Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/2117ef64-3fd7-3416-8a86-787ec1ef82d6.roa
File:                     2117ef64-3fd7-3416-8a86-787ec1ef82d6.roa (raw, json)
Hash identifier:          Rrqj/8SHelOOI3vue0PpjuS1Z9iviNAn2gda3sBpw40=
Subject key identifier:   E5:B4:81:8F:7A:9D:3E:FE:57:6B:70:AE:63:5C:05:45:26:F9:D9:9E
Certificate issuer:       /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155
Certificate serial:       010D0C9F4328584A8C70CC43C2FD64831579A2C0
Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/2117ef64-3fd7-3416-8a86-787ec1ef82d6.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        104.237.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:cc:43:c2:fd:64:83:15:79:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=8b2ed816-d95b-4861-b8ad-f39d3fdc2ca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:45:df:2c:39:c1:5f:83:87:65:82:bb:d3:04:
                    73:d3:4d:a0:81:4d:59:02:a3:4d:57:f7:3c:1c:b2:
                    b0:e1:bb:82:ea:38:eb:13:7b:df:5d:79:aa:ee:96:
                    1f:a1:53:5f:8c:2a:d2:98:66:44:ef:60:8d:d1:4d:
                    b9:df:0b:89:33:65:72:1e:e6:49:ea:dd:21:e6:07:
                    3c:e2:eb:44:c7:b2:90:1c:6e:f0:b6:63:e8:c5:72:
                    80:46:4b:3f:cd:cf:5c:74:83:aa:5a:ec:31:01:5e:
                    27:0f:dd:3d:37:0c:d7:fe:ce:ac:a9:2a:c8:40:d4:
                    9e:fa:0b:af:b1:68:0b:46:77:f3:10:d7:46:96:29:
                    c5:c5:d8:a9:49:ce:33:b0:dd:ad:b0:b0:a4:a0:7c:
                    97:7a:39:e3:32:c3:2a:8c:d0:e9:b7:55:36:ab:d1:
                    5f:1f:13:b0:88:ee:ff:7c:04:10:fc:83:ab:21:e8:
                    95:4a:3d:1b:db:4b:db:e6:1a:55:e0:a5:d9:0d:53:
                    84:5b:90:2f:3d:85:0f:19:b7:e5:79:6f:19:66:88:
                    b7:ef:44:d6:46:71:5d:8e:d0:63:87:fe:bf:f6:01:
                    49:ab:34:f1:c3:03:eb:0e:e1:a0:f2:b8:f5:3a:68:
                    3b:3e:5a:cf:81:ec:70:a6:98:58:3d:60:30:56:75:
                    2a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B4:81:8F:7A:9D:3E:FE:57:6B:70:AE:63:5C:05:45:26:F9:D9:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/2117ef64-3fd7-3416-8a86-787ec1ef82d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl

            X509v3 Authority Key Identifier:
                keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:27:05:7c:94:fc:6a:92:a3:05:07:27:8b:de:6b:c7:c5:f5:
         33:bf:16:f5:f3:f6:9f:87:ac:d1:fe:64:48:4c:e5:29:cf:30:
         2a:dd:05:8d:66:63:dc:5c:be:24:08:49:a3:08:73:c8:79:41:
         39:6a:66:a1:7a:17:56:e3:b7:8c:51:84:2c:04:3e:32:94:9a:
         88:c0:fb:91:05:93:6a:1a:9b:bb:2e:66:86:4b:1b:a6:3b:8f:
         2c:f0:5c:3f:26:a4:ab:dd:55:90:80:b7:3b:4f:23:25:57:79:
         b0:4d:ce:fb:2b:c2:42:7f:e6:03:23:45:d8:6c:8d:9e:f3:0c:
         1e:4c:b4:b2:0d:84:1f:de:bf:b5:dd:05:9a:ee:8a:6d:07:1f:
         0e:fd:78:04:1e:13:92:c4:dd:e8:a3:28:b8:09:c1:9d:8d:c4:
         a6:ea:da:10:bd:24:17:ab:b8:5e:2b:82:c1:61:f4:c1:77:81:
         20:e2:ac:3f:ea:77:7e:f1:d2:ac:67:bb:72:cd:c9:80:27:27:
         6a:cd:41:8b:d2:1e:8a:6a:5a:f4:23:76:b2:db:04:1b:45:4b:
         84:21:96:ba:51:fe:10:63:65:a4:09:10:8c:0e:85:38:34:68:
         8f:74:f0:82:8a:1e:76:4a:9b:b5:38:50:10:3a:1e:41:31:c4:
         c9:06:e9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:53:05 2025 by rpki-client