Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5bd6d3f0-ad1c-3a56-b7d8-7729a1402ba8.roa
File:                     5bd6d3f0-ad1c-3a56-b7d8-7729a1402ba8.roa (raw, json)
Hash identifier:          Qq/ji8rP8CTvJsT6Xm0/UhWU4azSWMAG0kEoBbJgAIo=
Subject key identifier:   AA:A1:FB:84:91:B0:98:08:18:04:D4:BD:71:39:9A:F9:15:B1:DE:08
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285849912F42B1477A4E26F408B580
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5bd6d3f0-ad1c-3a56-b7d8-7729a1402ba8.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     41264
IP address blocks:        104.132.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:42:b1:47:7a:4e:26:f4:08:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=e038cbad-bff2-4a8c-bf6b-41d1b31d6433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:57:91:87:d9:4e:cf:f4:2a:2a:e3:9e:01:c5:
                    42:01:2f:d9:81:7b:a2:21:0f:e8:f5:05:17:74:a2:
                    05:c3:50:96:08:bf:5b:70:fe:a6:7f:9c:ad:bf:85:
                    15:01:12:e8:3d:cb:2e:51:5a:6f:ec:75:b7:8c:2b:
                    0d:e8:cb:03:82:1c:48:51:41:92:ec:5d:f2:12:bc:
                    14:52:38:cd:06:dc:20:51:2e:37:25:fd:20:d6:ae:
                    66:2b:25:a9:a9:03:a4:1c:3f:a3:a8:2b:54:98:d2:
                    8b:a3:e1:4f:44:bc:ce:d8:42:77:09:d4:15:a7:3b:
                    9d:82:87:a7:52:69:a2:e8:27:0c:0e:16:0e:3e:bc:
                    67:99:07:1b:45:8a:7e:d3:f1:a1:f3:ae:37:c2:24:
                    a3:8c:6a:38:1d:94:e6:a9:17:5f:39:ac:fb:72:ed:
                    c5:e7:f1:0f:03:7b:11:75:f5:a6:1e:1c:54:83:53:
                    fd:03:7e:90:7a:76:bb:da:77:a0:79:9d:d8:32:39:
                    b0:62:d2:c4:81:6d:dc:28:5c:e6:23:0e:c6:2a:5b:
                    1c:2c:72:31:b9:40:a5:59:c7:b1:86:da:5a:e4:8a:
                    d9:d9:9a:43:d5:03:48:c2:d2:c6:af:fc:a5:c0:e0:
                    91:45:61:fa:ca:a1:02:57:93:a8:26:0b:85:6f:b6:
                    47:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A1:FB:84:91:B0:98:08:18:04:D4:BD:71:39:9A:F9:15:B1:DE:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5bd6d3f0-ad1c-3a56-b7d8-7729a1402ba8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:20:8b:ab:de:e2:47:0a:26:d3:25:89:a2:d7:25:37:76:37:
         69:f4:34:25:ae:33:dc:f6:57:21:3a:51:6b:f8:14:2c:13:61:
         3d:75:c0:93:b7:fb:42:72:fe:07:ab:9e:3b:ce:34:91:9a:80:
         05:7f:95:93:52:26:1b:a6:20:29:74:26:e0:f6:30:65:65:e6:
         26:7f:98:1f:c1:7a:64:c9:da:f7:fc:fc:0f:6c:12:13:b0:8d:
         30:33:72:cf:08:e2:79:1f:94:13:a9:0c:07:ec:48:a7:12:4f:
         d7:2c:72:59:9a:e8:6b:7f:5b:ef:b0:92:f4:20:95:c8:b0:cd:
         7d:9f:d2:79:43:30:45:af:06:7c:db:47:9c:64:c3:c4:e0:9c:
         7f:25:ef:6c:07:70:c6:01:f3:b7:1e:44:a0:07:f8:19:86:c1:
         53:85:e0:39:82:a8:f1:5e:af:cf:89:b5:6a:ad:b4:96:2d:ae:
         50:82:6c:23:d6:4e:95:70:6d:95:91:16:5d:e8:88:b9:5f:97:
         1c:ef:db:d2:c0:6e:55:3e:ee:16:c3:42:6e:5b:79:ce:9c:cf:
         7a:21:46:60:a8:a4:42:62:59:7c:89:09:41:eb:81:f0:81:fd:
         ce:c4:12:c8:01:b1:96:80:ff:4f:4b:fe:ae:aa:97:69:8a:cf:
         2e:60:6f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 18:39:48 2025 by rpki-client