Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/7b2fbca4-8022-3fe2-ac32-dcfc0b2a20cb.roa
File:                     7b2fbca4-8022-3fe2-ac32-dcfc0b2a20cb.roa (raw, json)
Hash identifier:          msVS88MmqPMKkUKs04XIGfHvjvS8/ZQHEMH0p0LbEWY=
Subject key identifier:   79:44:E5:C3:99:70:36:65:EB:C3:CE:23:D0:FD:C0:20:FC:87:67:4E
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285848BFEBB9D70A16C1FBF2B45240
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/7b2fbca4-8022-3fe2-ac32-dcfc0b2a20cb.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     36040
IP address blocks:        104.237.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:b9:d7:0a:16:c1:fb:f2:b4:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=aeffd177-62d4-49b5-8de1-7c014415b361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:25:8b:3b:82:06:4b:35:f2:7d:c4:79:b4:8e:
                    6f:b3:6c:cf:71:db:6e:6b:6d:cb:e2:60:45:7d:0e:
                    d8:f3:0f:12:fd:77:c8:b2:d1:a1:46:a7:74:70:ae:
                    40:d0:84:94:37:7b:db:70:86:3d:c1:bb:5c:4c:3b:
                    27:63:a4:af:91:f9:8a:b6:d4:ed:ae:c4:49:7d:8f:
                    a4:a1:89:cd:43:29:ed:f0:42:a2:75:2c:07:c4:a1:
                    b3:7f:f0:6f:7e:97:47:5a:60:32:9f:e9:d6:04:3a:
                    1f:a3:e3:7f:71:4f:0f:a2:ca:b2:87:a3:95:c3:ef:
                    21:4e:f1:9b:a1:74:0a:09:e7:bb:44:51:4f:e8:b8:
                    f5:3d:e0:09:b5:38:9a:d3:c7:fc:05:1f:8a:fd:1c:
                    b4:4c:66:b2:8f:c7:dc:f1:56:ed:6c:31:59:bc:a1:
                    33:e0:bb:0c:72:f0:0c:71:a2:e8:3f:eb:5c:7d:ef:
                    3f:8c:5b:fd:8c:4a:b9:d1:d1:b3:c2:74:69:b6:d0:
                    a4:ec:35:a5:91:bb:43:73:fa:0d:7f:93:6b:14:cc:
                    70:85:13:32:c1:a2:9b:a9:df:fd:df:48:66:da:6b:
                    b5:24:ba:34:87:94:74:66:0b:80:c0:f9:dc:d5:d1:
                    a1:da:20:d0:17:4e:94:5f:60:0b:d5:a7:73:fb:87:
                    7f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:44:E5:C3:99:70:36:65:EB:C3:CE:23:D0:FD:C0:20:FC:87:67:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/7b2fbca4-8022-3fe2-ac32-dcfc0b2a20cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:09:be:f3:14:05:b8:eb:76:1b:ea:15:7e:5b:ea:81:83:be:
         e0:1e:a0:c6:a3:97:d7:3a:2e:87:1b:dc:d5:dd:dd:a1:e8:36:
         52:6a:3c:f0:68:cf:61:fc:16:69:f2:35:d3:cc:3a:c7:a6:80:
         b1:a8:f3:3f:54:36:f0:b2:27:22:21:16:4f:d3:ee:30:05:8d:
         e1:f8:4a:b1:dd:54:de:ae:29:fa:94:35:d6:08:1e:49:91:97:
         84:91:60:da:42:81:17:65:2a:47:b2:f6:ba:ce:7f:fa:d0:41:
         d4:35:fa:f6:16:1d:13:59:12:a6:a6:1e:27:a9:c3:b4:7a:70:
         ae:8e:b3:fd:68:7e:e3:fb:9d:25:a0:0d:5c:27:a3:67:d0:8e:
         fd:76:aa:df:16:f8:29:dc:22:db:bd:32:57:5d:22:7e:b9:ae:
         1f:e6:55:32:e7:d2:58:1a:61:d6:73:f7:65:a0:81:55:f1:82:
         79:b2:45:9a:6e:9e:b6:08:dd:13:16:3d:be:06:45:49:f9:a4:
         da:e9:42:3d:05:a5:d5:bd:a6:9d:3a:e5:ba:45:5f:8e:6a:8e:
         f7:f0:19:cc:96:9e:f8:4b:6b:f2:d6:a6:0b:22:44:d8:5d:df:
         6a:68:54:94:df:91:ed:26:58:42:20:2c:0b:d8:a2:fd:41:6f:
         09:48:aa:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/67nXChbB+/K0UkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
YWVmZmQxNzctNjJkNC00OWI1LThkZTEtN2MwMTQ0MTViMzYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCWLO4IGSzXyfcR5tI5vs2zPcdtua23L4mBF
fQ7Y8w8S/XfIstGhRqd0cK5A0ISUN3vbcIY9wbtcTDsnY6SvkfmKttTtrsRJfY+k
oYnNQynt8EKidSwHxKGzf/BvfpdHWmAyn+nWBDofo+N/cU8Posqyh6OVw+8hTvGb
oXQKCee7RFFP6Lj1PeAJtTia08f8BR+K/Ry0TGayj8fc8VbtbDFZvKEz4LsMcvAM
caLoP+tcfe8/jFv9jEq50dGzwnRpttCk7DWlkbtDc/oNf5NrFMxwhRMywaKbqd/9
30hm2mu1JLo0h5R0ZguAwPnc1dGh2iDQF06UX2AL1adz+4d/PwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHlE5cOZcDZl68POI9D9wCD8h2dOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvN2IyZmJjYTQtODAyMi0z
ZmUyLWFjMzItZGNmYzBiMmEyMGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO2+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALYJvvMUBbjrdhvqFX5b6oGDvuAeoMajl9c6Locb3NXd3aHoNlJqPPBo
z2H8FmnyNdPMOsemgLGo8z9UNvCyJyIhFk/T7jAFjeH4SrHdVN6uKfqUNdYIHkmR
l4SRYNpCgRdlKkey9rrOf/rQQdQ1+vYWHRNZEqamHiepw7R6cK6Os/1ofuP7nSWg
DVwno2fQjv12qt8W+CncItu9MlddIn65rh/mVTLn0lgaYdZz92WggVXxgnmyRZpu
nrYI3RMWPb4GRUn5pNrpQj0FpdW9pp065bpFX45qjvfwGcyWnvhLa/LWpgsiRNhd
32poVJTfke0mWEIgLAvYov1BbwlIqlM=
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:12:47 2025 by rpki-client