Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/68c7cef3-ad21-3620-9cf2-1ece7789aa58.roa
File:                     68c7cef3-ad21-3620-9cf2-1ece7789aa58.roa (raw, json)
Hash identifier:          3RJAsjbMhU87g24qJb0HeGx6YjfyAIz8PcOjIZFD3HQ=
Subject key identifier:   F2:06:DB:62:82:E4:E6:4A:28:01:99:41:99:8D:15:AF:52:8B:53:EF
Certificate issuer:       /CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
Certificate serial:       010D0C9F43285849DC8FD14C40ECB42A95EE8780
Authority key identifier: EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/68c7cef3-ad21-3620-9cf2-1ece7789aa58.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     399883
IP address blocks:        104.247.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:d1:4c:40:ec:b4:2a:95:ee:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=7ae12de0-5aa2-4d68-8c1d-cb8322a7c2f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fd:0b:fd:ab:2d:e9:3c:22:4a:2e:f7:5e:42:
                    3f:98:12:25:4d:6f:10:6b:70:46:77:f5:af:3d:c2:
                    22:a3:c5:02:9d:07:84:c8:47:1b:00:89:e6:83:db:
                    79:aa:b5:ef:a8:3c:8f:45:c0:c1:03:ce:ca:8c:52:
                    a5:47:a7:2e:e1:84:16:9b:20:d5:de:00:12:e0:f3:
                    52:f1:5a:a4:15:9f:f2:9c:e7:81:5f:65:b4:04:ef:
                    95:3d:4b:5b:a5:de:c7:28:44:29:bf:af:74:52:aa:
                    92:26:5f:4f:b4:36:79:59:17:ee:25:aa:4b:2f:14:
                    93:ac:29:fc:2e:15:6e:e2:21:3d:c7:c9:51:63:31:
                    ae:59:ac:c4:34:86:f4:aa:4f:62:5b:56:0b:10:ee:
                    a3:38:6c:71:63:1c:98:e9:7b:81:4b:f9:3b:fc:ac:
                    59:55:48:1e:ac:83:b4:32:3d:81:75:d3:13:aa:7a:
                    6e:d1:99:2a:8e:88:06:cb:86:0f:79:5f:20:44:28:
                    9c:63:1c:94:ce:f9:e8:d5:1f:b3:43:da:14:c3:29:
                    63:cd:14:24:09:fb:a4:01:c5:96:c1:65:ff:19:a0:
                    dc:93:34:66:53:15:00:7c:09:f8:04:6a:41:5e:e8:
                    52:c7:88:f0:e5:b7:be:8b:d1:5b:73:4b:2d:0d:c0:
                    64:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:06:DB:62:82:E4:E6:4A:28:01:99:41:99:8D:15:AF:52:8B:53:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/68c7cef3-ad21-3620-9cf2-1ece7789aa58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl

            X509v3 Authority Key Identifier:
                keyid:EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:73:6e:fa:f6:82:a3:3c:81:52:2b:b1:03:09:42:7b:a1:21:
         ea:f2:ad:ae:0e:e4:37:31:d1:68:50:da:90:6a:10:b9:46:e2:
         73:73:df:e4:ef:32:6b:dd:77:b0:ff:ee:0e:07:36:d7:26:0b:
         2b:26:d6:e2:ef:4d:0d:46:d4:d9:0f:b7:76:d3:9e:58:21:f3:
         e6:cc:08:e8:df:20:d3:31:db:8f:2c:9f:f4:49:90:0b:d0:e5:
         38:4e:fb:48:56:e9:15:16:52:8c:58:38:ef:c1:d2:ab:43:32:
         07:7d:b9:6a:29:48:10:05:9e:65:2d:7a:1d:43:f4:61:91:01:
         57:ea:a7:4c:0b:e5:48:9b:73:d8:de:07:8f:84:af:89:29:bc:
         45:a8:e7:1b:0e:6f:6a:42:dd:70:c9:76:70:3b:44:22:ad:20:
         7d:3d:35:29:7a:de:54:f3:0d:cb:22:29:14:2e:24:37:d2:2c:
         0e:4a:1a:86:68:5a:97:ce:60:bf:75:c5:33:27:56:92:43:21:
         d0:ba:50:fa:a3:99:c0:21:07:f3:77:c5:30:0c:f6:9b:e5:a8:
         60:f1:16:db:96:9e:0f:22:5d:65:48:c8:98:59:56:8a:a5:8e:
         b8:5d:9a:15:6d:dc:26:61:c1:4c:1f:ba:b4:f0:47:a6:6d:ab:
         cc:c1:30:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:43:04 2025 by rpki-client