Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1456b2c4-b163-35b6-aa74-06bade212436.roa
File:                     1456b2c4-b163-35b6-aa74-06bade212436.roa (raw, json)
Hash identifier:          wiZF91AOsnaMzoABiDn/9Nx8xJhpREZu0MA8P1F0Kzs=
Subject key identifier:   E4:BA:38:F0:CB:2C:57:A4:2C:DD:A1:6B:3D:7B:8A:95:59:CB:8B:57
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285849B6DF495D00232798141E8200
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1456b2c4-b163-35b6-aa74-06bade212436.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     36411
IP address blocks:        104.132.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:49:5d:00:23:27:98:14:1e:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=1b1222d4-783d-4d3f-ac06-2f372128ec66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:16:59:57:11:c8:e5:92:86:25:6a:bd:9e:05:
                    ab:a8:7a:0c:e4:fd:bc:a9:43:c8:fb:a7:df:5b:84:
                    2e:f2:08:0b:c5:af:cb:04:e9:c8:1c:c5:31:02:8e:
                    4a:3c:39:f2:e1:2a:b6:d3:12:bd:93:54:75:17:a9:
                    01:1b:11:7e:a3:fe:66:61:34:7a:a6:79:92:f9:fe:
                    6a:17:39:f9:38:6f:76:50:4f:81:af:76:98:bd:38:
                    66:4c:27:3a:ec:28:53:d3:2a:ff:1c:76:79:bd:cf:
                    89:72:9c:9e:a6:e4:be:c4:ca:39:1f:32:51:36:66:
                    cc:a9:8d:ee:38:66:b7:dd:0d:0e:7c:13:f4:32:13:
                    a5:10:8e:5e:71:36:b7:79:43:a7:1d:34:2d:66:cd:
                    64:bc:b2:25:0d:15:a2:ff:b6:f3:37:ef:10:93:93:
                    43:c6:fb:29:d0:f7:46:d1:9b:39:0e:11:4d:d4:22:
                    9b:4d:79:a7:8f:5c:9b:b8:65:fb:06:05:27:46:b5:
                    3b:03:29:d3:25:0d:97:68:2f:e4:cc:56:c7:67:8d:
                    9c:ec:d4:df:6b:11:36:5b:f9:d4:cf:7d:41:2d:56:
                    82:52:ae:f9:98:b0:a4:e0:35:06:b7:2d:7e:ac:ca:
                    d7:0a:c5:02:a3:76:34:62:00:f4:6f:9c:84:b3:7a:
                    a0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:BA:38:F0:CB:2C:57:A4:2C:DD:A1:6B:3D:7B:8A:95:59:CB:8B:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1456b2c4-b163-35b6-aa74-06bade212436.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:f5:f2:7e:70:77:cb:c9:3d:4f:f8:50:a3:88:58:82:65:4d:
         17:06:63:0e:cd:1d:31:40:19:48:c5:e9:8f:d5:a3:9b:83:ce:
         12:2b:c4:9e:91:71:3c:83:dc:89:54:46:6c:20:77:ae:f7:9c:
         83:ed:aa:e9:c1:f6:34:57:1d:48:83:bd:8b:fe:0e:37:d0:5e:
         78:be:e7:f9:03:b0:df:e4:a3:7b:dc:ef:ae:93:b4:8a:db:1f:
         92:7c:2a:ac:96:eb:4b:33:fb:75:e8:11:6d:e2:9f:2b:2e:e3:
         c4:ac:24:2e:53:ce:91:7f:4c:1d:b5:de:8e:06:14:c8:60:e8:
         51:4d:37:47:6e:da:c9:c4:8f:ae:14:28:47:11:9a:60:77:fa:
         93:da:dc:7e:5d:5a:0d:91:54:86:8e:49:72:b2:cf:e2:f2:d7:
         92:f9:ef:7f:87:b9:53:9c:a1:b6:50:c4:28:88:83:9a:27:58:
         74:e6:91:03:c2:80:7c:bd:ef:ec:2b:67:09:04:9b:53:d7:f3:
         f0:b1:82:57:07:93:fe:1e:05:14:dc:ef:ea:06:d8:03:dd:c5:
         34:7a:1c:ad:f9:7c:41:7c:19:d9:de:51:8f:5c:8b:a0:71:1b:
         2a:54:ae:e5:e2:42:7d:bc:a7:11:64:25:d7:93:b0:91:c3:71:
         a5:49:93:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 19:53:36 2025 by rpki-client