Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/70963064-0dcb-3341-92fe-c7f40030f75f.roa
File:                     70963064-0dcb-3341-92fe-c7f40030f75f.roa (raw, json)
Hash identifier:          I4PolKyJYWdlR5DuD67umNoZNKDHN4vmRuoMv7NS2NE=
Subject key identifier:   93:F3:7B:5E:B1:94:AE:46:5E:FD:78:99:8C:17:F5:BF:C4:B5:3B:11
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584A07D532084770431D4BF8A0C0
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/70963064-0dcb-3341-92fe-c7f40030f75f.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     9009
IP address blocks:        104.218.194.0/24 maxlen: 24
                          104.218.196.0/24 maxlen: 24
                          104.251.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:32:08:47:70:43:1d:4b:f8:a0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=56aa1172-c729-4f31-85f3-7cc4ea827cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d5:7d:1e:5b:e5:e0:fb:6c:06:c9:bd:3f:2e:
                    56:f5:f0:a1:d2:df:ce:f2:b9:1b:c6:ce:07:0d:b8:
                    25:d2:f5:d8:cc:e1:72:bf:16:e1:8e:63:33:62:1c:
                    68:f0:e0:07:7a:d8:96:e4:5d:1e:27:c6:9e:41:97:
                    6c:12:eb:48:5a:39:4d:6d:6c:39:7d:a4:24:38:43:
                    de:0e:32:37:76:45:7d:f1:11:94:08:3a:49:8b:82:
                    0f:b0:22:d0:44:be:5b:58:6e:46:3e:ac:53:e8:2a:
                    be:6d:d2:22:df:b9:e7:49:1c:c5:dd:ca:1d:af:49:
                    06:c8:1f:91:c7:ee:e6:0a:d3:9b:85:70:13:73:13:
                    f8:53:8f:57:e5:dc:af:53:75:8d:ae:84:be:ef:4b:
                    5f:56:a8:bc:60:12:34:60:2d:80:29:a2:18:14:95:
                    95:e0:5e:cb:6d:15:6c:ae:bb:b7:60:d9:df:f9:00:
                    cb:ea:66:12:87:c7:f2:31:79:c9:c6:99:ca:20:3d:
                    58:14:6c:3a:1f:0d:42:3d:bd:86:38:a5:ed:0a:4e:
                    60:73:15:4d:73:26:4c:d4:e9:cf:83:45:76:00:99:
                    0e:2e:3e:3e:9a:52:ac:fa:88:dc:a5:2f:ec:51:fd:
                    7a:d6:b8:e7:d0:a7:72:ed:3d:37:d4:d2:35:85:54:
                    71:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F3:7B:5E:B1:94:AE:46:5E:FD:78:99:8C:17:F5:BF:C4:B5:3B:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/70963064-0dcb-3341-92fe-c7f40030f75f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.194.0/24
                  104.218.196.0/24
                  104.251.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:29:43:34:64:45:3a:ce:bc:de:75:d6:04:2a:e3:e1:7b:87:
         e0:76:e8:f3:ee:40:53:c4:be:04:47:76:87:30:8d:69:59:ff:
         e7:ae:3f:b0:04:9f:3e:32:ac:e2:e1:f1:e6:0b:bc:dd:8a:61:
         63:5e:4c:36:f4:62:32:41:12:da:a0:29:75:de:fc:82:3a:0d:
         23:62:c7:48:ba:34:4f:15:6d:3c:99:72:4e:7e:9a:c3:23:69:
         65:f6:86:70:df:79:d5:2b:7f:d5:3a:f6:38:9c:61:c1:18:f3:
         55:bf:3f:d1:d0:60:a1:34:b4:05:a2:39:a0:1b:b0:23:18:9c:
         77:b4:95:48:b7:7e:12:b0:0e:29:10:56:88:d8:c5:90:33:16:
         37:5d:12:28:be:47:49:d9:76:cc:fa:5e:e9:63:78:91:e6:78:
         10:81:d4:cc:ab:c2:a6:55:d9:58:9c:71:4e:ed:d7:2e:7a:3d:
         c7:3d:59:d4:2f:a4:95:60:66:a0:32:df:a6:a6:cc:2c:02:38:
         3f:37:5f:e3:e2:06:90:a2:19:71:b0:9c:4c:90:40:88:27:a3:
         b2:53:cc:ff:6f:48:03:85:f9:3a:f0:42:1c:dc:ee:2a:a5:9e:
         dd:b7:3d:08:13:dd:5f:48:ac:14:fc:66:f4:eb:3c:02:f9:0e:
         bb:32:fd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:46:01 2025 by rpki-client