Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/56ad9c83-4928-3274-ad1e-bc9b339fc175.roa
File:                     56ad9c83-4928-3274-ad1e-bc9b339fc175.roa (raw, json)
Hash identifier:          OatOf+s+qLg6Y0G5lvvPiorKsp+1shporVtWD0uGa9I=
Subject key identifier:   42:51:18:F5:19:4B:DD:CA:8C:B1:6D:B4:ED:D1:E2:82:BF:C2:60:CB
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584A7E7B6C61984CCC748D8BCF00
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/56ad9c83-4928-3274-ad1e-bc9b339fc175.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36040
IP address blocks:        104.237.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:6c:61:98:4c:cc:74:8d:8b:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=6c07ff73-1be1-4437-bc17-dbb79c031844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:29:79:48:af:14:b8:0b:d3:27:ca:35:ba:8f:
                    b3:9a:98:31:31:0e:ea:03:8f:54:9b:33:45:ac:6b:
                    bb:f3:88:8b:3a:db:4d:4f:e5:26:50:46:bb:2a:30:
                    cf:0d:fe:12:4d:2a:3a:83:83:ef:c5:76:e7:4a:41:
                    41:7e:4f:52:db:ea:85:1c:20:96:df:f7:ce:1e:3c:
                    ae:5a:ff:c3:6b:c9:50:15:4c:c4:59:27:86:f8:5a:
                    ec:17:c9:97:d3:94:01:5e:20:7c:4a:d7:a6:6c:23:
                    d5:f7:55:4f:2b:b0:7b:d2:8b:c9:b0:f0:83:3d:79:
                    42:ea:ee:f8:49:14:c0:a4:ba:14:03:03:ac:5e:a0:
                    58:e8:cc:be:ce:77:dd:41:eb:12:7d:e1:6a:f2:fd:
                    37:cf:54:a5:8f:3b:9a:52:ff:2e:83:16:ff:57:ea:
                    0a:2c:c9:52:56:a9:7d:e1:47:e2:17:f2:e1:9e:8a:
                    45:bc:07:28:31:a1:22:7f:16:d6:c2:c5:b3:93:fa:
                    d6:0b:9d:5a:9c:f3:dc:82:df:f7:f5:d9:5f:14:6e:
                    a3:c5:ea:3e:b0:f7:24:64:6b:0d:c9:bd:cf:12:9f:
                    b4:a1:41:51:1c:87:31:d3:5e:78:a9:db:6e:2d:1e:
                    8d:f2:98:38:84:1c:a4:7d:cf:50:c8:0d:e0:9e:66:
                    1d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:51:18:F5:19:4B:DD:CA:8C:B1:6D:B4:ED:D1:E2:82:BF:C2:60:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/56ad9c83-4928-3274-ad1e-bc9b339fc175.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:ec:3c:ed:af:38:33:1d:b1:78:3f:69:9e:f4:de:11:77:5e:
         04:19:f4:0b:1b:16:77:ab:2a:fc:fc:08:6c:8c:9d:bf:3d:04:
         54:53:dd:88:28:b4:04:0f:89:9b:30:d3:02:f0:bb:05:26:b5:
         64:b4:77:64:72:9b:c9:f6:aa:d1:89:28:9b:9f:39:19:6e:96:
         c5:d0:8e:1b:8c:b4:06:4c:b3:2a:a4:e8:f8:7a:07:3b:65:81:
         38:e6:e2:fc:a2:bd:7b:ab:85:c3:b5:23:ba:d4:06:c7:4f:d5:
         5d:59:94:f1:2c:30:a1:6a:b5:70:b4:12:38:a9:59:61:1d:3a:
         d0:71:23:d7:92:f4:37:cb:8e:50:21:05:ca:9a:ba:1e:dc:d8:
         42:32:95:81:a7:58:37:d6:e0:60:cc:ad:2a:8e:4d:e2:65:0c:
         89:e8:d7:6a:a0:75:79:7c:47:61:49:d7:d5:2a:d0:15:39:f2:
         9c:bb:ab:08:fc:a7:2c:4b:fa:98:0c:d3:6e:9a:f1:b5:00:37:
         ab:48:16:26:b0:be:53:31:f9:db:69:f6:38:d2:5c:15:98:f1:
         57:39:e1:fe:47:fd:89:7d:09:b6:3f:6a:c8:e2:3f:41:67:ba:
         1a:2a:83:4c:65:ce:37:b7:6c:a6:a0:ad:be:f6:bc:3f:a4:02:
         ec:62:da:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:38:30 2025 by rpki-client