Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/09b3ecf2-90d8-3b9a-b1bc-d9c1a132bab0.roa
File:                     09b3ecf2-90d8-3b9a-b1bc-d9c1a132bab0.roa (raw, json)
Hash identifier:          o1K+hPZFM7nhhHXrbEgkmZkkZ5uITnxfSWLEMz4VSEI=
Subject key identifier:   31:53:55:08:09:28:A3:72:81:49:8F:1A:09:43:DE:66:3B:D6:2F:DB
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F432858499F24CB61B88AC35BD091CA80
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/09b3ecf2-90d8-3b9a-b1bc-d9c1a132bab0.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     36040
IP address blocks:        104.237.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:cb:61:b8:8a:c3:5b:d0:91:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=31ac7ae8-58d4-4bb7-8fae-54143a6bd3f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f5:96:bb:5c:7a:3d:05:a4:b5:de:ec:b4:70:
                    3a:b6:c2:b7:eb:9c:48:b5:1c:2c:d3:4f:aa:d2:1c:
                    3b:b4:b5:de:06:3e:17:17:99:59:e2:89:78:0e:e8:
                    1a:e4:b9:e3:b1:ca:32:61:c7:5f:7a:e7:95:41:0c:
                    82:fe:c4:7a:f2:a2:0e:c2:7d:e7:03:1b:65:69:4a:
                    eb:5b:44:75:f4:fc:f8:ed:2c:3c:7f:0f:3a:85:e7:
                    60:34:f7:fa:65:f8:6c:3f:a3:1c:66:af:1a:9b:48:
                    cd:50:13:ca:54:79:c3:14:23:36:75:11:de:de:04:
                    24:3a:5f:2b:9c:b2:5b:ae:f7:ff:b4:e4:2f:e5:0b:
                    68:83:2b:9b:f3:c7:b9:e2:0f:3c:92:88:8e:7c:ed:
                    de:0f:d5:fb:18:f3:1d:3b:68:20:5f:dd:20:d7:e6:
                    2e:40:aa:9e:0b:f1:32:5e:1b:c1:08:bb:fe:c3:b5:
                    6e:2b:24:35:2c:98:9d:3d:c1:36:43:34:67:c0:9f:
                    01:ff:2b:82:d3:2e:c2:64:81:a0:fe:41:43:6d:ed:
                    c6:09:90:03:20:16:b2:87:03:04:20:72:fd:96:37:
                    e5:18:a0:0d:c0:f3:99:d7:9a:f8:71:df:7e:a7:37:
                    53:89:cb:27:0d:ea:96:2a:11:44:57:5f:c0:48:4f:
                    92:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:53:55:08:09:28:A3:72:81:49:8F:1A:09:43:DE:66:3B:D6:2F:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/09b3ecf2-90d8-3b9a-b1bc-d9c1a132bab0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:1c:54:f1:df:40:e4:7a:e7:b6:81:6f:e0:a4:94:0b:72:4e:
         5c:ec:c3:5a:78:18:89:ef:ea:43:74:68:44:60:f0:0b:55:7e:
         a7:8b:08:7e:c3:97:01:18:ef:d7:87:a7:d3:63:84:58:52:63:
         84:c9:39:c3:48:37:c8:08:fa:cb:fd:19:2b:ce:d6:c4:31:dd:
         45:ce:d6:f8:35:3e:b2:39:bc:95:51:64:33:c0:24:c4:8e:94:
         34:1e:45:81:a3:ab:89:94:f5:01:82:c3:08:d6:17:a4:f1:fd:
         3e:c5:d6:c9:5b:91:3e:1a:a3:5b:31:f7:5c:32:db:0d:79:b2:
         43:fb:88:1a:34:a6:33:0c:15:72:89:18:e2:db:ab:12:56:bc:
         e2:5d:ef:6c:35:7b:5a:f9:13:96:0c:32:c9:d9:93:a9:8e:a6:
         09:c2:26:09:2c:2a:da:5c:01:e5:d5:cd:30:42:d9:0a:fb:13:
         61:16:6d:13:7a:3e:30:f3:92:39:31:fd:2e:8d:67:ac:08:f2:
         5e:54:25:32:82:55:d0:09:2b:c4:a1:ef:7d:26:61:a5:db:7b:
         c3:40:41:ea:b4:76:d6:4b:c6:24:1f:39:35:61:b8:a1:63:7d:
         e6:6b:c2:29:9c:e1:3d:6e:85:a3:a0:36:c8:92:1b:02:ee:bb:
         0f:d3:33:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:24:16 2025 by rpki-client