Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fb44ef4a-e864-367f-82eb-6e041374e8b7.roa
File:                     fb44ef4a-e864-367f-82eb-6e041374e8b7.roa (raw, json)
Hash identifier:          Lo92oPxCsjLiAU8ZiBbuqie4Zsgv4q7obaAW89eKQh4=
Subject key identifier:   3D:F0:51:55:20:3C:1E:96:57:1C:F6:88:42:48:A7:71:14:BB:77:4E
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858498E64B4B7D39E6375C4D6C6A0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fb44ef4a-e864-367f-82eb-6e041374e8b7.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     41264
IP address blocks:        104.132.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:b4:b7:d3:9e:63:75:c4:d6:c6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=39d2c1b5-001c-44bc-abd8-9903c6cf3c57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a9:4b:22:23:8f:fd:51:0b:1e:7a:c5:29:6e:
                    40:1e:5f:e6:65:47:23:83:9d:a4:73:aa:6d:38:e3:
                    5b:7b:df:d5:f8:50:78:9e:43:7b:af:a6:bc:b0:34:
                    85:03:25:20:29:79:af:2d:e0:72:f0:4f:0d:28:00:
                    56:30:6f:2f:8b:be:0e:94:06:cb:d4:03:d4:a2:5d:
                    e3:47:39:af:8e:27:5f:b3:b4:91:b1:d8:1c:f0:d1:
                    d9:61:22:50:00:6c:da:29:75:be:de:e5:02:88:5b:
                    ae:e0:47:05:97:fc:55:87:5c:75:66:82:96:a0:9b:
                    5e:83:4c:65:8b:6a:b2:8d:fc:4f:ee:c8:bf:e6:2c:
                    c5:ab:bb:cd:9b:8c:0c:38:24:c2:5b:ed:f6:2d:7d:
                    08:f1:cf:44:34:87:d5:5d:aa:db:61:83:a4:d3:7c:
                    be:9f:db:06:cc:c7:ef:8e:5e:f9:98:c7:87:3a:85:
                    fe:2e:9b:73:83:28:f4:5d:62:65:18:0a:e8:cd:60:
                    45:c9:e0:fc:b9:97:46:93:95:38:9a:aa:4b:3c:3d:
                    fa:68:83:6b:48:28:a8:20:d4:30:fb:7e:b1:50:e1:
                    6c:19:69:c9:c9:23:1e:74:b9:90:57:21:8c:f4:83:
                    76:ea:9f:8c:c4:02:03:97:53:6a:ad:c6:00:bc:ef:
                    8f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F0:51:55:20:3C:1E:96:57:1C:F6:88:42:48:A7:71:14:BB:77:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fb44ef4a-e864-367f-82eb-6e041374e8b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:55:a8:0b:6b:a4:86:61:95:e8:41:b0:6f:a9:63:2d:01:a7:
         6c:2a:f4:e3:16:7e:c0:8f:3a:6b:a0:b6:3c:54:f1:e8:3f:6a:
         2b:f2:c5:37:09:35:ed:88:70:10:98:f1:64:47:cb:ab:de:35:
         10:a0:d9:1a:72:73:2a:52:7b:22:73:64:c7:ac:2e:45:6b:75:
         c2:c8:55:08:6a:b1:d5:1c:69:58:e9:21:32:26:cd:57:c0:d3:
         2b:8e:d4:fb:48:09:37:18:2a:84:f7:40:14:cc:ad:43:30:ab:
         ec:82:64:cb:e3:75:40:73:4d:49:7c:d7:34:24:c5:95:c9:44:
         79:22:6f:fd:20:d8:b0:02:60:a8:7a:85:86:1b:b5:f1:a1:57:
         91:26:76:a1:cc:89:01:3b:1c:6c:03:fc:3f:86:b4:dc:d8:b3:
         73:52:7b:7f:53:9f:15:cd:b6:55:30:95:d6:46:e6:d0:1a:f5:
         c7:6f:7d:03:53:76:8d:7f:15:a1:e1:8c:79:e2:21:a3:14:5a:
         ef:28:f9:34:17:e9:e5:28:aa:04:6b:09:ae:c1:49:7d:37:a4:
         55:0a:53:32:91:27:34:8c:cd:7a:61:fc:45:b9:7f:6d:01:9a:
         94:af:7f:13:82:63:18:cb:e6:5b:4a:ec:3a:54:50:47:f7:d2:
         73:2a:9d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 18:55:47 2025 by rpki-client