Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/b92bc0bd-44b9-3a87-84b6-c82d96af131d.roa
File:                     b92bc0bd-44b9-3a87-84b6-c82d96af131d.roa (raw, json)
Hash identifier:          rrdf0ihj36sCBeytpuq7PwASNAR5S3eywUoUNYfSxcA=
Subject key identifier:   C2:03:7F:7C:12:E9:B9:0C:88:B4:54:05:1E:82:AF:FD:5F:2C:A2:3D
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F432858499F24AED8591D82FB9CD55F00
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/b92bc0bd-44b9-3a87-84b6-c82d96af131d.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     36040
IP address blocks:        104.237.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:ae:d8:59:1d:82:fb:9c:d5:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=5f20a9d8-889a-4490-8c33-3238e57fa8ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ed:dc:b5:b7:10:41:4e:26:c7:5b:84:48:66:
                    28:49:31:88:68:34:aa:88:02:bc:17:4b:f8:09:e9:
                    b2:e0:0d:ca:7b:dd:3d:49:2a:7b:ef:2a:2c:4b:de:
                    f5:6b:c8:2b:2a:4b:0c:a5:81:47:fc:4f:10:a6:61:
                    84:9d:65:5b:01:ec:cb:ec:05:8b:fd:31:62:14:5d:
                    52:f6:2f:27:f4:d4:7a:6b:68:ee:e7:c3:fc:2a:a7:
                    0a:c1:7d:2d:62:85:4e:bd:59:06:94:5b:3b:cc:7e:
                    73:4e:4b:37:bd:5b:e1:dd:fd:75:f9:ba:cb:6e:46:
                    03:fb:28:0c:eb:bd:9d:08:2b:06:a1:3f:b5:d7:5d:
                    46:20:61:e7:48:b5:d2:48:af:e8:66:f2:0a:60:8b:
                    66:24:67:16:d8:89:08:5c:4c:2c:36:31:3b:19:99:
                    4c:a0:44:66:7c:b2:52:c8:82:14:ca:25:ff:fa:b3:
                    50:d7:dd:12:4b:98:b6:f0:9d:8f:e4:13:71:4e:13:
                    c4:c6:45:40:00:ac:4b:45:44:ed:c6:3e:10:ea:69:
                    cc:bf:78:31:0e:98:3d:b2:e5:6f:5d:6b:fc:70:cf:
                    a0:c8:77:3a:1b:06:3d:fa:f6:ae:77:bf:d1:b5:4b:
                    58:83:4f:c1:29:ba:66:7a:d1:88:3b:d0:90:36:62:
                    37:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:03:7F:7C:12:E9:B9:0C:88:B4:54:05:1E:82:AF:FD:5F:2C:A2:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/b92bc0bd-44b9-3a87-84b6-c82d96af131d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:bf:85:a0:41:76:ea:c3:3f:25:05:61:dd:6f:2d:55:cf:03:
         e0:15:ba:32:de:93:cf:76:1f:24:48:1c:43:2e:50:68:25:14:
         cd:2c:99:b2:69:57:a6:58:68:fd:40:10:3c:62:3d:1d:9c:43:
         6f:68:7c:99:91:af:f2:a1:c9:90:87:8d:a6:40:8a:c3:bb:4e:
         49:d0:6f:9a:37:9e:02:62:e7:c5:1d:3f:8f:20:23:0c:eb:97:
         84:39:8c:a1:6c:be:c9:1d:d9:45:99:ef:8e:88:a3:ae:17:8d:
         4a:fc:09:1f:c2:45:09:7d:fe:9d:c5:2f:3f:3b:22:b6:17:49:
         07:a6:19:e3:52:b3:bf:8e:cf:42:a5:a6:d9:15:9d:60:24:b2:
         cf:86:fe:f4:6e:b9:15:2f:c9:76:c2:6a:5e:3a:8f:22:aa:34:
         cf:05:dc:98:f8:4e:ec:cf:e9:f1:95:1b:1b:bd:37:f1:c9:95:
         fb:2d:44:fe:c4:76:6a:10:de:3e:35:9f:3d:82:f6:1b:e0:87:
         37:1a:91:63:2f:a6:8b:c9:65:31:dc:fd:02:b1:17:6d:b6:f3:
         a0:91:20:43:fb:a7:21:26:7c:02:60:e1:09:10:97:41:5f:31:
         42:de:46:55:ac:7b:a3:ed:3e:ab:16:49:b1:f0:f9:ac:70:11:
         b9:55:f1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:52:18 2025 by rpki-client