Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/57c6ac0c-b7d8-3275-af3b-980d7a5c658c.roa
File:                     57c6ac0c-b7d8-3275-af3b-980d7a5c658c.roa (raw, json)
Hash identifier:          dKxJOA6fiOPYCK6eWDqTLVQq5EZ6ehA3gbzu6YZ6/Hk=
Subject key identifier:   86:F3:14:11:7C:11:C3:82:83:E6:35:82:F3:A0:11:07:69:C9:A8:C5
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584993F9F8DBCA15E98BAC3A6300
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/57c6ac0c-b7d8-3275-af3b-980d7a5c658c.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     41264
IP address blocks:        104.133.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:f8:db:ca:15:e9:8b:ac:3a:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=dd62e809-aeec-47ea-8ccb-0c129590925f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:32:22:b5:5a:c9:ae:f6:fe:3f:4d:4b:06:0d:
                    ec:68:89:1c:5a:48:91:40:b2:3e:f1:2b:7d:bc:1e:
                    84:a1:79:02:06:68:da:03:8e:7c:11:17:ab:15:59:
                    1f:a8:8e:e6:57:29:1f:6d:40:77:52:da:ce:71:6c:
                    b0:70:b5:83:85:e0:f2:40:ab:d3:3a:90:dc:bd:2e:
                    b7:02:33:41:25:b6:fd:0e:68:cb:66:63:d2:2f:c2:
                    81:80:db:28:a1:51:bb:9f:8d:ee:4d:da:b5:5a:f0:
                    10:79:26:a0:a7:8d:99:71:31:69:7c:c3:f0:f3:e2:
                    07:0e:21:e4:9d:aa:55:a7:ff:d9:b0:e9:c2:b6:f5:
                    c9:41:ec:b1:a9:cb:db:3c:a9:1a:a5:89:ea:8f:e7:
                    61:14:d9:1e:e4:db:3a:63:39:82:c9:79:24:a5:f1:
                    4d:ff:95:ad:b7:8a:73:a6:9c:61:f6:cf:73:fb:c5:
                    82:06:c2:34:86:e4:53:60:40:f3:a5:24:a5:7a:54:
                    58:18:01:5f:5b:65:d8:af:2e:44:d9:d0:e3:81:8f:
                    3b:57:5f:c2:4f:51:c9:2d:a1:3b:e0:95:19:68:32:
                    63:78:f7:2b:df:94:92:33:fa:97:61:6c:46:4f:91:
                    db:a4:6a:a2:5e:8f:25:88:a0:aa:24:f9:7a:68:d3:
                    9b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F3:14:11:7C:11:C3:82:83:E6:35:82:F3:A0:11:07:69:C9:A8:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/57c6ac0c-b7d8-3275-af3b-980d7a5c658c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:6c:ca:28:81:e2:8f:3d:73:1e:7b:8d:36:7c:3b:56:5e:c5:
         b3:a4:71:73:32:a9:21:94:21:fe:b4:c7:26:21:83:e5:8e:35:
         b1:82:78:44:59:62:ba:ce:b5:97:60:65:09:db:fd:bf:0f:68:
         db:e0:82:23:9d:e5:ed:c5:e7:23:cd:ae:20:65:92:34:12:71:
         64:74:da:7b:a9:64:c2:4b:67:a3:10:ec:be:04:26:28:d6:b5:
         8d:cc:3b:f1:aa:5e:24:2b:8e:79:cf:24:3b:3a:82:39:eb:8a:
         3f:6b:33:8d:56:50:2b:40:56:d5:e3:d1:7a:8a:4e:cf:cb:b6:
         c1:3b:07:45:51:19:47:11:70:56:6b:ca:f1:c2:05:40:8d:e1:
         9f:af:f3:22:82:1a:dd:46:5e:21:94:58:2a:a6:bd:01:45:0c:
         3a:37:b9:16:e8:46:e5:40:1b:41:aa:7b:ff:14:17:4e:5e:3e:
         f8:0f:54:f6:9c:53:c2:1f:db:bc:c0:0d:01:e0:c1:8c:e5:ed:
         76:ec:3d:1a:60:eb:52:91:ee:16:56:7f:69:68:e5:ed:f5:2c:
         14:7b:88:9c:3d:3c:ca:f5:59:25:4f:d0:a5:4d:6e:cb:f4:7d:
         97:fc:11:36:0a:07:63:d4:5f:c2:58:f1:fe:54:32:d3:31:76:
         12:83:ca:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 18:27:01 2025 by rpki-client