Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7cd6ea48-9473-3990-9e18-cb42f7343f79.roa
File:                     7cd6ea48-9473-3990-9e18-cb42f7343f79.roa (raw, json)
Hash identifier:          8kDQWyDT94414rQpI/Q+3gWPXyA413mNg5Q2ABV0kd0=
Subject key identifier:   33:32:A5:52:7B:7A:3E:0B:B6:06:B5:AB:62:71:10:D5:5F:39:8B:28
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858494B6404651EA2C857BF3AD7B0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7cd6ea48-9473-3990-9e18-cb42f7343f79.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     19446
IP address blocks:        104.224.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:04:65:1e:a2:c8:57:bf:3a:d7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=f0fe75ac-8778-4ddf-a6eb-d70cc463cb17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2e:ce:e2:4c:95:16:47:a5:d8:41:48:6e:17:
                    62:07:c6:5a:de:69:70:50:f7:98:1b:29:b5:68:2c:
                    65:47:8e:2c:2b:cc:59:b1:5f:66:85:7e:05:cd:dd:
                    e4:92:ef:c4:8e:38:89:36:31:3b:74:2d:1a:e6:6a:
                    b3:ac:3d:a1:03:b9:be:04:53:56:ba:5c:dc:e9:43:
                    35:6b:b1:82:a0:74:30:35:de:ed:37:ba:c9:47:db:
                    14:bc:40:7b:f1:1a:e0:62:11:84:fa:39:3a:99:c8:
                    53:6c:4d:31:d7:e8:27:5c:2c:fb:68:1a:7d:83:02:
                    50:90:a5:0e:00:2e:5a:02:1b:d8:19:72:09:83:38:
                    10:6f:94:fc:c5:81:d3:68:2b:a4:25:82:37:bb:15:
                    55:38:b9:9d:7a:97:b8:bb:43:23:e3:00:8e:74:b6:
                    14:09:e7:d5:bb:ed:2a:99:8d:63:57:5f:92:8c:7a:
                    75:dc:22:0a:d5:1d:63:f2:ef:ba:10:c1:3c:ec:aa:
                    75:20:e0:79:6c:47:dd:88:4c:fb:72:a4:7b:5d:ea:
                    ed:a5:c5:d2:de:09:d3:46:0c:37:eb:41:fc:6b:5b:
                    f2:87:21:0f:ba:0b:a9:94:d6:7d:0f:86:fb:9b:98:
                    47:9f:0f:10:b4:2c:61:62:ee:47:6c:16:36:c6:03:
                    db:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:32:A5:52:7B:7A:3E:0B:B6:06:B5:AB:62:71:10:D5:5F:39:8B:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7cd6ea48-9473-3990-9e18-cb42f7343f79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:1e:87:51:fa:a4:b4:2f:67:7c:e2:87:da:64:8c:25:84:eb:
         c9:c0:0f:64:05:80:32:f9:82:19:75:e1:8e:ac:d8:10:91:02:
         eb:e1:7a:3c:63:6b:04:3e:86:34:a3:69:4b:8c:8d:e5:cb:95:
         cb:3d:de:3e:81:7d:33:a6:20:1d:cd:29:f1:3e:b2:ad:3e:45:
         4f:87:1b:41:cf:34:56:c5:10:32:dc:c8:be:cd:02:97:f7:07:
         72:02:a8:77:0b:3c:8d:d7:8f:10:8f:b0:15:47:82:12:97:6d:
         71:70:a7:85:11:a6:05:a1:3d:7d:31:9d:8e:5c:52:55:0c:6f:
         e8:4d:3b:10:33:fe:57:3f:b5:26:bb:89:15:50:57:ed:7d:e1:
         73:66:e0:04:f8:dc:48:a6:c9:98:86:16:80:5c:c6:44:f7:82:
         37:95:77:48:03:f8:3c:51:fc:23:2d:4d:70:6b:b3:1e:d5:c8:
         40:1e:29:03:aa:3d:2a:5a:78:f2:e4:4b:1a:6d:cd:b2:9e:aa:
         76:30:66:ed:ea:5f:5c:f2:12:63:c4:9e:39:74:5e:82:1a:d3:
         c4:57:41:9c:18:24:3e:7d:d0:fc:e3:b9:57:83:e3:ea:df:af:
         b4:0b:db:a6:8b:14:81:69:88:94:08:3f:dc:e8:57:de:27:5c:
         5b:13:be:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:01:55 2025 by rpki-client