Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/6757d0ec-3da9-362b-964a-6f6259402d74.roa
File:                     6757d0ec-3da9-362b-964a-6f6259402d74.roa (raw, json)
Hash identifier:          opt23Vm6+RQTgN1772XtizQdXmzKRyG6iTUsgzUWKY8=
Subject key identifier:   0E:4B:8A:A3:51:6D:E7:1A:9F:31:33:C7:9C:A3:46:6F:6E:39:D8:A1
Certificate issuer:       /CN=41d819be-21e8-4d68-8993-33ab237e51ae
Certificate serial:       010D0C9F43285849EEB4FA968EAB7B6B8E4DA780
Authority key identifier: BF:F7:3C:D9:CA:4A:32:C7:FF:0B:FD:F3:E5:54:10:42:3C:C8:97:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/6757d0ec-3da9-362b-964a-6f6259402d74.roa
Signing time:             Thu 22 May 2025 01:00:51 +0000
ROA not before:           Thu 22 May 2025 01:00:51 +0000
ROA not after:            Wed 20 Aug 2025 01:00:51 +0000
asID:                     395324
IP address blocks:        104.219.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/41d819be-21e8-4d68-8993-33ab237e51ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/41d819be-21e8-4d68-8993-33ab237e51ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ee:b4:fa:96:8e:ab:7b:6b:8e:4d:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41d819be-21e8-4d68-8993-33ab237e51ae
        Validity
            Not Before: May 22 01:00:51 2025 GMT
            Not After : Aug 20 01:00:51 2025 GMT
        Subject: CN=6beb8882-ace7-484e-931d-1b61c6e57ae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:dc:f7:91:ca:86:53:6f:b0:1a:b9:18:ee:94:
                    a6:be:6a:dd:83:85:3a:41:43:92:e9:ec:06:9e:dc:
                    bc:0d:b7:c3:2d:09:f3:54:24:fc:ba:1d:bd:e8:50:
                    f4:f8:ac:09:6a:f2:e8:22:4b:72:6b:d4:1c:01:ae:
                    05:e0:1f:95:ae:df:c5:3e:84:41:c8:26:f2:b6:cc:
                    8f:39:a8:e2:6e:aa:06:e8:58:f2:66:14:29:dd:a6:
                    b7:f1:fc:67:81:cc:1c:ff:5a:ce:1c:07:17:23:5e:
                    f4:8a:26:f2:08:1f:db:ac:57:16:e3:37:67:34:49:
                    25:37:47:49:b5:ce:5b:fe:d0:0c:ed:82:e4:30:f7:
                    26:6e:a2:4b:0e:fe:b0:da:21:eb:55:3e:ea:d0:70:
                    fb:cb:96:22:0d:e5:f8:86:91:cd:e2:ac:b9:b1:fc:
                    1c:08:65:e8:d7:5d:62:52:9b:a2:7c:cb:65:c7:d1:
                    42:bc:6a:d0:fe:34:0c:37:6a:73:e6:6a:e6:1b:6b:
                    f6:7b:16:98:95:b7:39:ad:ff:26:37:f2:2d:fb:46:
                    56:40:a7:14:78:8a:09:45:c4:8c:a5:39:4e:58:f7:
                    eb:e1:d4:0c:5d:fa:b2:ec:c0:2f:3e:c8:c9:71:49:
                    8e:0f:c6:4f:35:24:f2:b1:d7:62:ab:83:5c:f9:aa:
                    e8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:4B:8A:A3:51:6D:E7:1A:9F:31:33:C7:9C:A3:46:6F:6E:39:D8:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/6757d0ec-3da9-362b-964a-6f6259402d74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/41d819be-21e8-4d68-8993-33ab237e51ae.crl

            X509v3 Authority Key Identifier:
                keyid:BF:F7:3C:D9:CA:4A:32:C7:FF:0B:FD:F3:E5:54:10:42:3C:C8:97:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.219.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:01:44:08:96:7f:c3:5a:c3:6a:ef:7b:cc:29:e5:27:89:14:
         d3:51:47:27:91:59:35:5e:ff:8d:4a:4f:aa:46:c4:ac:f6:d3:
         cd:50:94:31:59:8a:b3:df:ed:9e:9a:d3:67:68:2b:fa:aa:58:
         02:76:21:ac:7f:31:4b:69:00:e9:93:64:c3:d9:30:bb:d8:63:
         f1:cc:15:05:71:3b:48:77:19:dc:84:32:9f:7c:55:ed:b9:c3:
         a7:eb:7b:3c:02:d8:39:c3:73:f4:96:6b:de:e1:5f:6e:5b:7c:
         df:49:57:33:31:5f:9d:b7:48:2e:17:ec:a8:43:90:66:d2:b4:
         6f:f5:1f:a7:68:62:34:73:c8:0b:2e:17:b4:bd:22:03:b2:a6:
         fc:6f:71:fe:a4:99:f0:ab:00:5e:9f:92:b2:96:3d:95:93:06:
         db:2d:4c:48:81:9b:de:30:e4:98:4e:d2:cd:ea:2c:9a:66:66:
         7e:c0:f4:a2:4d:23:38:b6:4c:8b:82:74:7d:29:a5:db:9d:c5:
         ca:d1:95:69:58:f0:66:1c:72:b9:03:64:49:b2:b2:d7:8a:c4:
         3a:d6:c0:ca:89:d6:f1:93:bb:ae:27:1a:cf:b2:f6:be:f6:14:
         36:4d:b1:3f:82:01:36:5e:a1:63:88:e8:0e:25:bc:1e:bc:40:
         53:2d:73:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:10:48 2025 by rpki-client