Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/a5eff7b2-f77b-3a6f-953a-48c6eccb51de.roa
File:                     a5eff7b2-f77b-3a6f-953a-48c6eccb51de.roa (raw, json)
Hash identifier:          lUZJorPWoq2vI6hZc96I6weFkUtZmQ3E6TohTwSrlf0=
Subject key identifier:   E7:D0:C1:D2:BB:00:8F:1B:CC:A9:23:62:23:BF:CB:B0:52:7A:9E:BE
Certificate issuer:       /CN=58d2b29f-1da9-4b65-a82f-389822bed566
Certificate serial:       010D0C9F43285849CBCF97FBFB8B8A409AA8DF80
Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/a5eff7b2-f77b-3a6f-953a-48c6eccb51de.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     40627
IP address blocks:        104.245.56.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:97:fb:fb:8b:8a:40:9a:a8:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=51aa0e14-e950-4cf7-b990-9f57e4fd5073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:52:a0:e9:5a:43:4f:e0:7e:ba:8e:ae:0e:dc:
                    be:89:c0:c5:95:e2:dc:7e:3e:e4:72:e5:9b:f5:dd:
                    54:cc:eb:51:fc:a9:7b:3e:2d:b2:07:33:50:07:10:
                    30:90:e8:2a:f1:ef:99:4e:61:03:77:9a:dd:4d:c2:
                    d2:50:d7:a0:ee:45:29:0c:76:a4:15:b4:5f:c0:6a:
                    f1:2a:4f:8a:44:f9:9c:aa:31:a2:e2:9d:82:53:41:
                    17:b9:39:48:64:91:dc:a1:57:d5:7f:65:80:6b:3a:
                    74:3e:10:50:40:ca:6f:ce:d6:f4:0f:1e:63:d7:42:
                    83:eb:a5:5e:fe:7c:84:01:4e:09:e0:6a:f6:a7:91:
                    c0:00:4f:7b:ef:81:d8:d6:0a:3a:49:e2:57:14:af:
                    6d:91:2d:bb:03:26:be:5d:4f:9e:7f:be:68:06:2f:
                    a2:22:3d:36:7d:d6:1f:05:e2:fe:e4:d7:43:0f:7f:
                    66:64:45:eb:53:0d:b7:80:e8:66:a2:4d:5a:c5:00:
                    cd:aa:2a:02:3f:f8:3c:88:fc:64:ce:eb:23:30:dd:
                    00:45:5c:26:0a:06:14:50:d2:6b:d5:47:a6:7c:73:
                    74:1d:87:66:50:61:a2:69:01:da:5e:f6:10:8e:06:
                    97:be:40:c6:76:6c:9f:3f:72:67:30:a4:dc:9b:77:
                    61:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D0:C1:D2:BB:00:8F:1B:CC:A9:23:62:23:BF:CB:B0:52:7A:9E:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/a5eff7b2-f77b-3a6f-953a-48c6eccb51de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl

            X509v3 Authority Key Identifier:
                keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:5c:c7:a4:20:8c:a4:3b:ac:01:cd:4d:68:6d:dc:b9:46:83:
         5e:d8:6f:05:03:4b:73:49:43:9b:48:f9:8b:73:ab:94:a1:b2:
         bb:5c:e3:8d:e3:8a:30:2d:85:aa:d5:ad:3a:d0:9f:95:d9:29:
         9a:31:5f:e8:8b:5f:60:d0:cd:82:b8:06:4f:ef:21:1a:dc:b1:
         a6:fb:35:a4:1e:a5:7a:87:6b:94:ad:b9:1a:3a:57:62:8e:d7:
         a4:c8:b3:64:6f:cb:57:76:de:33:70:3a:89:0c:7a:5a:d9:61:
         0f:2a:01:28:f9:df:78:1b:9e:90:30:22:27:e5:60:16:2f:af:
         28:da:00:a0:28:42:fd:ed:a1:58:48:26:8c:1d:59:1e:21:f5:
         df:ae:fc:16:9e:d0:e5:b3:9b:48:c5:d6:48:4e:7c:7b:75:02:
         87:e0:12:64:1b:d9:b1:8b:34:9b:ca:4f:df:6e:64:8f:5e:de:
         b4:60:7e:71:f4:e0:dd:7a:62:ff:f1:81:cd:53:e9:36:6b:73:
         89:ed:da:8c:46:d1:9b:c0:76:8f:b7:2d:ce:03:cb:86:c0:67:
         68:f6:3e:49:d7:2a:a2:59:63:28:ee:8f:7d:aa:43:cf:3e:ac:
         71:4a:b9:10:39:0e:6a:ce:90:ea:24:7f:4c:9e:50:ef:de:4d:
         d4:95:f1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:27:59 2025 by rpki-client