Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/b843c24c-9470-32c3-9572-a733f7a4b73d.roa
File:                     b843c24c-9470-32c3-9572-a733f7a4b73d.roa (raw, json)
Hash identifier:          bG/P9U8BmwKdY1RkzL8Z+JuwkAwmBjA/HDkl0yfa9A4=
Subject key identifier:   BC:D9:97:97:DF:0F:CB:A1:15:40:EA:14:42:96:39:CD:54:87:74:16
Certificate issuer:       /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
Certificate serial:       010D0C9F43285849F17FA7623E619EDB05D770A0
Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/b843c24c-9470-32c3-9572-a733f7a4b73d.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     21782
IP address blocks:        104.156.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:a7:62:3e:61:9e:db:05:d7:70:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=e56a4e4f-b5f1-4ef3-93cf-284aacba9b24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9e:32:18:62:d7:fd:9d:c0:a4:40:05:a9:6f:
                    4d:16:73:70:fe:59:e6:79:69:8c:85:05:77:17:fa:
                    77:3d:50:c7:ad:0f:09:f2:80:2e:89:25:10:fc:d2:
                    f1:73:e1:f8:60:22:bd:02:5b:9c:9b:e4:45:7b:70:
                    b0:df:fd:ad:f2:b8:5d:c1:ec:25:2f:20:2e:29:76:
                    fe:64:a0:c3:2d:b1:26:06:d6:32:0b:78:19:7c:ca:
                    89:c8:52:a0:81:07:48:bb:66:7e:b2:c5:ad:f2:b3:
                    00:54:e8:80:93:f7:0c:ba:e8:1d:9f:7a:99:ce:7e:
                    0e:63:5a:77:5e:ad:ed:9d:f5:28:b4:4d:95:31:de:
                    bf:35:25:aa:cf:36:e1:9c:4a:f1:51:25:b9:cc:76:
                    19:c3:e5:98:ce:cf:2c:32:a1:9c:be:08:20:6b:0a:
                    92:de:4a:b2:51:9e:94:61:63:58:27:ae:3d:ce:1f:
                    22:43:f3:3b:53:0b:83:43:61:04:8f:60:c8:58:23:
                    10:d9:87:d6:26:47:f8:50:4b:04:ff:da:ec:2f:f9:
                    1c:3d:fd:d7:6c:96:33:cd:35:26:91:85:3e:59:ee:
                    50:2d:dd:d6:8e:7c:e7:64:44:71:79:23:ea:78:33:
                    e6:81:4b:8d:03:07:86:67:ba:d2:84:96:09:a3:a1:
                    09:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D9:97:97:DF:0F:CB:A1:15:40:EA:14:42:96:39:CD:54:87:74:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/b843c24c-9470-32c3-9572-a733f7a4b73d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl

            X509v3 Authority Key Identifier:
                keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:e4:6e:d6:92:78:0c:db:54:5c:15:3a:17:1b:aa:70:bf:4a:
         2f:20:a5:c7:ee:71:1c:08:5b:15:51:e9:ae:44:76:1d:8c:f1:
         6c:89:4d:fe:f9:09:26:ef:8c:a5:3c:b4:a0:d0:a7:68:e6:73:
         8f:11:fb:53:4e:ff:87:18:08:b2:20:43:09:34:15:93:f4:f2:
         b2:a1:0c:ee:cc:b5:2f:3c:d1:55:ae:09:90:68:25:24:5f:d3:
         19:20:1f:b3:94:51:5e:20:b1:d1:8d:eb:07:9d:da:19:f9:d3:
         78:4b:24:b9:4d:3c:94:12:92:b9:47:be:54:17:91:5a:b3:7f:
         d4:20:c6:61:24:f6:f4:aa:21:de:ec:04:4d:da:22:91:ac:0e:
         27:85:46:01:74:eb:4c:21:48:41:dc:b0:ec:a5:a2:e8:2a:4b:
         87:97:8b:bf:ec:ce:c5:67:14:f5:96:12:b3:15:a2:34:0a:c8:
         a7:b5:33:81:10:52:4c:e2:29:d5:fa:21:be:0b:7c:8d:51:80:
         6f:f1:27:03:42:ae:27:90:f5:9f:e3:08:04:9a:f4:61:03:2e:
         7f:83:c3:9e:43:b2:3d:f0:45:00:51:8f:73:56:98:2c:09:80:
         86:44:7d:a1:10:a2:ce:e4:35:61:9a:ba:6b:ac:10:ee:72:61:
         eb:4c:2f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:27:31 2025 by rpki-client