Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e5db84ea-dc67-3764-aa04-e899e7340306.roa
File:                     e5db84ea-dc67-3764-aa04-e899e7340306.roa (raw, json)
Hash identifier:          8FYOOiMIa1o6Aj+ZaJDP2lK9GCM7NZGoRE4H9dK0lyE=
Subject key identifier:   D2:BF:9C:AB:DB:38:6B:E8:16:C7:70:A1:F1:18:AB:3A:F6:54:2F:3C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849C79F5F6F1A3A8A8DEAF4A600
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e5db84ea-dc67-3764-aa04-e899e7340306.roa
Signing time:             Thu 08 May 2025 01:00:47 +0000
ROA not before:           Thu 08 May 2025 01:00:47 +0000
ROA not after:            Wed 06 Aug 2025 01:00:47 +0000
asID:                     13335
IP address blocks:        104.23.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:9f:5f:6f:1a:3a:8a:8d:ea:f4:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May  8 01:00:47 2025 GMT
            Not After : Aug  6 01:00:47 2025 GMT
        Subject: CN=0fe77fef-145c-4f7a-ae71-7c997925ed87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:37:e5:8a:ad:a9:76:ba:6e:ed:e0:44:0a:fc:
                    c7:c8:86:cd:2a:51:ee:d3:19:e1:0a:b8:c5:2a:d3:
                    3c:22:02:74:0c:2e:fb:14:03:1e:35:e8:12:ed:f8:
                    37:07:bb:ac:59:ef:4b:04:72:ce:fd:fe:63:bb:89:
                    34:9d:a0:5e:d0:9a:54:24:f2:74:18:44:75:c2:d2:
                    9f:f8:2d:f4:b0:67:a4:37:72:97:81:98:c7:ee:b8:
                    6e:fa:ed:68:62:1b:84:29:11:19:5f:fe:22:9a:8a:
                    f6:b0:a2:bb:e0:de:14:50:81:5e:fa:95:3a:4c:e3:
                    88:02:66:a6:9c:10:a9:35:dc:ab:63:e7:2e:89:e1:
                    71:3f:d4:ef:93:df:0a:80:fc:ee:9a:41:26:21:46:
                    e4:eb:b6:16:dc:77:88:30:80:5e:71:ce:b1:6e:66:
                    6f:0d:22:9e:2b:21:09:f1:69:79:55:6e:4a:46:32:
                    96:c5:13:30:62:03:b2:e5:34:87:85:cb:8c:21:69:
                    ff:e5:54:0b:ed:49:82:42:03:a4:d9:5a:22:97:ae:
                    ff:9c:ec:bc:85:5b:d8:15:71:68:3b:b3:42:1a:55:
                    b3:e4:19:1f:b6:cd:61:35:d2:94:05:4c:b9:81:1a:
                    07:84:40:99:44:14:61:05:54:c2:0b:43:be:fd:de:
                    b9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:BF:9C:AB:DB:38:6B:E8:16:C7:70:A1:F1:18:AB:3A:F6:54:2F:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e5db84ea-dc67-3764-aa04-e899e7340306.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:96:bf:7f:63:18:0b:c2:5d:6a:a0:d4:cc:40:91:79:a4:52:
         f9:1a:68:65:9a:5a:a3:4e:4d:81:f0:4b:45:a2:45:54:90:23:
         66:b6:fd:1f:32:56:45:9b:2c:db:17:a5:28:4b:b0:cc:c6:a4:
         be:d7:4d:d3:4d:fb:4a:76:3b:20:96:2a:84:05:39:f7:6c:75:
         6d:7f:d8:92:40:fb:77:9f:f1:14:2d:50:ee:5d:37:e7:67:4f:
         fa:3d:39:0e:41:2c:35:3a:42:23:77:8c:55:ad:8d:bf:60:cf:
         cc:bd:66:8e:44:85:7f:65:77:15:cd:53:05:51:c9:a3:cb:be:
         6f:01:8a:71:8b:fa:7a:32:ec:f9:74:61:7c:ea:50:58:f9:21:
         dd:2b:c9:cc:d2:ad:53:b5:cb:7b:55:2a:4b:3a:38:d5:93:9c:
         9e:4b:e6:f9:38:90:d0:22:2a:32:fd:3f:f6:fd:12:76:8e:50:
         87:c4:22:58:b3:cd:fc:dd:c4:3b:ad:1b:4c:57:3f:7c:ff:4d:
         5f:1a:68:9b:d7:29:cd:fc:72:7e:66:5a:09:65:79:2c:4d:1f:
         d8:be:20:1b:78:c5:bd:74:6e:cc:3d:d5:1e:d3:d6:9b:fc:1e:
         bd:70:78:9a:10:5c:4a:a5:46:20:bc:61:a7:87:77:75:6e:7d:
         3e:66:20:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:48:36 2025 by rpki-client