Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/f510d550-7434-3fef-8852-d051d7ee7c5d.roa
File:                     f510d550-7434-3fef-8852-d051d7ee7c5d.roa (raw, json)
Hash identifier:          +s1gKR3O1X8RoEUtcN0l66gFt2pmPrRKM91fY0kiqd8=
Subject key identifier:   7C:47:0E:98:5D:E1:85:27:A0:7F:BC:DC:74:9B:CB:37:C1:3F:B4:B7
Certificate issuer:       /CN=146a096d-134a-4c52-9243-da3981810107
Certificate serial:       010D0C9F4328584A3823BF9433BF259CA10E3280
Authority key identifier: 8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/f510d550-7434-3fef-8852-d051d7ee7c5d.roa
Signing time:             Tue 17 Jun 2025 08:18:03 +0000
ROA not before:           Tue 17 Jun 2025 08:18:03 +0000
ROA not after:            Mon 15 Sep 2025 08:18:03 +0000
asID:                     26658
IP address blocks:        104.243.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:23:bf:94:33:bf:25:9c:a1:0e:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=146a096d-134a-4c52-9243-da3981810107
        Validity
            Not Before: Jun 17 08:18:03 2025 GMT
            Not After : Sep 15 08:18:03 2025 GMT
        Subject: CN=937e95b4-9b25-4585-b203-da07c3073cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7e:a2:d9:fa:19:6f:cd:2a:3f:9a:7b:6c:85:
                    72:de:81:4b:63:a2:e9:32:e7:ce:4e:1d:61:2e:f1:
                    34:43:db:0b:0b:35:06:1d:f2:4c:b3:da:04:2f:d9:
                    b6:3f:0f:0e:c4:c2:4f:e4:d7:b4:fd:4f:f0:7c:6f:
                    45:09:3b:33:49:76:51:c3:43:cd:79:c9:4e:60:a8:
                    cf:27:48:94:b6:1d:5f:4c:a9:a2:a1:03:08:16:3e:
                    43:be:f5:6e:82:e9:38:c3:66:d8:00:34:7f:6e:f0:
                    72:52:ad:94:b2:af:2c:ac:0a:84:80:cb:eb:72:23:
                    42:fd:70:78:f8:10:65:64:75:cb:85:47:f9:16:74:
                    ce:6e:5e:e5:37:ab:09:a6:36:58:95:4d:a1:f9:9b:
                    ae:b6:91:46:b1:01:65:e8:38:3b:a4:d1:90:17:b8:
                    95:b9:e5:68:c7:19:c5:32:eb:b2:98:d8:1e:e3:19:
                    b5:be:1f:5f:07:b0:ac:12:9d:4d:d2:a6:7f:25:fe:
                    14:2a:50:14:57:be:93:cb:d2:1a:68:59:ab:f7:71:
                    62:aa:f7:ff:7b:38:f8:db:79:b4:6d:34:05:d1:62:
                    b7:a2:47:23:0c:81:49:4c:27:5a:6e:60:de:da:c9:
                    77:8b:ee:86:9f:85:0c:c9:0d:d2:36:c6:d1:ba:05:
                    e0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:47:0E:98:5D:E1:85:27:A0:7F:BC:DC:74:9B:CB:37:C1:3F:B4:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/f510d550-7434-3fef-8852-d051d7ee7c5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl

            X509v3 Authority Key Identifier:
                keyid:8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.243.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:a2:9b:a4:c3:3d:40:f2:27:95:6d:a1:9e:f3:5b:51:ea:ea:
         8c:ca:89:2d:12:a5:36:54:b3:d0:c8:86:f2:53:67:79:0d:7a:
         f5:6a:39:7c:0e:d1:b7:a1:af:11:b9:21:17:c7:0f:c4:3f:78:
         41:9e:79:80:eb:69:7c:94:29:c7:9a:3c:08:9d:79:48:a7:49:
         7c:9d:af:f1:a7:6d:64:e4:07:1a:c9:3a:f8:eb:3c:11:74:74:
         bc:61:80:42:de:43:dc:22:c3:eb:40:3c:c0:ee:2f:85:0b:7e:
         06:1e:33:e4:80:d0:57:26:90:15:9f:c1:3c:f0:55:f0:01:e2:
         b8:a2:44:cb:c9:e4:60:9b:1b:d5:fd:56:4c:14:2b:e4:3e:c5:
         5e:56:6a:7e:c3:c9:2f:db:87:66:46:ec:74:16:e1:55:ee:43:
         da:eb:ef:3e:99:71:d7:19:66:89:db:7f:d8:a6:3f:43:56:58:
         a1:db:e8:09:11:ca:99:fb:e8:d3:64:ab:7e:f6:75:cc:4f:5e:
         19:27:1d:41:c0:8f:87:64:97:04:93:bb:d0:3d:9c:c5:59:9d:
         1a:46:1e:c9:d6:89:dc:f5:94:f1:33:d1:43:f6:73:66:ce:70:
         16:f2:6c:18:90:f4:3f:d2:39:a2:2b:1d:cb:58:53:b8:10:c9:
         d6:73:b3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 23:29:52 2025 by rpki-client