:73:b1:d3:3a:a4:9b:d7:72:15:
         24:bd:f1:74:b0:8f:de:c7:76:a7:f4:a4:c0:4f:2c:18:bd:d6:
         3a:3a:26:33:f6:6c:e4:e1:ee:e5:b6:49:8b:04:a2:58:ff:0f:
         63:a9:6b:3f:31:38:0a:37:1d:3e:e7:c7:2a:d2:d0:ea:02:08:
         0a:53:72:f4:bd:13:48:6b:92:9f:54:9c:7a:fd:68:fb:2e:ef:
         4e:16:38:13:72:bf:ba:bd:25:96:66:d4:3d:18:ac:49:32:c5:
         ae:51:48:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:54:33 2025 by rpki-client