Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/44d13c76-0cc5-370f-8756-3bab26cf9b95.roa
File:                     44d13c76-0cc5-370f-8756-3bab26cf9b95.roa (raw, json)
Hash identifier:          FopHrWKdw/x3UWaVj1J/8d3lxqZdK/pZEPedTbLFxkM=
Subject key identifier:   EB:C0:C8:71:6E:43:95:E3:F7:E6:AA:2D:03:FC:C1:97:F5:B4:EF:26
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584AB650D906A526C44627378C80
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/44d13c76-0cc5-370f-8756-3bab26cf9b95.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     11572
IP address blocks:        104.244.52.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:d9:06:a5:26:c4:46:27:37:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=95bd16b9-eb95-4c37-8931-ce5cd16a59fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1f:35:9d:12:70:34:27:40:3c:12:82:0f:a2:
                    3e:36:39:87:53:bd:d6:0c:3c:ca:2f:c4:c0:4e:01:
                    cd:00:99:3e:d3:dd:1e:fa:37:a4:83:64:05:dc:0c:
                    f2:20:c7:32:d0:71:d4:e5:d6:77:cf:bd:be:46:28:
                    62:cb:be:d2:45:e1:c5:cb:31:c8:f2:d0:d7:36:3f:
                    25:6a:ec:ae:49:d3:b4:e3:b2:fd:d2:1d:34:f2:45:
                    0c:fd:7b:5c:47:df:15:dc:dd:5d:1f:4e:5d:4e:49:
                    65:03:3f:fa:e8:65:dd:47:eb:0d:95:50:3d:70:47:
                    e2:e2:3a:e7:d8:f4:f3:dd:3c:d8:1c:bc:c9:22:ff:
                    bc:b3:74:1a:3a:78:e3:32:5c:92:78:b9:1c:67:56:
                    7f:8e:f2:75:89:e5:9a:db:36:48:28:51:ae:d3:8d:
                    ba:61:c1:88:39:1f:ca:29:3b:74:de:4b:d8:45:97:
                    de:21:87:25:ab:c6:ca:88:93:9d:70:d1:a0:25:7d:
                    88:ac:c3:70:16:a0:9d:68:d7:e0:34:9e:15:09:9b:
                    ce:3b:5f:d2:21:e6:85:5c:f4:5a:fb:6a:7d:62:7d:
                    18:88:88:fe:da:0b:e0:76:18:79:47:a1:ba:23:a4:
                    05:67:e9:b8:eb:da:f4:3c:ac:e0:1f:ce:51:c9:ce:
                    d0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C0:C8:71:6E:43:95:E3:F7:E6:AA:2D:03:FC:C1:97:F5:B4:EF:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/44d13c76-0cc5-370f-8756-3bab26cf9b95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.244.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:0c:d9:b6:f8:51:cd:6d:a2:03:98:b2:9e:0d:3c:b4:96:e9:
         b1:21:aa:55:39:ab:c4:80:06:23:29:30:9d:31:dc:6b:df:1f:
         12:71:73:20:d4:3b:3f:6d:38:8f:b3:04:26:73:b8:2b:fd:95:
         d8:7d:06:ff:9a:4b:56:33:d1:70:a3:a9:d9:6d:26:70:a2:3c:
         e0:71:bd:2a:ea:cc:cd:91:3e:ba:24:ab:5f:98:40:ef:3d:72:
         3d:18:23:f6:eb:bc:f8:12:fe:04:f3:7d:05:61:38:76:18:74:
         6e:05:42:86:0c:52:14:de:42:dc:65:72:c3:b2:a9:3e:c2:4b:
         ff:77:82:64:59:5e:ea:a4:d7:7c:df:83:c2:6b:5f:20:3b:4e:
         fb:a2:1b:15:f5:62:e4:3f:df:ff:b0:7d:63:82:77:84:68:38:
         39:5d:e2:a4:ee:9a:4d:4d:61:48:99:70:7c:76:65:9d:3a:c2:
         5a:f0:ed:e2:e0:50:9b:a7:97:e9:f0:e7:32:ad:0e:e0:ab:e7:
         fd:64:d0:f6:62:b2:9e:23:22:71:96:af:50:26:12:51:eb:0f:
         0d:cc:c5:63:8e:e5:d9:62:4d:dd:c4:20:9f:1b:63:03:a2:40:
         52:37:b2:0d:2b:2e:56:49:47:86:e2:9f:2d:0f:7d:af:09:50:
         cb:5a:f6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:31:06 2025 by rpki-client