Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b09b8ccb-eb67-3a30-9d51-24dfc031880b.roa
File:                     b09b8ccb-eb67-3a30-9d51-24dfc031880b.roa (raw, json)
Hash identifier:          3kQxFogXCDa1qIBc3lmh3z1uH9PI3aNpmz3Bf4ST2/k=
Subject key identifier:   6C:A4:11:C3:52:F5:5E:E1:92:F1:70:CB:CC:F0:8E:BB:72:E2:EA:DA
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584A2ABAEF8438EF3FF546468500
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b09b8ccb-eb67-3a30-9d51-24dfc031880b.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     11404
IP address blocks:        104.220.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:ef:84:38:ef:3f:f5:46:46:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=43ac9cb9-9ded-4fb1-b018-653306e3ad75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e3:16:29:58:f7:87:22:97:41:86:2c:2a:c1:
                    05:a5:ff:75:79:cb:58:33:f9:20:b0:3d:b3:e7:b7:
                    48:84:94:2c:e6:01:fd:66:e4:0a:27:64:8b:f0:3a:
                    31:04:84:13:33:02:f1:f3:cd:6f:86:4c:e7:2c:e0:
                    57:de:42:b2:a1:fa:7d:ba:16:16:2e:30:1a:3b:e3:
                    4d:ef:d0:7f:83:b6:76:3e:4d:bc:76:42:53:98:f0:
                    4a:4b:70:1b:d3:47:9a:6a:d7:9e:58:5b:81:d6:b9:
                    bb:f2:6b:db:10:fc:d0:cf:11:b2:7b:74:6c:f1:1a:
                    2a:16:d5:c9:de:bd:67:c1:97:61:2f:ec:39:cf:c7:
                    37:62:e0:2f:57:24:df:e5:93:c6:eb:c9:0b:19:39:
                    fe:08:72:9a:e2:1c:a1:fd:4f:f3:0e:d9:f0:3c:bb:
                    44:fb:c4:95:34:a2:58:2d:e6:7f:5d:d5:20:74:f3:
                    cd:f8:79:29:17:c1:e7:50:76:d4:14:02:51:de:c3:
                    1c:b8:e6:ae:db:55:f3:14:ae:9f:98:68:0c:6e:93:
                    d4:9a:78:93:7f:af:86:9c:ac:80:f0:15:b1:cc:db:
                    3d:3e:90:eb:85:b0:e3:c8:91:d5:a8:9a:a2:c6:bd:
                    12:ec:57:6d:b1:70:b9:3f:d5:6b:bc:1b:b0:71:7d:
                    56:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A4:11:C3:52:F5:5E:E1:92:F1:70:CB:CC:F0:8E:BB:72:E2:EA:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b09b8ccb-eb67-3a30-9d51-24dfc031880b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.220.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:62:bb:b2:ba:cd:c1:8d:b0:5b:d7:78:cd:9c:a6:ed:66:5a:
         19:2b:18:d6:62:19:91:bd:d1:fa:40:f8:d2:52:86:1c:0b:a0:
         6a:8c:da:0b:a4:db:8a:74:48:34:19:07:f8:ef:75:30:5e:f9:
         d1:6a:81:ae:25:4c:4c:c1:d1:63:d5:90:a2:af:21:c1:35:5e:
         e2:bc:46:6b:72:f1:ba:59:c7:04:f6:71:e7:be:11:c8:7a:c7:
         97:10:2c:2a:ec:fc:66:43:e4:f4:a0:1f:ce:42:6c:f9:c7:dc:
         f7:5d:cb:5e:0e:56:f6:2b:3b:76:37:e8:f1:95:1f:0a:87:d2:
         d7:c4:8c:54:df:99:83:15:9d:a8:b8:aa:9c:9f:03:58:05:a5:
         d6:44:c6:05:2f:53:43:5f:a2:b1:ca:dd:02:6b:31:29:7b:78:
         7d:9f:e4:7b:a5:b5:59:1a:11:f8:aa:f8:73:99:0d:d5:02:0f:
         e0:0b:76:f0:08:27:11:a1:3d:d7:28:bb:53:1e:21:86:1c:ca:
         31:6e:89:9c:fe:b4:91:f6:13:05:d9:cb:14:4d:05:72:08:be:
         db:75:34:b7:7c:ba:e3:f4:85:11:3a:3d:06:83:08:b8:fa:12:
         85:b9:28:cb:54:42:89:cf:ab:35:39:ae:c4:6b:9b:ee:02:4d:
         93:a4:9c:23
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEoquu+EOO8/9UZGhQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk
NDNhYzljYjktOWRlZC00ZmIxLWIwMTgtNjUzMzA2ZTNhZDc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+MWKVj3hyKXQYYsKsEFpf91ectYM/kgsD2z
57dIhJQs5gH9ZuQKJ2SL8DoxBIQTMwLx881vhkznLOBX3kKyofp9uhYWLjAaO+NN
79B/g7Z2Pk28dkJTmPBKS3Ab00eaateeWFuB1rm78mvbEPzQzxGye3Rs8RoqFtXJ
3r1nwZdhL+w5z8c3YuAvVyTf5ZPG68kLGTn+CHKa4hyh/U/zDtnwPLtE+8SVNKJY
LeZ/XdUgdPPN+HkpF8HnUHbUFAJR3sMcuOau21XzFK6fmGgMbpPUmniTf6+GnKyA
8BWxzNs9PpDrhbDjyJHVqJqixr0S7FdtsXC5P9VrvBuwcX1WDwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGykEcNS9V7hkvFwy8zwjrty4uraMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvYjA5YjhjY2ItZWI2Ny0z
YTMwLTlkNTEtMjRkZmMwMzE4ODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAaNwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAS2K7srrNwY2wW9d4zZym7WZaGSsY1mIZkb3R+kD40lKGHAugaozaC6Tb
inRINBkH+O91MF750WqBriVMTMHRY9WQoq8hwTVe4rxGa3LxulnHBPZx574RyHrH
lxAsKuz8ZkPk9KAfzkJs+cfc913LXg5W9is7djfo8ZUfCofS18SMVN+ZgxWdqLiq
nJ8DWAWl1kTGBS9TQ1+iscrdAmsxKXt4fZ/ke6W1WRoR+Kr4c5kN1QIP4At28Agn
EaE91yi7Ux4hhhzKMW6JnP60kfYTBdnLFE0Fcgi+23U0t3y64/SFETo9BoMIuPoS
hbkoy1RCic+rNTmuxGub7gJNk6ScIw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 18:40:20 2025 by rpki-client