Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/06c47cc4-7abe-3c8d-9a7f-9cf75270ad9a.roa
File:                     06c47cc4-7abe-3c8d-9a7f-9cf75270ad9a.roa (raw, json)
Hash identifier:          DWnEdOoBX7WVxm+q2tBT5rZsq8ohvr0naxaDi8Rdaoo=
Subject key identifier:   5B:C6:79:8D:7E:9C:32:8D:4E:D4:84:70:C8:2B:59:CF:97:9D:E9:80
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584A2D294CC29724FCD7826E0C00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/06c47cc4-7abe-3c8d-9a7f-9cf75270ad9a.roa
Signing time:             Fri 13 Jun 2025 09:55:21 +0000
ROA not before:           Fri 13 Jun 2025 09:55:21 +0000
ROA not after:            Thu 11 Sep 2025 09:55:21 +0000
asID:                     329007
IP address blocks:        104.250.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2d:29:4c:c2:97:24:fc:d7:82:6e:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jun 13 09:55:21 2025 GMT
            Not After : Sep 11 09:55:21 2025 GMT
        Subject: CN=67d5fb24-2bf9-438a-ae96-e9caf744501c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:38:d5:2b:46:02:48:00:7a:c6:54:26:3f:0f:
                    4d:0d:b4:4e:e2:46:ff:77:64:c1:64:32:f6:2a:a2:
                    9c:33:12:2d:fc:93:1b:ef:90:ec:dc:b9:f7:fd:54:
                    c8:f2:0e:56:91:b7:7b:0d:bd:7d:e4:48:37:55:35:
                    b8:24:00:9d:dc:12:4d:e3:fa:95:45:cc:de:af:ba:
                    d6:b5:4d:b1:eb:7c:1f:59:05:40:63:ba:aa:0c:95:
                    c2:95:3c:3a:65:47:40:f8:d4:3f:d2:b4:7d:93:d8:
                    c0:02:fa:a0:c3:d8:5f:30:3c:09:c5:96:77:41:52:
                    d9:a7:26:7a:27:50:d3:ce:6d:33:f5:08:6c:f4:62:
                    b8:f4:d7:7b:3d:56:ba:4c:d2:a7:78:90:ae:fe:7f:
                    87:9c:74:44:ac:a1:c0:9c:dc:d0:4b:de:93:9b:4e:
                    9f:51:66:f5:c3:ee:c0:33:c8:ce:2e:cc:32:f9:af:
                    44:5d:3b:2f:7e:30:60:7a:c4:6a:ac:19:47:b1:50:
                    44:01:34:6a:73:17:0b:61:4f:5d:54:30:02:56:e0:
                    4c:02:76:37:2f:28:7f:97:5e:8b:24:1b:c3:3c:76:
                    c0:7f:42:7a:b1:81:63:2a:92:94:06:25:4f:8a:ce:
                    d6:65:07:f7:eb:99:9a:1a:a4:ea:b0:c0:c8:f6:d6:
                    ad:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C6:79:8D:7E:9C:32:8D:4E:D4:84:70:C8:2B:59:CF:97:9D:E9:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/06c47cc4-7abe-3c8d-9a7f-9cf75270ad9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:1f:ca:07:43:93:17:71:4e:49:0d:b8:74:1a:ef:b2:98:2b:
         8c:3a:39:39:4e:97:76:1f:f4:cf:10:03:67:50:e5:2f:eb:4b:
         42:cb:fc:59:d5:66:01:04:21:35:68:44:1f:c4:a3:38:1e:4b:
         92:21:1b:bb:37:41:88:bd:0e:61:09:1a:79:9e:10:82:b8:3b:
         cf:78:b9:1c:1e:04:09:67:bd:d4:40:6e:e3:98:c1:6a:16:54:
         e1:7e:07:68:55:ef:83:03:b2:cb:fa:13:54:34:c0:e0:10:16:
         81:2e:a2:ce:70:b6:69:b0:60:35:6d:d9:ea:bc:e3:1c:e4:9b:
         02:4f:37:93:40:2a:16:30:03:90:f5:85:ea:c3:1a:00:61:07:
         df:ac:05:df:2c:9c:a6:d8:cf:d0:75:a8:6b:5d:2b:0a:53:92:
         a8:b3:cd:55:af:f0:d7:a7:d6:aa:f2:66:d3:fb:b4:f5:83:f1:
         55:47:03:d5:f4:fe:f4:f5:a0:ef:f0:49:dd:6f:8f:49:4f:34:
         6a:ac:dc:80:31:38:83:85:b8:9b:ab:e9:2f:36:b7:6f:0e:26:
         7f:12:65:da:5c:64:86:1f:41:d8:c0:e7:30:03:32:56:43:00:
         fe:5b:07:e4:75:e9:f9:a0:ba:b8:f9:07:19:b6:4c:2e:23:47:
         97:ce:db:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:01:58 2025 by rpki-client