Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6cb89579-af3b-39f7-8835-abbb49546079.roa
File:                     6cb89579-af3b-39f7-8835-abbb49546079.roa (raw, json)
Hash identifier:          FRfeuigOIHZPDIfoPM2sF7I7ppLFCNpG7C+d34+WiOw=
Subject key identifier:   50:62:CB:20:53:54:8E:1B:F6:AB:6B:F7:DB:03:D4:7F:CE:2B:EE:A8
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858499AF4767EFDECE113B42BF480
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6cb89579-af3b-39f7-8835-abbb49546079.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     852
IP address blocks:        104.157.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:76:7e:fd:ec:e1:13:b4:2b:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=cee23476-b670-4159-8221-dba0c5155268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c6:78:60:d1:3a:91:71:25:c1:d9:20:af:fa:
                    3b:bd:f3:6e:03:2e:09:7a:0e:41:95:08:ec:5d:05:
                    69:c3:46:67:56:34:fe:46:67:61:a5:bd:58:a6:8a:
                    07:3d:a7:4a:7b:c7:5c:16:7e:c8:bb:c6:e1:5a:84:
                    e7:2c:5f:ac:c6:e0:d8:f5:a2:38:51:f9:fc:1c:12:
                    38:f5:13:d6:56:fd:c7:2a:5f:83:3c:ce:b6:40:50:
                    ab:6c:e4:9d:8e:f8:57:4c:37:ac:c9:06:63:6b:cc:
                    0a:8b:1e:a2:06:a4:8c:a4:df:e7:e7:91:5b:52:ad:
                    01:8f:9b:b2:39:28:56:07:da:b5:4c:ac:e8:03:6f:
                    cf:2c:c9:5c:80:06:35:fd:9e:5b:c2:90:a8:3e:5f:
                    bd:26:b8:ce:43:26:71:da:4e:9b:c1:9a:11:e9:59:
                    61:27:67:4d:0b:e5:b0:6e:6b:3a:fb:d4:9b:f9:9a:
                    5c:84:b0:0e:44:91:a6:26:69:d2:ee:21:cb:0f:60:
                    75:4a:2c:ed:1c:6f:81:d0:40:14:af:61:db:72:db:
                    75:be:46:c4:ff:02:f2:3c:f0:c2:02:14:88:71:68:
                    3f:22:8b:70:8e:c0:c8:b5:28:32:be:32:38:f8:ca:
                    d6:4a:fe:22:bc:d6:c7:17:3b:0d:2f:08:4d:5d:5c:
                    fc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:62:CB:20:53:54:8E:1B:F6:AB:6B:F7:DB:03:D4:7F:CE:2B:EE:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6cb89579-af3b-39f7-8835-abbb49546079.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.157.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         df:ab:08:6c:51:f0:6c:b3:8d:71:61:3e:56:9c:2c:5f:d4:11:
         c7:91:2d:09:c9:bc:48:ac:5a:a8:9e:fa:6b:79:2b:03:4c:a8:
         a8:1c:48:3c:8b:d6:3e:15:d1:8f:43:e3:ff:41:b7:73:93:76:
         2d:ee:f5:75:ce:bd:a5:85:c5:a3:6e:42:98:46:9a:b5:dd:51:
         0f:06:6d:e9:14:2d:59:8d:fa:75:a2:65:f1:67:00:dd:ac:23:
         71:a4:21:98:ec:38:fe:e8:bd:d4:cc:82:c7:0a:25:91:9b:4e:
         a7:f0:56:07:f8:22:61:d7:d9:48:a1:18:00:d2:11:8e:46:fc:
         2b:8d:8a:d0:ab:94:0c:33:d7:10:20:a6:b6:44:84:a2:0c:36:
         f6:a0:d5:dc:e1:77:08:d6:c5:6c:1a:ce:70:8d:15:36:ed:ed:
         a7:f6:c2:2c:c9:2a:7d:69:d9:6e:3d:d8:1a:9c:4d:e4:6f:fe:
         16:4c:72:4f:ca:ce:03:ec:a2:e2:fe:94:a2:68:55:e7:ce:00:
         e0:f2:bd:86:eb:d0:55:0e:d2:90:39:b5:71:c8:5b:2a:b8:83:
         13:bb:89:61:18:b0:99:77:a2:4f:62:10:b0:3e:10:4a:5b:7c:
         f2:f5:24:10:48:a2:65:11:8c:df:64:08:f0:0c:a3:d6:a9:8e:
         28:da:26:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:03:14 2025 by rpki-client