Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0037158-14fe-3a80-9b60-40eed02eec2a.roa
File:                     f0037158-14fe-3a80-9b60-40eed02eec2a.roa (raw, json)
Hash identifier:          7aV4mwDzLy3c7G3XvgSyOIAfN6LN4Rwe5weHzo5FkKs=
Subject key identifier:   0D:89:02:6E:51:94:11:9A:21:CC:CC:84:49:41:DC:55:87:86:80:16
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A18955675D374314CE7D7DE80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0037158-14fe-3a80-9b60-40eed02eec2a.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     20940
IP address blocks:        104.114.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:56:75:d3:74:31:4c:e7:d7:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=9b93abd3-3147-411e-ad5b-7272ce5de053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:06:c6:8f:55:18:8f:e8:c0:e7:5d:01:29:5e:
                    8c:ba:c7:d7:18:1b:b9:71:99:59:5a:70:38:29:c9:
                    c1:fb:56:77:5f:de:fc:c3:50:10:51:92:3a:f3:ec:
                    39:09:48:fb:d2:d6:da:34:74:38:8b:3b:18:a3:56:
                    88:4d:0a:0c:29:ad:e5:7f:4c:3d:da:35:3f:e0:ed:
                    34:6d:3d:6a:5f:6b:75:00:e4:93:40:65:51:e3:5d:
                    4d:56:fb:59:7d:05:3e:0f:b7:32:71:5d:46:ae:79:
                    56:57:ed:4e:80:97:18:18:ea:7c:9f:8c:03:14:8c:
                    25:0e:a9:aa:58:29:3d:c7:00:aa:59:7a:fa:de:11:
                    4a:6c:fb:4d:1e:a8:e2:a3:57:03:72:8f:27:66:6c:
                    8a:ef:28:03:2c:a4:03:08:98:e0:27:34:b0:4d:76:
                    2a:87:7f:7b:1b:cd:cf:24:2a:c7:21:4d:60:90:8a:
                    92:e4:d7:5d:c5:52:e9:34:d4:fe:26:be:95:76:9a:
                    9c:9f:93:1b:8c:62:c4:4e:bd:b5:c2:01:b3:61:b0:
                    15:bb:82:cf:b4:aa:77:a9:d9:72:da:a7:3f:f8:16:
                    ca:75:b7:cb:94:e5:0d:0b:d1:80:36:2f:cd:13:22:
                    5a:a7:86:12:49:2d:92:da:21:d9:aa:c0:f2:6d:0f:
                    0f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:89:02:6E:51:94:11:9A:21:CC:CC:84:49:41:DC:55:87:86:80:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0037158-14fe-3a80-9b60-40eed02eec2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.114.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:dc:04:4f:46:25:08:70:c2:fa:fd:1e:ab:d5:89:73:2e:05:
         0d:61:fa:ce:2c:64:18:33:15:93:ae:27:96:aa:63:81:b4:35:
         0f:a3:25:09:38:24:81:2d:9f:9d:3f:e1:df:59:46:cb:d6:53:
         62:bd:b6:af:9f:5d:13:92:30:96:65:53:3e:66:7e:4d:e5:ac:
         86:de:75:83:14:bc:d9:9a:ec:10:8e:b0:9e:10:3c:ea:3b:5f:
         22:c9:69:6f:7d:78:b9:0a:69:98:b6:1e:f2:e8:95:60:9d:84:
         81:52:d8:99:55:98:2e:66:f2:24:17:6b:85:8f:03:f5:ed:c7:
         50:4b:1c:70:97:91:f0:52:82:de:ad:d3:1d:13:c4:e0:5f:39:
         5e:9b:5d:e3:6c:e5:70:b2:a7:bb:24:e9:b5:db:35:20:6e:36:
         40:93:36:ff:93:d0:c9:fd:d6:5e:eb:a9:0d:15:0e:57:13:11:
         00:b0:77:61:b1:ec:4e:61:e3:85:5d:f1:b3:85:56:78:2f:0e:
         df:e4:08:93:9f:5d:75:9c:5b:c0:e6:f6:3b:4c:fb:ba:8d:52:
         ff:b0:1f:57:ad:02:5d:6f:00:19:0b:de:16:c8:f7:2a:0e:3e:
         7b:bc:f9:ac:a8:7d:76:38:00:c0:67:3e:76:9e:05:b2:32:42:
         64:22:b2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:40:14 2025 by rpki-client