Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/b374f0bc-10c9-322d-a1cf-28657cac8276.roa
File:                     b374f0bc-10c9-322d-a1cf-28657cac8276.roa (raw, json)
Hash identifier:          cFvKr4SazIjrpkfxzQ8JOg2tIcgSK61G+GH/VTW7QK8=
Subject key identifier:   96:35:00:F3:92:EE:54:F3:B7:54:56:82:9B:D5:26:D3:66:97:48:32
Certificate issuer:       /CN=4632e5fd-374e-430f-9af3-308c1ec6c72d
Certificate serial:       010D0C9F4328584A51D07706A077E85410214880
Authority key identifier: 8C:DC:E9:8C:D0:6A:A4:EE:96:EB:AE:99:01:C5:47:9D:8B:AE:0F:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/b374f0bc-10c9-322d-a1cf-28657cac8276.roa
Signing time:             Thu 26 Jun 2025 13:01:04 +0000
ROA not before:           Thu 26 Jun 2025 13:01:04 +0000
ROA not after:            Wed 24 Sep 2025 13:01:04 +0000
asID:                     395261
IP address blocks:        104.247.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:d0:77:06:a0:77:e8:54:10:21:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4632e5fd-374e-430f-9af3-308c1ec6c72d
        Validity
            Not Before: Jun 26 13:01:04 2025 GMT
            Not After : Sep 24 13:01:04 2025 GMT
        Subject: CN=640732dc-6a22-4459-a888-e85cff81b05e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0d:3b:14:36:fa:58:ef:73:95:28:ee:d8:c4:
                    9e:dd:f8:4f:c1:3c:9f:55:8b:fe:d1:fa:5c:48:0b:
                    4a:ea:c1:e6:55:56:15:f1:cc:90:f9:a7:45:1a:05:
                    9e:a6:7b:03:9e:5d:83:a2:da:15:da:8b:f2:30:0f:
                    a7:5a:98:f5:7f:94:a7:c5:bd:4f:4e:52:97:3a:68:
                    97:42:c5:e5:50:ad:ed:4f:4d:d7:63:1d:b5:18:73:
                    41:08:de:bf:85:d0:04:11:c1:dd:82:4f:18:d3:3c:
                    e1:01:2b:52:cb:81:a6:17:23:dd:b7:e1:2b:99:9c:
                    1a:14:d3:fe:e1:80:36:ea:5b:96:61:27:2f:65:ec:
                    b9:08:d2:4e:bc:0c:aa:50:51:c6:7b:30:0b:15:06:
                    4a:fe:1d:64:c8:3b:dc:9f:b4:d3:b0:e0:c0:34:e6:
                    4a:ee:fc:3a:9a:a5:b2:31:53:25:56:44:b0:56:0e:
                    be:51:ee:7a:60:b0:6f:c6:cb:80:42:8b:84:2b:4c:
                    56:d0:a8:d6:51:55:20:fd:ca:53:1f:31:55:0b:6b:
                    12:0e:e7:f6:96:fe:a8:a8:e8:ca:60:a0:a7:e3:35:
                    57:aa:9e:57:74:8e:06:9a:48:df:bb:1e:a9:0d:25:
                    90:4f:b6:68:ad:07:b8:0b:c4:0d:4a:4c:ac:00:de:
                    97:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:35:00:F3:92:EE:54:F3:B7:54:56:82:9B:D5:26:D3:66:97:48:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/b374f0bc-10c9-322d-a1cf-28657cac8276.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:DC:E9:8C:D0:6A:A4:EE:96:EB:AE:99:01:C5:47:9D:8B:AE:0F:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:2a:5d:a1:93:8f:a2:dc:2f:7a:8a:ff:b8:01:b5:bf:45:6a:
         c7:4e:20:9f:13:20:32:2a:98:9a:40:86:ee:5b:3d:6b:bd:7b:
         63:50:1d:a3:5b:0e:95:68:f0:bb:c3:89:0c:ec:bf:3f:f1:79:
         9f:38:6b:c0:62:d3:4c:85:16:0f:3d:e6:28:3e:9e:b6:f0:57:
         97:92:9e:6c:99:fd:d6:39:a6:73:6c:c5:d3:2c:33:41:a9:b1:
         94:b1:58:d4:21:81:58:98:0b:2d:a3:18:e5:d4:ff:88:52:5b:
         90:f6:10:41:9b:3c:77:12:48:be:58:ad:80:a0:7a:a4:26:59:
         33:d2:6b:9c:31:5c:48:9a:21:7c:39:7b:42:3e:de:e7:eb:47:
         0d:31:6e:c1:92:26:8e:d6:a9:5c:0f:12:26:06:09:8f:d6:84:
         f7:33:d5:d7:3d:df:52:dc:59:29:4e:01:74:ce:fc:e9:04:e1:
         f3:90:fc:2b:4b:0e:20:cc:3e:b3:b1:59:0b:20:4b:8b:58:5c:
         37:4d:d7:49:9a:b5:8c:b5:f3:71:f6:8c:58:76:6e:9d:bd:e4:
         f4:d3:2b:23:2c:15:cf:82:a7:29:13:9d:69:40:7d:e9:f8:3f:
         c5:de:09:bf:34:72:5d:ed:26:e0:9f:39:4e:48:af:7a:fc:f6:
         13:3c:23:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 23:27:54 2025 by rpki-client