Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/6bfa66bd-18af-3ffd-84bc-0813f72c95d3.roa
File:                     6bfa66bd-18af-3ffd-84bc-0813f72c95d3.roa (raw, json)
Hash identifier:          n426CsV1GT/THVvFNcg+//diM720lwZkZUpzgGA/5es=
Subject key identifier:   A8:94:1D:EC:32:A1:E6:9D:AB:06:10:2C:78:15:34:CB:4B:D7:21:96
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285848BFEBD23C048C64ECE54F82F6
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/6bfa66bd-18af-3ffd-84bc-0813f72c95d3.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     36040
IP address blocks:        104.237.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:d2:3c:04:8c:64:ec:e5:4f:82:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=3a76e462-5a5c-461a-bbb1-b8b0111d35de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:32:93:29:9e:0e:ba:de:8d:20:5b:d1:a5:0b:
                    0b:39:42:79:b3:c3:dc:30:90:c2:76:5b:32:b0:99:
                    06:76:7d:fb:e8:f1:2f:3f:04:41:a5:e5:f0:91:52:
                    44:1c:c3:52:1e:2a:eb:0d:f4:d3:8e:af:20:96:82:
                    3d:e3:59:1a:61:c2:3a:57:9e:90:ab:44:e4:71:d5:
                    f6:38:32:c2:8a:e5:92:14:16:25:9c:13:a9:fe:22:
                    a9:b8:be:33:75:d4:df:36:26:94:48:ad:8e:a1:fe:
                    eb:da:6c:92:ff:e3:7e:55:0c:46:15:ed:19:bd:ab:
                    21:35:bc:ee:85:03:8d:1a:11:a9:a7:83:95:81:16:
                    c4:d8:ca:a6:f4:5c:f8:ad:2e:d0:ca:02:6e:dd:73:
                    7f:2b:68:44:da:95:68:cf:9d:65:d6:38:a7:2a:7c:
                    71:14:11:06:17:cf:52:b1:e8:ca:91:22:d4:a6:53:
                    bc:69:c1:d4:a9:2a:cf:3c:58:75:d6:d1:62:3c:47:
                    35:00:d1:ca:d7:14:32:f8:b6:72:df:34:2d:01:0d:
                    0a:01:87:5a:07:3b:94:1a:9b:4f:fc:79:01:d2:00:
                    b1:6a:81:e0:c5:12:88:e8:e8:c9:9d:37:99:c2:b8:
                    49:ce:16:d2:55:a9:d6:85:d4:22:e8:ae:43:d1:8d:
                    13:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:94:1D:EC:32:A1:E6:9D:AB:06:10:2C:78:15:34:CB:4B:D7:21:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/6bfa66bd-18af-3ffd-84bc-0813f72c95d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:66:9d:c3:7d:24:ad:bf:8d:b0:ab:8a:c6:95:f2:13:76:7d:
         af:07:ba:20:bb:a7:2a:8a:10:1e:9c:c3:c9:d4:5b:5e:c1:ef:
         74:65:38:bf:e4:f7:4c:38:b0:a6:de:fb:5c:62:98:b7:4e:cc:
         44:e3:fc:7e:58:ec:89:1b:3d:af:e7:ed:bf:c1:22:55:2a:24:
         3a:12:0d:e0:67:3a:66:9f:f9:af:f0:47:1c:bc:0b:8a:4c:20:
         92:bd:0e:6a:97:ef:ed:fd:b2:c5:75:15:74:d5:25:f2:14:db:
         a7:c5:78:44:b6:2f:0d:4d:0b:3e:89:e0:aa:f4:d1:68:a8:e6:
         f4:ee:95:d9:e8:b8:09:29:00:ae:de:ef:92:82:71:2c:7b:3e:
         ac:dc:16:fd:fd:48:ee:85:27:25:1e:51:2c:4f:1f:3c:fa:60:
         71:37:67:ab:be:7d:d3:e6:b7:9a:ec:25:11:2e:5f:74:a3:4a:
         7b:0d:96:69:1c:69:ab:2e:e4:af:41:ba:0f:b9:d9:2f:6d:1d:
         e4:2d:64:c9:0a:b9:6c:a0:13:07:82:2c:d6:a5:1e:45:98:4d:
         c1:3f:ef:03:e3:8e:20:39:1d:bd:f4:7d:00:74:39:9a:a1:73:
         78:80:b4:00:76:d7:01:96:a7:92:7f:59:0e:f8:65:98:c4:d1:
         f2:80:ff:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:22:38 2025 by rpki-client