Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/9718eaa5-902c-304e-82b3-887053b44a54.roa
File:                     9718eaa5-902c-304e-82b3-887053b44a54.roa (raw, json)
Hash identifier:          Vp3PjeCTU5SJaGM0G/T0SswYYySUmjI+/zHRQDMOxq0=
Subject key identifier:   04:A5:2E:84:DD:38:D2:16:3D:00:FC:A7:99:A0:AA:A2:0F:94:A0:1B
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849E654F5B796A802199598C900
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/9718eaa5-902c-304e-82b3-887053b44a54.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     7936
IP address blocks:        209.133.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:54:f5:b7:96:a8:02:19:95:98:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=f0b6e97a-329c-4931-918f-73ed9189d4cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:90:99:8f:30:32:cb:b1:2d:e3:c2:dd:9d:bf:
                    80:08:91:cb:39:28:8a:3a:44:99:0b:ab:d1:9a:c2:
                    0c:2e:e9:df:0c:77:be:23:dd:ba:e1:49:a9:79:36:
                    07:68:66:57:1c:7e:8b:b8:27:b7:13:50:09:23:e4:
                    1f:99:91:ed:6d:2a:9e:ed:ab:cd:2c:06:6e:96:e1:
                    9c:2d:ac:64:55:f8:f1:59:b3:c2:9e:51:21:3a:92:
                    9f:67:bc:1b:7c:84:1b:cb:f9:ba:2d:55:78:78:e6:
                    8f:24:0d:e7:fa:60:af:22:ed:31:9a:aa:32:fe:60:
                    d4:03:ff:1b:18:b1:f2:00:03:85:d5:a3:64:08:37:
                    df:30:41:23:06:16:52:16:41:76:61:19:c0:76:5b:
                    66:47:65:19:45:3b:90:d3:4c:54:65:c3:51:c3:ad:
                    25:c4:4e:5b:56:be:ca:15:61:de:f8:cd:8d:92:f9:
                    2e:ba:df:14:96:51:90:a4:f1:7b:67:3a:03:3c:a8:
                    9d:1a:af:98:e3:b9:ca:52:84:82:ea:59:00:c0:6d:
                    a4:24:83:ac:64:ed:6f:9f:af:bd:72:2e:c1:72:3f:
                    cf:d2:bb:72:47:0c:34:49:ba:1f:cc:4c:8a:9c:3d:
                    92:a0:97:f4:f0:66:69:8f:ce:49:8a:76:aa:a6:58:
                    44:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A5:2E:84:DD:38:D2:16:3D:00:FC:A7:99:A0:AA:A2:0F:94:A0:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/9718eaa5-902c-304e-82b3-887053b44a54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.133.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:7a:49:46:ac:07:0a:d0:65:72:11:52:47:4b:e4:ef:cd:4d:
         a6:a8:11:4b:2e:00:06:09:85:19:d0:57:80:00:5f:ff:f6:df:
         d0:b1:7f:cc:bf:9a:b2:bc:b2:ac:7f:b7:1f:e3:15:df:e3:69:
         ad:7d:99:b4:81:c6:9e:19:30:4a:30:6a:83:89:75:00:19:e1:
         c1:d3:50:4c:bb:dd:f6:5b:30:35:5f:92:ba:d2:45:40:47:fe:
         18:be:96:d1:c8:dc:5f:e2:9e:ae:a6:98:0e:61:a1:09:61:6d:
         ea:93:f9:89:9c:60:a5:4e:8d:22:84:71:14:9c:6a:37:37:d1:
         24:24:23:fd:4c:89:c9:ed:fa:c1:8f:f4:eb:86:a0:b8:33:19:
         a1:9b:83:4a:64:03:ea:44:e1:e3:5a:f1:f6:f3:fd:b5:a3:19:
         a7:ea:b8:10:23:dc:b3:32:12:2f:c4:c3:92:e9:07:a4:0d:33:
         ca:94:37:f1:ba:38:ac:c2:2d:14:b7:8b:e9:cd:ea:ed:53:09:
         27:47:03:49:60:1c:fb:f6:31:bb:32:f3:98:fd:29:77:ea:c8:
         58:7c:c4:6d:c2:89:d8:21:ae:9f:5a:d4:6f:db:c0:76:f8:8f:
         49:e5:31:53:b1:d4:47:26:f6:08:d5:82:22:3a:4c:31:26:d4:
         d9:1b:26:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 15:45:03 2025 by rpki-client