Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/ae357901-63bf-3b7a-a7ed-8cfa2bc2f085.roa
File:                     ae357901-63bf-3b7a-a7ed-8cfa2bc2f085.roa (raw, json)
Hash identifier:          aKO2tK+7pN+IuXyP+QIcwyhLwglrwYagDlqHR2WYu9s=
Subject key identifier:   3B:A7:2A:29:6C:12:DC:EC:20:11:2A:08:6B:F8:0B:5E:50:0C:FC:85
Certificate issuer:       /CN=2775f7c3-c238-47d5-98c9-835a28d9095e
Certificate serial:       010D0C9F4328584A0C0569A959C34F6FFBCBF140
Authority key identifier: D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/ae357901-63bf-3b7a-a7ed-8cfa2bc2f085.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     401104
IP address blocks:        104.167.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:69:a9:59:c3:4f:6f:fb:cb:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2775f7c3-c238-47d5-98c9-835a28d9095e
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=d466f420-7175-43cb-a4c8-a5a1c90a173c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:85:f4:d8:34:77:52:7f:c6:6f:9d:45:99:38:
                    30:bf:18:10:2c:48:27:02:40:0c:a4:28:e6:0f:a4:
                    6b:6a:55:0a:4a:43:2e:1b:61:b7:b5:78:ce:a5:1b:
                    71:28:db:9b:4b:4c:38:e5:a2:79:39:4d:b6:94:09:
                    9b:93:e6:29:8f:a8:3b:3c:5b:79:6b:3f:36:38:c5:
                    f7:5d:40:0c:48:93:44:9b:76:27:da:7d:88:b7:59:
                    27:ea:29:2f:b3:9a:32:24:f9:18:6c:b2:cd:e7:09:
                    57:12:0b:b9:fe:5c:93:c6:21:f8:c1:57:a4:cf:71:
                    b3:1e:10:88:df:23:a6:49:6c:6d:59:e7:dc:f7:16:
                    05:e9:36:a5:73:bc:94:18:e1:a5:a6:d6:99:ab:cc:
                    69:9f:7b:76:61:d6:0e:79:7b:b7:20:10:7e:b9:27:
                    58:de:37:ac:24:16:b9:70:bb:d5:e8:21:a6:bf:c3:
                    4f:33:7a:48:2d:76:d7:23:47:c9:05:0b:2a:34:70:
                    fd:ac:85:8d:66:a5:97:5e:c2:81:a3:41:fd:0c:f8:
                    08:f4:dc:55:f6:07:78:5a:42:f0:fc:c9:de:0c:7b:
                    8e:ff:a8:6d:b7:1a:a7:88:4a:03:63:1e:2f:be:26:
                    77:60:cf:c3:f2:62:1e:f6:4d:4b:fe:9b:9f:3c:3d:
                    de:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A7:2A:29:6C:12:DC:EC:20:11:2A:08:6B:F8:0B:5E:50:0C:FC:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/ae357901-63bf-3b7a-a7ed-8cfa2bc2f085.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.crl

            X509v3 Authority Key Identifier:
                keyid:D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.167.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:d6:a1:0b:49:8c:ec:92:87:8f:16:a7:92:16:1f:55:bb:d5:
         f4:d9:30:3e:54:c8:36:c4:a6:e6:fe:a3:6f:43:20:25:bf:00:
         54:48:3a:02:06:2d:f6:ca:9c:d0:a0:4f:54:ad:22:64:e3:6e:
         94:fd:84:04:17:e5:9e:40:28:25:7f:b7:70:25:d8:36:0f:3a:
         6f:4b:13:92:86:35:5e:e7:db:50:1f:2f:25:f6:13:b8:c0:57:
         b3:40:2d:43:65:78:0e:6e:41:b6:e6:4b:5e:0c:20:c3:21:ab:
         7e:96:dc:78:4c:f8:be:ae:31:38:9a:69:47:4b:00:e9:5f:47:
         5a:28:c3:cf:a5:a9:00:43:ee:b3:d3:32:62:d7:d1:c3:6f:8f:
         8b:80:11:cd:10:16:da:7c:6e:5d:d6:fc:ec:8f:7c:7d:98:20:
         33:34:d9:f4:d2:ec:a0:dd:e8:ae:5f:d8:ac:3f:63:a4:1c:67:
         a3:be:70:bf:50:21:9d:e8:c7:37:f3:cc:77:55:2c:9f:85:62:
         e8:e1:cd:b1:23:01:83:7e:24:f2:d2:cd:14:1c:2e:89:0f:29:
         ad:98:25:55:85:fd:07:44:7d:fd:97:ba:02:5f:46:91:fe:99:
         26:cf:d0:c6:cc:6b:fe:7e:f2:92:8b:10:13:7b:d9:77:e1:00:
         89:1a:de:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:08:37 2025 by rpki-client