Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/54ed55ff-51d2-32c7-b46f-d983c80ffff8.roa
File:                     54ed55ff-51d2-32c7-b46f-d983c80ffff8.roa (raw, json)
Hash identifier:          4TLhb8RXkXEAhlCLaGzn7gddgsqBTbIJcbc7kq0ilxg=
Subject key identifier:   B9:E0:DD:06:CA:27:E1:D2:8B:35:CC:C7:DF:2E:B3:4B:2B:FC:AD:86
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858499F24DCD978C7B0AF57510398
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/54ed55ff-51d2-32c7-b46f-d983c80ffff8.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     395973
IP address blocks:        104.134.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:dc:d9:78:c7:b0:af:57:51:03:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=863aad58-8ceb-4899-891d-732404131886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:6f:ac:a9:56:38:c3:9d:11:9d:2b:f6:d4:b9:
                    78:e0:1f:31:a8:5b:53:47:1d:e4:b0:41:44:22:c4:
                    e8:73:1b:b8:a6:5d:d6:80:66:55:19:b8:c7:2c:a3:
                    9e:7e:07:64:e0:66:28:6c:a9:6d:98:95:1c:a0:1a:
                    ca:68:a2:7e:5a:96:89:08:53:d2:92:62:37:84:0f:
                    5f:31:02:53:6b:9a:3e:12:2e:db:5a:e1:42:25:de:
                    c7:d7:0b:ad:2b:69:6c:93:a6:37:84:3e:11:c6:31:
                    a4:3c:c2:04:4b:92:59:10:d1:0e:c9:fc:d4:6a:0e:
                    5a:f1:4e:bd:25:04:d8:54:fa:04:81:ef:43:62:f3:
                    cb:0f:c0:26:55:dd:10:dd:d6:fe:9b:e3:47:6b:d7:
                    46:52:6d:bb:33:18:2f:30:e7:d4:ef:77:40:41:79:
                    d0:22:1a:79:51:7b:a6:39:0f:8d:ec:6f:e4:db:8b:
                    da:04:40:d9:71:38:fb:ff:90:34:99:7c:12:6d:24:
                    c6:b6:47:a1:90:a7:cb:5e:63:f5:2f:33:64:c7:70:
                    dd:ab:ef:ce:d1:a4:d5:81:74:7e:95:b4:2e:1a:77:
                    33:f6:bc:65:48:48:95:e6:d1:49:cd:85:8a:c4:54:
                    66:cf:2e:b3:f5:01:d1:45:de:02:eb:23:a2:b3:2a:
                    02:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E0:DD:06:CA:27:E1:D2:8B:35:CC:C7:DF:2E:B3:4B:2B:FC:AD:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/54ed55ff-51d2-32c7-b46f-d983c80ffff8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:44:4d:45:ff:60:b3:e3:f0:2d:b5:8b:11:95:c1:fa:38:61:
         34:e9:98:cb:e0:3b:a4:fe:96:e0:2c:b9:5d:d6:ba:e9:c9:de:
         2a:b3:09:be:b7:9c:b9:f0:bc:90:86:20:2d:94:93:de:a0:3f:
         92:91:d1:2e:5e:4c:c9:03:70:d8:36:e4:6b:82:ed:92:b5:57:
         5b:05:bd:bb:a9:2a:fd:7d:df:b5:c9:27:25:13:5c:7b:87:f5:
         c9:03:23:0a:4e:46:b5:31:48:eb:5b:a7:f5:b4:38:83:40:de:
         68:63:ee:b6:cf:df:16:76:f1:2d:7a:95:f0:e3:b8:67:06:59:
         3f:c4:5f:58:3f:8c:3e:0b:1d:8c:51:e5:43:de:f8:b5:c6:84:
         f1:b8:36:09:cb:60:0a:9f:b3:99:61:36:79:3d:48:23:92:5f:
         3a:86:a5:70:4d:28:f4:f3:ef:d9:3f:86:0a:7f:39:74:9f:56:
         ab:87:1a:f7:da:cf:04:d0:ad:b5:0d:30:0e:0e:ff:6c:33:98:
         4f:11:3f:e6:c2:b2:7d:e7:77:b5:60:2d:9f:a7:e1:3a:a7:cf:
         74:5c:64:f0:09:cb:ac:08:2e:a5:bd:0d:03:8f:df:80:aa:ef:
         da:7e:8d:42:3e:b5:37:bc:18:9e:9d:a2:b2:8d:62:09:59:8d:
         ad:b1:ee:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 18:52:05 2025 by rpki-client