Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/372300b1-92ff-3bda-8798-f61257b39942.roa
File:                     372300b1-92ff-3bda-8798-f61257b39942.roa (raw, json)
Hash identifier:          hkiWF/qMyHx9+1p9/Q5H1R4/61iBBkeudkA3lIzgBLk=
Subject key identifier:   6B:78:C6:53:FC:C9:B3:BE:32:20:D5:F5:B7:2E:47:5D:33:32:39:2E
Certificate issuer:       /CN=d106a247-9308-46e9-9d88-ae987a6bdace
Certificate serial:       010D0C9F4328584A7A4B31713961EFBCCE233780
Authority key identifier: E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/372300b1-92ff-3bda-8798-f61257b39942.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     50131
IP address blocks:        104.218.232.0/22 maxlen: 32
                          172.83.152.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:31:71:39:61:ef:bc:ce:23:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d106a247-9308-46e9-9d88-ae987a6bdace
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=f6e2f165-908a-4e30-a65d-76c90b4c2a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:13:e5:8b:5f:6c:9f:18:74:f8:18:81:a8:57:
                    e6:f7:82:fa:a5:99:a0:29:e7:f7:46:fb:41:ab:7b:
                    06:24:8d:84:ec:38:ad:b1:9c:b1:b2:39:08:91:76:
                    e1:fe:9e:70:15:73:02:4f:93:0a:77:a1:92:fb:55:
                    bd:d0:ea:04:e3:0b:01:8f:c2:08:38:cf:49:7b:96:
                    2a:cf:04:6d:cc:bd:b4:a1:22:3b:3b:e1:6c:cd:12:
                    43:79:dc:6c:28:d0:af:08:30:00:42:f6:b3:00:e1:
                    38:d6:00:3b:d4:74:5f:90:e6:2c:88:7f:3b:73:af:
                    6b:e9:98:18:9c:a4:ed:f0:f5:4e:ae:3a:14:6b:97:
                    da:ef:54:d6:e1:90:49:1e:fc:7a:3f:84:68:bd:f2:
                    c8:88:b6:4a:e1:8b:4a:89:2d:77:b2:0a:aa:f5:f4:
                    e1:cf:93:6c:8d:9e:29:d0:d2:f6:47:17:ce:4e:de:
                    66:ba:c8:bb:a0:41:30:9a:1f:e6:a2:c3:52:36:38:
                    b6:f2:e9:31:44:ec:cf:ca:5e:ce:99:8a:10:55:c7:
                    13:f3:e0:1e:61:29:59:1d:93:fe:50:50:72:9b:4d:
                    2e:3b:59:d9:dc:0e:d4:d3:12:c8:2e:08:85:8e:89:
                    b3:ce:ba:c3:87:c5:62:51:f5:c5:20:cb:80:4f:bf:
                    09:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:78:C6:53:FC:C9:B3:BE:32:20:D5:F5:B7:2E:47:5D:33:32:39:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/372300b1-92ff-3bda-8798-f61257b39942.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl

            X509v3 Authority Key Identifier:
                keyid:E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.232.0/22
                  172.83.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:16:44:29:13:95:8d:d2:22:1d:37:1f:6c:ac:bd:28:45:fb:
         73:30:32:4b:c5:65:78:92:17:7e:50:c3:4f:93:6e:56:b4:9a:
         3f:08:db:98:7d:d9:d7:cb:b8:21:dc:e9:f4:77:61:ca:45:a9:
         61:4a:38:e4:1e:32:01:15:ad:52:f5:58:0c:7e:75:09:af:1f:
         09:4e:20:38:f0:ff:a9:07:9b:cc:9a:cb:3a:09:01:82:47:bf:
         04:e5:3f:ba:e7:f5:28:07:a7:4c:6e:70:49:8e:27:85:76:11:
         04:47:e6:3f:bb:18:05:86:1f:ef:bc:a7:80:c6:e2:e8:fb:24:
         6f:35:bd:a5:53:73:c8:91:ac:d8:9d:73:cf:b1:2d:b2:a7:bf:
         61:94:11:92:cb:ff:c4:a3:aa:df:4d:7b:81:fe:aa:cf:1d:54:
         79:b1:9f:89:a9:f0:d6:bd:3f:f7:a0:dc:73:f7:42:07:54:5c:
         c3:29:62:cb:f1:1a:00:18:2c:5a:30:eb:87:25:41:e8:76:66:
         d1:a4:06:4b:da:b9:a3:c1:57:71:94:66:aa:1b:de:68:29:e2:
         93:aa:ea:d1:f6:5c:f6:75:fc:f2:2c:3b:12:b4:2d:cf:cf:d9:
         7d:f8:24:7f:d0:bd:cb:21:91:f5:72:21:5a:58:7d:74:e6:83:
         ba:58:2f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:23:34 2025 by rpki-client