Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e191ef6d-47e3-3471-9a52-01a5c9dd1a52.roa
File:                     e191ef6d-47e3-3471-9a52-01a5c9dd1a52.roa (raw, json)
Hash identifier:          HuPSjTXRCMHS5LMGOE67DK0TPY3rJJlW3VwG9uPZAsQ=
Subject key identifier:   FE:4E:BE:75:40:62:5F:72:7C:EE:63:EC:C8:67:E3:15:F6:75:53:DD
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285849B6DF499F24F9F96F266D9A80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e191ef6d-47e3-3471-9a52-01a5c9dd1a52.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     36383
IP address blocks:        104.135.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:49:9f:24:f9:f9:6f:26:6d:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=a27b4264-c70f-4344-9df1-686c8d890659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:31:ee:90:be:2d:28:ed:78:af:32:96:ba:73:
                    9c:f0:8f:8a:8f:2b:68:92:ee:93:36:96:3f:50:7b:
                    73:a9:dc:62:4f:d9:4a:17:6c:e1:5e:6a:0e:45:fb:
                    eb:45:2d:a6:67:c7:5d:32:54:c9:2c:68:dc:9c:be:
                    6c:44:7f:e1:46:80:c8:8b:48:43:f6:c9:28:e2:9b:
                    84:11:ab:b0:c3:77:43:d5:b4:49:0f:96:26:cb:ea:
                    bd:72:20:f2:aa:2c:b2:51:f8:a5:64:12:a0:cc:d5:
                    c3:0b:7f:e9:b7:42:5c:7d:9a:6d:31:19:4e:f2:5a:
                    60:18:1a:89:91:0b:7a:4e:b9:66:99:b9:2d:da:52:
                    e6:8a:19:0c:08:d0:d1:1e:51:bc:4b:bc:06:92:b2:
                    38:3d:f2:e3:9b:72:9c:12:0e:98:d9:88:9d:3b:eb:
                    b1:7b:46:d8:2d:44:70:27:49:e7:98:9d:04:b9:0b:
                    2b:2a:92:fb:dd:ed:2a:a2:6a:d1:e1:fb:44:ad:19:
                    68:d5:28:dd:30:ca:08:f5:d9:cf:2b:82:e0:cd:23:
                    8b:9e:2c:17:4c:8c:02:05:e8:54:25:28:aa:aa:32:
                    6e:26:d8:7a:38:15:da:6c:ab:e9:19:0e:df:9e:03:
                    d4:48:09:ee:9c:c1:1a:43:9e:f9:ae:e0:18:05:7e:
                    1d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:4E:BE:75:40:62:5F:72:7C:EE:63:EC:C8:67:E3:15:F6:75:53:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e191ef6d-47e3-3471-9a52-01a5c9dd1a52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.135.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:bc:35:35:ba:d4:7b:3a:bb:b2:25:78:87:1e:90:79:40:db:
         96:1b:0f:e4:21:6e:a5:f3:b5:f3:ab:03:43:94:e6:c4:e7:bd:
         7a:e9:35:6e:8d:52:ce:16:06:6c:50:0e:dd:e8:2c:71:b8:70:
         3d:2b:48:a9:2d:7f:db:b4:ff:4c:3b:25:ad:c2:ae:4c:3c:cc:
         c1:07:1d:c4:6c:65:e0:ff:3f:ba:2f:62:11:68:e5:b3:25:d5:
         e6:b0:14:c1:a2:c3:37:7a:94:89:25:87:2d:f0:2a:80:8d:06:
         75:b4:16:98:9b:74:05:a8:4a:68:01:82:12:87:4e:8a:cb:48:
         96:39:cb:3f:be:ad:6f:35:d0:9b:82:7a:5e:42:22:ea:a8:cb:
         97:44:78:22:83:11:5e:c1:10:59:d8:ac:4e:1f:73:49:f8:f7:
         2c:5b:ad:7d:b1:7f:4b:83:27:15:13:73:ef:23:a9:81:75:e5:
         d3:01:36:88:66:e1:9a:18:05:7d:bb:22:bc:4e:5c:34:b5:d5:
         49:83:fa:08:41:29:d5:4e:d0:32:13:55:c8:b3:ed:2a:f3:b7:
         86:88:92:c0:b0:b5:1c:ac:e7:4b:97:1c:d1:7c:29:8b:27:7e:
         6e:dd:93:bc:ec:95:ab:3e:d0:06:2c:b3:b9:dc:0a:c7:48:5d:
         24:3d:fe:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 19:05:43 2025 by rpki-client