Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b1f6f452-0fc2-3ada-851f-a0918334c23a.roa
File:                     b1f6f452-0fc2-3ada-851f-a0918334c23a.roa (raw, json)
Hash identifier:          Jg314JYczqoa8Mx9zDviSZ+EUlFKvkKhy8jSocUte2E=
Subject key identifier:   CE:A7:7E:E0:1D:A0:6F:75:BA:40:28:9C:85:6C:81:9E:76:D4:FB:D2
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584993F9EDF7C2094B08305BFC00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b1f6f452-0fc2-3ada-851f-a0918334c23a.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     15169
IP address blocks:        104.134.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:ed:f7:c2:09:4b:08:30:5b:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=816afd42-3e20-425b-bf4b-bb366ae6882d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:30:5c:5b:6e:51:be:3d:a8:62:71:cd:e9:14:
                    1f:84:8a:2c:29:b5:2a:d9:b6:f5:94:51:f5:9b:a8:
                    17:7a:86:bb:d4:cd:f4:f1:7a:5b:4f:b4:d6:9e:46:
                    d6:e8:c1:9b:ef:7a:d2:56:96:fa:1b:84:16:5c:f9:
                    03:c5:ca:72:bb:8d:d7:f3:a1:09:d3:f7:9b:18:c0:
                    3a:16:84:68:b3:20:73:f2:28:6e:0b:59:69:65:11:
                    22:a5:0a:96:ca:47:7e:9e:14:38:54:56:48:13:83:
                    4d:d6:a7:b1:0c:ef:fe:16:2c:c0:c0:70:17:bd:3e:
                    81:42:b1:bd:40:45:4d:76:a1:67:f3:90:1b:69:90:
                    8d:cf:47:32:b6:8a:14:03:3e:fe:a7:56:73:5c:0a:
                    e5:5f:dc:54:f2:36:9f:4f:d4:b2:1a:b9:39:f0:0c:
                    d2:b8:44:66:de:d0:ad:a0:76:1a:57:6c:dd:bf:ee:
                    af:9b:83:63:93:f0:05:55:59:7f:04:a1:02:5d:0b:
                    78:ea:51:b7:b9:c6:01:a9:ea:fc:63:82:94:12:d4:
                    db:16:13:0b:4d:96:9b:1b:a4:83:8f:d1:bc:d1:6c:
                    53:b2:80:4e:ee:f2:81:01:a6:aa:b3:65:06:cc:8d:
                    76:45:d0:ec:8a:c0:2e:cd:d7:93:9a:bd:1a:ce:cc:
                    0f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A7:7E:E0:1D:A0:6F:75:BA:40:28:9C:85:6C:81:9E:76:D4:FB:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b1f6f452-0fc2-3ada-851f-a0918334c23a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:93:c0:34:38:6f:05:90:9f:0e:ac:b5:4a:ad:cc:b9:eb:8a:
         90:3c:07:37:dd:8b:69:0b:44:32:e8:5a:cc:9a:a9:e2:dd:b3:
         3a:c8:68:7a:64:20:a2:e2:ed:6e:c7:a5:06:57:f5:1d:6a:8e:
         7c:e8:a8:e7:e6:27:cd:77:7c:ec:04:bb:cb:22:08:79:4c:83:
         a6:af:c6:ae:57:a3:58:cd:e0:e8:27:65:47:f5:f9:93:a0:20:
         21:28:12:fd:dc:19:75:47:38:96:ac:a4:95:ed:ee:a8:92:eb:
         b4:a0:52:fd:21:39:fb:76:f9:77:f6:f3:6f:f4:7c:29:42:71:
         c2:2c:ae:9a:51:10:2a:9e:cd:d0:81:40:51:8a:3f:3e:bb:c8:
         3b:3e:d4:8b:bd:96:12:79:7e:21:79:fc:5b:f7:9d:8a:01:49:
         25:c2:b3:24:08:1f:3b:11:e3:b2:fd:0a:ae:04:11:14:66:1e:
         39:a8:16:5c:28:b4:ed:6d:97:ca:b0:71:5f:ab:89:5d:15:b0:
         be:9d:5d:50:83:6d:5b:29:f3:ff:52:dd:ca:1a:8b:cf:60:c6:
         18:0d:3f:74:53:e9:64:0b:3d:5b:db:23:3c:a7:b4:00:87:c2:
         69:00:d8:ec:38:79:dc:95:a4:db:68:28:95:67:ff:80:6e:0f:
         ce:ef:26:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 11:20:18 2025 by rpki-client