Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/61aaa91e-0584-333d-91c2-07c52729d2cf.roa
File:                     61aaa91e-0584-333d-91c2-07c52729d2cf.roa (raw, json)
Hash identifier:          Z4hvbdbtBh3N2G6EXgZoYdjNj1zBC4n9zWGw7NGYo0k=
Subject key identifier:   3F:8C:00:13:8E:B6:FB:13:10:37:2B:82:B4:9A:59:33:F8:E0:69:24
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584A331AF68CB040DD07A7C91D40
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/61aaa91e-0584-333d-91c2-07c52729d2cf.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     11290
IP address blocks:        104.37.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:f6:8c:b0:40:dd:07:a7:c9:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=da0785c1-f592-4310-98d5-92e41e9b5d0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9a:6d:3b:1e:c0:20:77:f3:62:dc:02:14:cf:
                    e0:97:9e:f1:8a:0a:d8:e3:0f:e9:f4:06:f9:1a:b9:
                    e1:24:38:f1:25:ae:ee:7a:55:f8:26:1f:fc:05:4a:
                    ed:7e:3c:e1:f7:65:37:0c:9e:c7:fd:ac:60:97:b2:
                    68:13:24:3e:c3:d8:57:f9:25:31:61:5d:d6:e6:25:
                    dd:5f:ea:30:00:eb:75:11:95:fc:76:c1:bc:e8:95:
                    62:45:38:79:7e:db:ed:5d:ec:98:d7:5c:91:ec:10:
                    16:9a:90:05:5c:ae:43:03:34:2b:6c:c9:05:2d:05:
                    e2:95:bd:f1:a1:9c:f5:b0:d8:3b:e3:27:89:1f:21:
                    fe:a6:91:70:71:dd:1b:0e:ce:7f:c1:64:9d:ef:3d:
                    1c:06:c5:d6:e9:de:fb:47:7a:45:62:b8:43:a9:ee:
                    d5:27:41:ed:81:6c:bb:84:ff:ca:a4:22:04:58:10:
                    e3:62:3a:73:16:96:27:e0:2e:30:7f:25:61:63:82:
                    5f:63:91:eb:37:66:c6:ef:d7:75:65:0f:c8:8b:cc:
                    d1:48:05:28:9e:b9:e5:79:0a:54:11:2c:1e:56:00:
                    66:bd:ab:33:19:75:2b:5b:0e:c3:3e:30:dd:e0:da:
                    43:dd:26:ee:60:11:fb:f7:92:df:31:fd:74:52:70:
                    96:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:8C:00:13:8E:B6:FB:13:10:37:2B:82:B4:9A:59:33:F8:E0:69:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/61aaa91e-0584-333d-91c2-07c52729d2cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:24:59:10:1c:04:06:2a:d1:f3:c8:21:14:f5:b6:91:48:09:
         86:33:87:3a:49:5d:43:b7:75:74:c3:ec:02:3c:06:5c:c1:c5:
         6c:10:06:5a:8c:52:45:97:6f:a2:dd:79:28:7c:8a:3a:19:12:
         11:2b:2c:1e:7c:7a:dd:d0:cb:c6:51:68:b3:bb:91:68:5e:88:
         89:b0:94:f6:ba:9b:d7:99:ce:0a:7e:c2:79:73:89:5d:17:9e:
         5b:7c:8a:56:97:4d:a6:54:39:92:a8:64:ad:c9:e2:07:ce:a7:
         a9:ae:8d:09:0f:56:ce:56:42:72:b2:51:b6:e8:51:86:58:c4:
         d7:3a:e5:9c:d2:9a:e4:7e:df:b9:e2:71:bf:3f:3e:cb:70:dc:
         8d:4d:3c:fb:14:5a:be:26:d6:d7:2c:57:ff:71:fc:74:a2:fd:
         0c:26:b7:7a:70:8a:57:0e:9c:6c:18:ec:7f:b2:20:f5:9f:75:
         25:72:0f:6b:ee:6b:46:43:95:e5:65:7a:c2:15:ef:7e:ab:be:
         7c:9c:c6:72:7d:3b:98:c4:c4:26:92:c8:de:25:a3:13:07:ab:
         aa:25:82:82:6f:3c:2c:10:58:7a:68:4e:a2:a9:d8:ad:e9:46:
         34:cb:51:e2:b3:aa:ae:1a:a9:37:ca:46:d1:28:80:1e:5c:5c:
         60:db:85:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 22:51:47 2025 by rpki-client