Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/e64013ff-a494-390a-99f3-f25478bdc891.roa
File:                     e64013ff-a494-390a-99f3-f25478bdc891.roa (raw, json)
Hash identifier:          yuniRJZqvD0A+3l/og5yfQ3bWq+ZiDvzhANYW7iU1ao=
Subject key identifier:   CF:78:C3:A4:FE:38:AF:01:51:5B:25:F5:19:0F:C7:37:3D:41:F0:8F
Certificate issuer:       /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
Certificate serial:       010D0C9F4328584A07D5301DB3381F2D171E4C00
Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/e64013ff-a494-390a-99f3-f25478bdc891.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     53828
IP address blocks:        104.218.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:30:1d:b3:38:1f:2d:17:1e:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=87050ad3-b29f-42ef-93ed-67c0bebef068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d3:00:23:00:f3:e7:14:87:f4:68:e7:f7:30:
                    33:a2:62:a5:38:96:80:17:6f:1d:d2:7c:d5:4e:04:
                    b2:ce:87:a6:19:7b:8e:3d:36:3e:85:02:3e:34:71:
                    a2:85:81:74:e1:87:8a:65:a2:63:cc:04:bb:cb:0f:
                    16:7f:33:b0:a8:db:96:2a:38:b0:97:ec:49:7e:6f:
                    f6:0f:6d:d1:d5:52:c7:cf:1e:bd:17:f6:68:bf:e2:
                    42:ee:e8:86:a6:21:35:9f:30:5e:fc:9a:95:e3:b3:
                    48:a2:fe:67:5e:92:eb:e7:e2:38:63:e1:fc:7c:4d:
                    4a:0b:be:c1:da:cd:2c:ab:7a:79:5c:95:3c:7d:96:
                    8a:f9:14:e3:1e:1b:36:33:5e:81:4c:e5:e7:6e:64:
                    c3:cd:5e:94:1f:82:49:00:36:09:6f:71:a4:4c:80:
                    fe:e9:8b:f7:af:f2:9c:a2:8c:e7:eb:6d:ac:0f:ec:
                    6b:b7:f0:aa:2f:fe:6c:39:26:ab:4f:9e:e0:d0:4f:
                    52:b3:a3:91:8c:5e:96:6c:81:46:2d:69:25:d5:57:
                    4e:1a:d1:af:7c:1f:4f:8c:0f:5b:c9:56:ad:15:73:
                    68:bf:cd:b0:a8:e1:48:96:cd:05:d4:d9:19:b9:cc:
                    75:47:b2:37:1d:28:0f:d3:ae:e2:93:ea:85:63:50:
                    3f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:78:C3:A4:FE:38:AF:01:51:5B:25:F5:19:0F:C7:37:3D:41:F0:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/e64013ff-a494-390a-99f3-f25478bdc891.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl

            X509v3 Authority Key Identifier:
                keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:d3:4f:47:b7:c2:6a:5d:ae:e1:30:d7:c7:e3:e9:28:f6:37:
         07:90:29:58:dd:23:8b:5e:0a:51:fd:bb:54:fc:61:ef:02:c4:
         86:11:4c:b4:a2:31:ab:10:71:3d:c4:d8:a6:b9:de:45:fb:7b:
         f4:0c:d1:53:6d:02:73:93:f9:5c:c9:81:bb:e9:d3:b8:4c:bc:
         c8:20:0b:8e:d6:45:91:d7:cb:8d:13:e0:7b:01:69:14:74:dd:
         0d:0f:e9:88:04:96:ea:32:be:2e:9d:cf:2a:b3:6a:d8:8f:7a:
         c1:15:37:99:91:5b:c3:e3:ca:91:ca:8a:ea:a3:6d:4a:6f:12:
         f0:db:a7:61:7d:f0:1d:82:06:0d:8d:59:59:3b:51:e8:f3:e3:
         9a:e5:bc:fd:62:85:88:ae:70:98:60:43:a9:1f:43:d4:fb:7c:
         79:1c:d7:bb:bc:1f:b8:0d:71:cf:83:ea:b5:6b:06:ea:0e:a5:
         65:a7:41:a1:23:e6:8c:62:0a:20:19:6e:18:3f:c5:a4:ff:8b:
         5e:50:94:67:e6:04:63:ba:5c:66:f1:52:ff:8e:5d:a3:8f:56:
         6a:d9:01:bb:e6:dc:8b:98:25:8d:3c:75:fe:22:19:3c:74:f5:
         f5:c4:f3:92:88:9f:2c:c4:a4:e9:4f:04:c0:e3:f8:4a:66:b5:
         1a:5d:f6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 09:16:30 2025 by rpki-client