Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/1d87f5de-ef5a-34f5-9b65-03ac8de81cd1.roa
File:                     1d87f5de-ef5a-34f5-9b65-03ac8de81cd1.roa (raw, json)
Hash identifier:          jgPB/S0Hdo3vrYTPIBqcEXsFBIc8NWOmcHxnGA9eUZA=
Subject key identifier:   89:A3:3F:9A:AA:00:F8:C4:87:42:11:6D:B4:81:E7:02:21:46:BB:CD
Certificate issuer:       /CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c
Certificate serial:       010D0C9F4328584A331AFB895A66A2B8E2354200
Authority key identifier: E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/1d87f5de-ef5a-34f5-9b65-03ac8de81cd1.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     393653
IP address blocks:        104.128.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:fb:89:5a:66:a2:b8:e2:35:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=7fa49daa-6503-4f84-b181-20c070cac764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b2:f1:70:64:46:0a:60:af:b2:9d:cc:29:01:
                    de:11:07:3d:9d:e3:2b:6b:00:e1:94:db:86:92:a5:
                    6f:b0:be:81:d9:75:63:ba:1a:79:93:24:d8:54:26:
                    5c:49:6c:4b:4b:48:45:00:a8:22:61:43:b2:41:b6:
                    80:65:8d:9e:6f:dd:8d:71:55:02:a0:ca:bc:5a:e6:
                    e0:19:34:e2:9f:f5:25:ba:a8:4e:8f:15:8c:c9:55:
                    26:59:b8:00:95:31:e5:fa:bc:f3:7c:4d:c6:90:0f:
                    00:22:14:55:59:6f:dc:0e:00:eb:fa:53:48:e4:f9:
                    3f:74:5d:a0:2c:65:47:f0:51:16:6c:49:72:9d:f6:
                    d4:31:ba:95:97:db:ad:13:d3:d1:0a:06:9f:ac:1f:
                    e2:a0:c3:b4:ae:89:7d:81:20:ae:72:5b:b3:d7:9f:
                    0f:d8:90:7e:cb:fa:2f:a0:a0:20:48:df:68:00:49:
                    b0:be:7f:0a:5b:d3:7e:fe:88:16:bd:ad:07:77:60:
                    b2:fd:29:7f:02:36:25:f3:1b:2c:5d:95:4b:da:57:
                    ea:31:e5:d3:ae:77:fd:5f:b5:ff:b8:ee:53:10:28:
                    5a:c4:27:f4:b3:81:96:c7:2e:7a:5e:63:0a:25:17:
                    5e:a9:f4:d7:50:85:a5:d3:83:91:c9:40:30:00:2d:
                    55:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A3:3F:9A:AA:00:F8:C4:87:42:11:6D:B4:81:E7:02:21:46:BB:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/1d87f5de-ef5a-34f5-9b65-03ac8de81cd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl

            X509v3 Authority Key Identifier:
                keyid:E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.128.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:f4:7b:e2:3b:c5:6c:fc:2c:95:95:ba:b7:b4:4e:b9:8a:c1:
         e0:4c:17:d1:b9:94:f5:da:47:9e:23:7f:ea:d0:65:b3:d6:7c:
         92:a3:89:7f:03:b8:42:6e:15:a5:83:bf:6d:dd:2f:32:ea:83:
         9e:3b:3b:99:ac:92:1b:7e:18:0e:03:00:b4:df:b1:b6:2c:b4:
         83:16:69:0b:bb:b2:2c:60:6f:d9:28:41:89:ea:1d:a4:cb:34:
         18:38:60:9d:a7:fe:e7:c1:eb:a8:ec:3c:7a:1e:b2:28:85:c0:
         5b:b3:27:59:53:30:f8:a5:2f:cf:45:0c:a8:58:89:24:ac:49:
         6c:90:62:48:91:67:d9:70:1a:b6:8a:ef:51:b4:eb:24:5b:12:
         94:62:28:d1:95:8a:49:06:5a:7d:77:8f:7d:33:2f:e9:5b:2c:
         52:e2:a3:78:5c:82:18:68:77:88:8d:2b:39:ca:9a:20:80:82:
         a7:cf:f3:ec:ff:b8:2a:59:27:46:4f:fc:94:85:11:b3:a5:f4:
         43:f5:8e:66:2e:0c:15:94:b9:6f:16:6c:a8:b1:0c:89:4b:66:
         a6:1a:b5:64:4e:94:c6:8e:7a:87:67:c7:71:3b:76:27:19:4f:
         6d:d0:85:e4:34:35:e5:5c:04:9e:a0:11:b2:90:00:07:24:96:
         e1:7a:f5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:22:46 2025 by rpki-client