Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b7fd97d2-d6f1-3c46-92a7-46206e5a3b07.roa
File:                     b7fd97d2-d6f1-3c46-92a7-46206e5a3b07.roa (raw, json)
Hash identifier:          jCDUfFP8y+vNZwIVOR/H9zaHYmpDRHO0JerXsH07ooQ=
Subject key identifier:   A8:91:5C:4B:09:D7:12:92:26:E6:C6:5D:AA:8A:CE:9A:C2:84:2D:79
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584A71EB2126B24BC0D6FD498CC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b7fd97d2-d6f1-3c46-92a7-46206e5a3b07.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     13335
IP address blocks:        104.29.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:21:26:b2:4b:c0:d6:fd:49:8c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=4a4dfa03-a0db-498c-8d2b-f16be4b4a9a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0d:48:5d:d2:41:8c:f6:6f:56:fd:16:23:5a:
                    63:ba:66:53:db:fa:f3:12:11:4c:91:54:aa:7f:c9:
                    26:bb:3c:de:4b:09:d6:06:5a:4e:7e:da:54:75:5b:
                    b2:ed:30:68:a0:58:a2:2f:b7:b4:14:52:94:ff:98:
                    f7:ce:d6:ac:af:39:89:13:5f:b8:56:28:ba:ea:4a:
                    46:e2:c8:02:f9:53:7c:83:ea:1c:3f:3b:58:ec:ec:
                    8b:c5:c9:2c:ac:2b:cf:64:0d:0b:17:ef:20:d6:ff:
                    ca:93:6e:1a:ee:a3:2a:ae:ad:9d:57:73:25:ec:a7:
                    ad:c0:69:f8:d5:17:d5:1a:74:0e:bf:cf:e1:f9:07:
                    19:fc:a7:82:d6:27:e9:55:96:87:b4:7c:dd:ff:06:
                    5e:4d:f4:2f:c8:39:45:1e:e8:7a:d2:5d:c9:de:2a:
                    8b:d3:b0:a2:5f:53:cb:de:3d:f6:7b:b3:25:74:b9:
                    07:03:c0:6d:94:e1:f2:5a:4c:36:58:68:87:f0:50:
                    ff:f7:52:46:53:8c:f4:27:8f:66:d2:44:24:a9:37:
                    7e:9a:c9:4a:42:db:1d:a9:7e:45:8f:1a:1e:64:21:
                    be:e3:80:77:6e:22:07:01:6f:21:b6:a3:20:b8:23:
                    0a:5c:46:9a:6a:1e:06:3a:f6:fb:8c:6c:3c:1b:f5:
                    b6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:91:5C:4B:09:D7:12:92:26:E6:C6:5D:AA:8A:CE:9A:C2:84:2D:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b7fd97d2-d6f1-3c46-92a7-46206e5a3b07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:3d:3b:aa:50:c4:4b:2d:e1:da:b3:15:13:7a:4a:61:dd:c9:
         c3:a2:d3:a3:8b:f4:88:00:74:4f:82:60:8c:4b:31:00:07:c9:
         89:d0:26:1d:65:04:2f:f9:d9:30:fc:cc:6e:ed:94:22:99:5f:
         5b:5c:a3:27:79:25:2d:97:da:1b:f4:6e:7b:b4:5b:3d:9d:89:
         d5:df:be:13:e5:b4:b8:1d:11:dc:b5:87:0f:97:66:90:35:f9:
         3f:ce:c5:f4:7e:d0:2d:9f:94:7f:ef:9d:27:d7:a2:00:54:d7:
         28:8f:55:92:79:13:2c:f1:1b:2c:b0:c2:de:54:bd:48:ad:18:
         40:45:2f:8b:45:a5:a5:e2:a9:28:9b:64:a7:2d:12:7c:2f:b0:
         5d:d9:bc:9b:9d:b4:6b:a8:50:45:34:ac:d0:e7:57:c5:da:04:
         6e:2a:16:e9:f6:49:ea:32:bb:1a:42:e6:c1:ea:7d:7c:4a:d4:
         4f:d2:0b:6b:75:52:6f:19:f1:2b:5b:26:18:4d:89:c9:56:5a:
         84:a6:6b:ba:4a:82:03:5b:43:fe:2c:4a:b8:a9:68:4e:b2:6c:
         20:6d:18:9a:1b:81:23:43:85:d4:83:94:5a:c1:aa:be:5b:8d:
         52:2f:d8:3d:ec:02:83:61:ad:8c:a8:6c:fc:4a:39:cc:64:d7:
         7a:78:80:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:40:02 2025 by rpki-client