Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d6a27a7a-adec-4b8c-ba89-c39fd750a679/740b987b-5d98-3555-aa27-c7481216b98c.roa
File:                     740b987b-5d98-3555-aa27-c7481216b98c.roa (raw, json)
Hash identifier:          RG31LT9Lb3qN+BrdDvSQEAW4la8+neoEnUjw3x/QS+c=
Subject key identifier:   0F:CA:9C:87:B0:B2:3E:16:D6:EB:E5:FD:95:DE:B6:1A:BD:07:CC:A8
Certificate issuer:       /CN=d6a27a7a-adec-4b8c-ba89-c39fd750a679
Certificate serial:       010D0C9F4328584A4F05D231BFE2955535CD7A00
Authority key identifier: 8F:23:79:EE:B0:4C:6B:B3:25:39:6F:9F:7E:0F:51:D5:43:F6:26:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d6a27a7a-adec-4b8c-ba89-c39fd750a679.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d6a27a7a-adec-4b8c-ba89-c39fd750a679/740b987b-5d98-3555-aa27-c7481216b98c.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     54209
IP address blocks:        104.218.0.0/21 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d6a27a7a-adec-4b8c-ba89-c39fd750a679/d6a27a7a-adec-4b8c-ba89-c39fd750a679.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d6a27a7a-adec-4b8c-ba89-c39fd750a679/d6a27a7a-adec-4b8c-ba89-c39fd750a679.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d6a27a7a-adec-4b8c-ba89-c39fd750a679.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:d2:31:bf:e2:95:55:35:cd:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6a27a7a-adec-4b8c-ba89-c39fd750a679
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=bbc43fa6-cd28-412d-9998-a13abc3d3891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a6:70:6b:da:34:b3:1a:71:63:98:44:60:35:
                    ce:a1:e2:28:58:86:d1:54:89:7f:7c:f8:41:98:d4:
                    b1:40:3a:a7:c3:8b:ee:ef:98:fe:41:b5:26:ea:78:
                    dc:e4:13:58:5b:6c:64:0a:17:b4:5d:57:31:3c:9e:
                    e7:9c:d8:25:15:49:d3:01:c8:0d:fd:d7:d4:92:df:
                    e2:2c:f7:2f:47:19:23:5c:55:28:3a:b7:a1:18:72:
                    ed:4c:df:27:84:bb:c7:83:47:66:6b:44:3c:cb:31:
                    45:5d:7d:68:a9:92:c0:40:49:13:9b:65:1f:38:31:
                    b2:e6:e1:4d:9a:49:03:b9:6c:2f:07:ad:bb:4c:6e:
                    b1:db:21:17:3b:3a:23:6f:ec:34:c2:e3:5f:3b:97:
                    75:2e:1c:00:84:71:26:67:49:a7:25:ba:31:8c:27:
                    93:27:aa:7a:0b:8f:fe:b7:c7:89:6c:e5:e3:7b:f0:
                    e6:71:ba:a6:75:7a:de:7b:cd:29:b7:58:62:d6:8e:
                    52:61:6b:97:de:a7:49:72:5d:a1:f9:3a:d3:da:3f:
                    44:ae:9b:1f:03:72:9f:fe:c0:22:48:01:aa:20:00:
                    90:f6:78:e4:40:c3:6c:03:3d:79:57:8c:d2:2c:ea:
                    ce:98:bb:13:b0:e1:6c:ee:5e:24:c0:bd:6f:62:cd:
                    31:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:CA:9C:87:B0:B2:3E:16:D6:EB:E5:FD:95:DE:B6:1A:BD:07:CC:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d6a27a7a-adec-4b8c-ba89-c39fd750a679/740b987b-5d98-3555-aa27-c7481216b98c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d6a27a7a-adec-4b8c-ba89-c39fd750a679/d6a27a7a-adec-4b8c-ba89-c39fd750a679.crl

            X509v3 Authority Key Identifier:
                keyid:8F:23:79:EE:B0:4C:6B:B3:25:39:6F:9F:7E:0F:51:D5:43:F6:26:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d6a27a7a-adec-4b8c-ba89-c39fd750a679.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:21:e8:82:7f:0d:a8:51:b6:c7:e4:a0:f8:88:31:c6:0a:a8:
         17:c5:7e:e0:ff:f8:d2:bd:89:fe:fd:2e:f4:3f:1d:18:37:6b:
         78:37:36:05:2e:cf:4c:93:37:a0:76:c0:5c:84:94:9e:82:27:
         51:0c:7b:76:17:79:9e:0a:2f:08:bc:cb:a7:5e:18:41:e0:55:
         4d:8d:f9:f2:c6:99:55:d0:b5:d4:43:69:57:ca:06:88:92:47:
         f5:a7:71:16:f3:72:41:01:3b:d3:a1:7e:bd:cc:b0:8d:1e:34:
         33:dc:ad:83:d8:02:d6:d3:85:87:c7:87:44:3b:e5:16:01:d4:
         4e:24:07:e7:bc:78:01:8f:5b:d9:13:6c:ed:fb:19:9e:99:c1:
         be:0d:45:83:a8:56:cc:30:96:30:3a:2f:be:a1:2b:18:d6:b1:
         b8:30:58:a6:89:08:75:e9:5b:dc:bf:30:77:f4:f4:6b:b2:34:
         3e:73:24:ee:83:c4:ee:c1:9c:41:7a:49:e7:56:c2:ff:58:5c:
         4a:a1:99:f5:bd:88:ee:ca:29:14:7f:95:8a:9e:fe:f9:db:63:
         a9:92:9b:55:d9:6f:66:9b:98:3e:65:cb:6c:03:86:a5:d3:46:
         3d:b2:6b:62:2d:49:f8:87:78:32:03:39:30:9a:12:96:ff:e8:
         60:6e:5a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:34:58 2025 by rpki-client