Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/77ae4b94-5d7a-39b3-bf40-1f0b2854b76e.roa
File:                     77ae4b94-5d7a-39b3-bf40-1f0b2854b76e.roa (raw, json)
Hash identifier:          7FWOBiVE/PwUYsw8Tc6YQ8IRcvynuJ96GzkXx2bIFrE=
Subject key identifier:   F4:91:3F:2D:BF:67:E4:DF:E8:52:8E:81:AA:2D:34:54:A8:6A:44:7B
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285848D0ABB02B8C41BD312B5D0480
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/77ae4b94-5d7a-39b3-bf40-1f0b2854b76e.roa
Signing time:             Sat 08 Feb 2025 14:00:52 +0000
ROA not before:           Sat 08 Feb 2025 14:00:52 +0000
ROA not after:            Fri 09 May 2025 13:00:52 +0000
asID:                     62610
IP address blocks:        104.218.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d0:ab:b0:2b:8c:41:bd:31:2b:5d:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Feb  8 14:00:52 2025 GMT
            Not After : May  9 13:00:52 2025 GMT
        Subject: CN=49bd3d04-0944-4a7a-b0fe-02918449630c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a5:ce:9b:10:75:e6:3c:cc:7f:1b:fe:8c:32:
                    b9:53:13:7d:80:96:39:60:45:0f:07:78:eb:e8:6e:
                    ae:7e:f6:4b:28:9b:3a:08:58:aa:b5:29:e2:1b:88:
                    f4:33:28:37:2f:06:16:5f:38:ba:6d:2c:83:09:94:
                    aa:47:be:93:cc:27:5e:c3:ea:b9:1a:8e:1a:f9:85:
                    c2:13:01:a6:61:7d:ea:a6:77:3e:de:06:d3:b8:52:
                    fb:63:a1:45:15:1d:9e:f5:a7:35:ea:9e:39:75:0b:
                    d0:36:25:2f:c0:fb:88:87:0a:c8:73:12:f9:54:d6:
                    eb:f9:a3:b1:35:9d:a9:24:32:f1:0f:72:fc:fc:c8:
                    79:5f:7d:a2:ea:08:50:19:28:bf:aa:5b:04:b3:10:
                    98:05:2c:f6:b7:83:b3:1b:25:05:98:13:8b:de:72:
                    e4:4e:e4:3a:14:14:1c:fb:3e:b8:36:07:d7:8d:59:
                    55:6c:76:0f:07:fe:bd:e8:46:21:a4:db:60:1c:26:
                    a3:2a:88:34:4c:ca:68:46:84:f6:04:97:69:34:38:
                    cd:f3:e3:a1:fc:2f:50:36:af:d0:f1:97:02:75:9f:
                    ef:e9:be:ca:96:cd:32:53:e5:f6:51:95:9b:65:bc:
                    3c:de:f2:a5:c5:ae:bb:a7:e7:ae:be:a7:bc:a0:93:
                    8b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:91:3F:2D:BF:67:E4:DF:E8:52:8E:81:AA:2D:34:54:A8:6A:44:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/77ae4b94-5d7a-39b3-bf40-1f0b2854b76e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:b9:d5:51:2b:4b:99:ae:41:b8:d2:05:e4:49:17:4c:5a:2b:
         fa:71:ed:e2:3c:12:cd:5b:7b:33:24:be:9c:3c:7f:60:8f:5f:
         3d:93:30:04:8c:12:52:46:50:7e:56:1f:ed:dd:88:d6:7c:44:
         1f:c8:70:aa:b0:fe:13:5f:d9:e3:b7:29:c2:10:3d:97:39:a8:
         2f:e3:2d:6c:90:d9:59:d1:8a:f0:7a:e4:60:ee:9a:03:ac:0d:
         b3:7a:c8:97:b0:15:57:30:95:e6:a0:c9:75:e8:64:85:df:bf:
         d0:10:30:1c:b6:36:f6:dd:30:6c:72:29:a4:42:8e:1c:b6:81:
         e4:5a:31:f9:9f:c8:d1:a8:17:5b:81:42:14:f5:b0:1a:dc:ff:
         68:e3:a0:dd:b4:b8:e8:74:40:59:ec:c2:e8:9f:a6:fe:07:cf:
         a5:8e:f9:8f:6a:5c:b7:96:b8:a7:19:68:9f:ce:55:98:61:a4:
         34:79:7a:37:11:71:ce:ac:6d:7b:61:4a:0f:8b:a3:1f:5a:16:
         08:0f:96:ac:b9:01:fe:ea:17:09:32:b4:34:2f:08:f2:e8:ff:
         99:93:63:67:ae:ef:83:7e:98:28:03:8a:7a:f8:61:5e:01:de:
         db:7c:a5:8c:4a:75:b0:1c:5a:b4:82:e9:b4:37:81:58:d9:d2:
         60:4c:15:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:40 2025 by rpki-client