Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/80225dc5-4a6a-3606-961f-26583796ac61.roa
File:                     80225dc5-4a6a-3606-961f-26583796ac61.roa (raw, json)
Hash identifier:          mGNnXShcO8m5tXCGvbrsNt0cRCNC1/Y9oA7iqRTMCaw=
Subject key identifier:   0E:58:B6:9E:F0:CB:BA:F6:31:1F:EF:31:E2:48:76:8B:E2:F5:04:CA
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F936F4C4A877ACF7B8000
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/80225dc5-4a6a-3606-961f-26583796ac61.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        104.137.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:93:6f:4c:4a:87:7a:cf:7b:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=79475dc2-209b-4239-93dc-5080fa4338a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a9:4f:3d:2a:62:00:ae:6e:ef:95:77:c3:35:
                    cd:a0:7e:c6:4d:ab:3e:38:27:73:d9:1c:5a:9e:f3:
                    d0:9e:e3:61:03:57:92:fd:04:4e:4c:e2:f8:63:b6:
                    de:8a:f4:19:74:1c:e2:96:d6:8f:2d:cd:a3:1e:ec:
                    08:35:7a:a5:40:ad:e8:35:77:35:a9:93:f7:68:cc:
                    93:7d:0a:ac:a1:ad:6c:37:82:9f:45:28:8a:bf:ab:
                    bb:89:09:5b:d6:2a:15:f1:dc:52:71:5e:63:6f:af:
                    c1:13:19:b6:7c:54:76:26:2b:d5:00:45:e2:a9:aa:
                    66:12:8f:fa:8c:a9:a0:43:c3:20:df:46:05:1c:7f:
                    5b:ac:59:0c:a9:6f:c8:17:28:c2:50:88:7e:9c:3f:
                    b9:a5:e6:79:42:5d:6b:67:4c:75:05:89:da:89:1d:
                    95:0c:40:30:f3:97:8c:a1:83:95:e3:49:76:d3:80:
                    20:42:75:ee:1b:64:14:6c:82:09:75:ed:b9:a8:0e:
                    63:12:49:08:3d:89:c4:8b:83:34:6a:b1:b1:c7:ce:
                    e4:a3:af:85:46:18:cd:bf:ca:9c:b3:b4:fb:ba:41:
                    b8:95:43:e4:13:79:ea:30:e9:e7:a8:74:01:7b:60:
                    72:84:61:71:a6:57:1f:37:1d:d5:ab:a3:11:e6:af:
                    82:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:58:B6:9E:F0:CB:BA:F6:31:1F:EF:31:E2:48:76:8B:E2:F5:04:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/80225dc5-4a6a-3606-961f-26583796ac61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.137.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:05:68:0f:03:d2:56:ac:ee:2c:d5:d7:2b:9c:a3:12:dd:d2:
         c7:fb:c1:30:4a:a3:97:cd:a8:e2:5e:92:ad:4c:67:c7:a2:cb:
         82:f7:64:3c:12:a4:47:1c:9d:06:48:41:c5:b3:8a:00:b7:5b:
         c1:6d:62:91:a8:71:c3:04:62:2c:da:f7:ab:a8:2d:8e:c5:25:
         1e:fe:e3:39:f1:2d:ba:78:23:f6:90:71:5b:be:e2:7b:d2:98:
         f9:c5:96:fa:6f:00:5e:4d:7b:c7:86:01:fb:4d:9b:07:7f:7c:
         f5:62:a9:48:e0:97:ba:8a:a6:81:9a:71:ba:49:45:b2:7e:dc:
         48:05:04:86:77:28:e3:5a:59:20:cb:01:15:8a:68:fa:d9:37:
         aa:d1:0a:ce:65:53:b9:c4:2a:2c:38:9c:7a:4b:b7:92:0c:f6:
         a2:94:5e:06:32:39:3c:2f:69:f0:96:5d:6d:2b:6a:cf:e6:69:
         4a:f2:15:16:4d:7f:a6:65:55:03:55:c2:7e:db:0a:ba:5f:94:
         77:a5:6b:ab:36:ec:2c:3d:e5:e7:08:ec:48:4c:44:45:72:08:
         4f:b8:9a:59:84:6e:cc:69:2a:23:46:86:52:4a:e4:06:58:98:
         be:c3:72:d8:b8:4e:ff:d0:ba:51:51:cb:f3:18:bc:22:45:44:
         13:f7:03:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:12:10 2025 by rpki-client