Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b44761d1-194e-3e0d-9bf6-c4ce273cca05.roa
File:                     b44761d1-194e-3e0d-9bf6-c4ce273cca05.roa (raw, json)
Hash identifier:          NMv3TPW6PZmrlMMcoltgKqCsLx53XubQX+ii/liVHV4=
Subject key identifier:   BD:00:47:42:4E:93:0B:20:92:99:98:6C:50:B0:4A:C6:1D:5F:69:06
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AF2568B16F6632AB97A9FBF00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b44761d1-194e-3e0d-9bf6-c4ce273cca05.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     20940
IP address blocks:        104.72.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:8b:16:f6:63:2a:b9:7a:9f:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=57bed09d-5507-4032-8205-4e6cf11e7df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e5:c7:06:eb:7e:08:d1:a0:94:ec:64:eb:ee:
                    99:a6:50:6f:dd:2f:a8:43:e7:74:85:1e:a6:84:fa:
                    f8:dd:60:13:d4:c8:59:9f:7a:54:49:1e:56:b3:7e:
                    e4:9e:9a:eb:11:57:ad:65:03:ef:ed:66:75:96:cd:
                    f1:b9:9a:fd:cd:d2:44:2b:03:a0:04:dc:b5:be:54:
                    20:f6:cc:2e:ef:bf:27:45:99:51:2f:13:93:8e:8b:
                    e0:08:4a:3f:8e:10:89:2c:78:df:55:d8:6c:0c:87:
                    bf:71:c5:a4:51:c4:99:b9:e0:fb:06:c8:5d:40:c5:
                    32:a8:50:fe:38:04:ab:37:d8:d2:5a:9e:a2:48:2b:
                    f7:bf:ff:e7:27:b8:ec:65:cc:62:51:5a:f6:9b:3a:
                    90:fc:4d:fc:e0:8b:9c:f4:b2:98:f1:0a:0b:be:a3:
                    23:80:d8:82:3b:46:8c:13:da:44:0a:ee:02:84:f3:
                    fa:0e:8f:02:ea:15:ab:d0:ed:f0:8a:21:7d:1c:60:
                    eb:27:be:7a:38:78:cf:2b:15:b9:1b:4b:f8:c1:ff:
                    ba:d2:40:e7:4b:b4:18:01:ec:5e:d4:ed:02:0f:00:
                    2e:42:ec:4d:bc:a2:32:5f:5a:c1:2f:ec:8f:8d:9b:
                    c8:95:74:da:93:1a:bf:ce:f4:6c:8d:1a:dc:0b:8f:
                    9f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:00:47:42:4E:93:0B:20:92:99:98:6C:50:B0:4A:C6:1D:5F:69:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b44761d1-194e-3e0d-9bf6-c4ce273cca05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.72.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:8f:6b:ba:54:2f:45:49:6c:d3:f8:71:27:41:3e:26:e2:f0:
         c3:3b:27:bc:d9:61:a0:13:c5:ea:b5:89:c0:61:b7:c5:f9:e0:
         ab:10:75:53:87:b1:8f:c6:b1:1f:17:84:97:d9:39:00:30:75:
         e1:cc:61:e8:cd:05:d9:af:bd:96:cb:f6:33:ad:7f:2f:11:08:
         28:1c:39:0b:c5:b2:ce:d5:87:89:40:66:70:22:7e:a0:2a:fe:
         c6:6c:a4:71:e1:75:9b:cb:26:13:4f:56:5c:ec:ae:e3:e4:78:
         af:8a:fd:6d:c6:a7:59:f7:e3:bf:33:a4:90:dc:f4:2f:85:62:
         06:65:38:9a:bf:48:23:73:51:50:e3:c2:8f:98:70:2b:bc:f9:
         4b:e0:3f:c6:33:a2:1c:f5:90:d4:89:58:66:d6:7c:34:c9:18:
         f5:f1:53:69:c3:ab:c6:0f:4d:25:46:45:2c:10:fb:02:a0:53:
         e3:db:1e:fe:79:50:84:b5:2d:18:ab:fd:d4:5d:23:22:8e:34:
         4b:9e:d3:f5:69:ae:87:e5:c8:e9:f2:d8:5f:31:82:c5:49:39:
         a6:60:3f:9f:08:f2:82:8b:8b:f0:a9:66:24:f5:a2:95:f8:63:
         ee:8b:c7:15:09:da:3f:51:94:3b:69:cf:98:43:2b:83:93:9e:
         f3:55:45:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:47:16 2025 by rpki-client