Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2bba1c62-4281-43ad-84cd-d29f817dd3d2/44993fae-49b0-321b-9fe0-7943ead9ac68.roa
File:                     44993fae-49b0-321b-9fe0-7943ead9ac68.roa (raw, json)
Hash identifier:          kSBX5onvRbXQVCfLmuP+dI5HPlrBRmhbDMbUekYLvlY=
Subject key identifier:   A7:FA:6D:2A:42:EC:8C:01:39:EE:8C:9A:9C:84:73:08:04:DC:1E:5C
Certificate issuer:       /CN=2bba1c62-4281-43ad-84cd-d29f817dd3d2
Certificate serial:       010D0C9F4328584A03A55174FB0D56720E4CC5C0
Authority key identifier: C6:9F:9F:D0:98:75:26:19:EE:BC:1E:E9:16:62:D8:33:36:CB:28:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2bba1c62-4281-43ad-84cd-d29f817dd3d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2bba1c62-4281-43ad-84cd-d29f817dd3d2/44993fae-49b0-321b-9fe0-7943ead9ac68.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     32391
IP address blocks:        104.156.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2bba1c62-4281-43ad-84cd-d29f817dd3d2/2bba1c62-4281-43ad-84cd-d29f817dd3d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2bba1c62-4281-43ad-84cd-d29f817dd3d2/2bba1c62-4281-43ad-84cd-d29f817dd3d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2bba1c62-4281-43ad-84cd-d29f817dd3d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:51:74:fb:0d:56:72:0e:4c:c5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bba1c62-4281-43ad-84cd-d29f817dd3d2
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=5f8071fe-5c2a-4593-914b-3ab4e005bad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:79:af:1b:70:13:66:f8:34:f1:7f:90:d0:a7:
                    8e:2e:9d:71:7e:38:bb:0b:e3:3d:88:a4:ac:2e:b8:
                    6a:c0:09:c0:b9:c9:15:3f:b0:3d:c7:1c:62:e6:c0:
                    76:a7:6e:bf:b8:69:dc:07:41:c2:c7:6a:62:88:49:
                    37:1a:8d:88:2c:37:ac:58:59:ff:59:4c:59:04:a9:
                    fe:b9:26:13:86:82:10:0a:29:52:7f:e8:f3:ed:2d:
                    80:5b:a8:8a:c7:e3:4b:8c:0a:03:34:48:f5:cf:1e:
                    53:0b:d5:32:de:6f:6e:fe:9d:b0:95:9e:19:cc:12:
                    8e:42:7d:ca:70:a6:a3:44:f3:57:41:e5:f2:b8:4a:
                    1c:5a:1c:e1:3d:80:7c:fc:39:90:ac:d0:65:e4:54:
                    af:70:bd:a4:7f:c6:5a:61:ac:cf:06:5f:4a:e9:1b:
                    f2:29:45:ce:d8:cb:76:5e:fe:73:6f:b2:50:89:21:
                    59:4e:e2:77:ef:7a:95:67:b9:10:68:07:32:44:94:
                    91:b8:10:c6:5b:6a:29:c0:25:7f:6b:4c:fa:00:98:
                    84:fe:15:52:3d:40:ad:85:a2:d9:82:f3:04:db:44:
                    fd:75:f4:20:87:e6:a3:48:90:ef:4b:59:1b:db:9b:
                    5d:c0:bd:a4:d7:a2:28:67:a0:89:5b:d9:0a:05:8d:
                    55:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:FA:6D:2A:42:EC:8C:01:39:EE:8C:9A:9C:84:73:08:04:DC:1E:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2bba1c62-4281-43ad-84cd-d29f817dd3d2/44993fae-49b0-321b-9fe0-7943ead9ac68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2bba1c62-4281-43ad-84cd-d29f817dd3d2/2bba1c62-4281-43ad-84cd-d29f817dd3d2.crl

            X509v3 Authority Key Identifier:
                keyid:C6:9F:9F:D0:98:75:26:19:EE:BC:1E:E9:16:62:D8:33:36:CB:28:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2bba1c62-4281-43ad-84cd-d29f817dd3d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:7b:35:33:1b:91:86:b0:7a:29:3c:17:62:37:52:78:d7:b0:
         00:a5:4c:92:2f:61:94:b2:32:c6:b1:91:7c:47:67:cb:4f:11:
         6c:26:6c:85:28:cd:78:a5:b3:6b:54:a8:c1:54:b8:88:c6:cd:
         63:e3:63:ff:e9:16:d8:8c:9a:26:cb:18:13:2b:8a:1a:fe:be:
         dc:81:68:b1:95:b3:ae:1d:21:a6:10:4e:a3:88:be:2e:be:77:
         75:29:88:88:44:8d:21:17:30:4a:62:8e:5e:d9:21:97:0d:44:
         4f:9f:f6:64:e2:e2:ff:1b:71:59:8a:7f:ab:7a:fa:7d:ae:37:
         b7:c8:11:7e:f1:eb:f9:8c:17:cc:d5:26:0f:54:a1:56:8b:22:
         ad:a7:6f:30:05:30:70:50:ab:ee:b0:1c:66:41:ee:7c:11:83:
         ac:bb:58:b1:f4:a6:51:8b:66:b4:8f:b4:52:e4:90:cb:5c:0c:
         63:bd:a3:d1:62:54:ed:8a:63:7f:b3:12:89:1d:3e:c9:ef:d9:
         d6:d4:69:da:29:19:77:e8:14:cc:04:94:28:8d:fa:ae:41:1b:
         53:65:f4:91:fe:53:31:10:5b:33:98:cf:28:62:5d:cf:fe:65:
         aa:a3:5a:fd:17:38:17:70:f9:32:eb:bc:e4:b5:de:aa:34:3e:
         9f:53:65:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:37:20 2025 by rpki-client