Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130342e3232362e302e302f31362d3136203d3e2035363530.roa
File:                     3130342e3232362e302e302f31362d3136203d3e2035363530.roa (raw, json)
Hash identifier:          yVaVoTPojM18UxwoPF0NXFF9lpVbuB4wInkE2SlUf8Q=
Subject key identifier:   FB:D2:C3:0C:D6:09:C9:B9:D2:76:8A:90:09:AD:4C:5A:2F:9F:8D:65
Certificate issuer:       /CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
Certificate serial:       4F5ED339CAF1FC2BFBA672DE6AD2167963701F52
Authority key identifier: E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130342e3232362e302e302f31362d3136203d3e2035363530.roa
Signing time:             Tue 25 Feb 2025 05:08:51 +0000
ROA not before:           Tue 25 Feb 2025 05:03:51 +0000
ROA not after:            Tue 24 Feb 2026 05:08:51 +0000
asID:                     5650
IP address blocks:        104.226.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/87fd9355-ffdc-4986-9329-4d1909e01a2f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/87fd9355-ffdc-4986-9329-4d1909e01a2f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 04:34:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:5e:d3:39:ca:f1:fc:2b:fb:a6:72:de:6a:d2:16:79:63:70:1f:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
        Validity
            Not Before: Feb 25 05:03:51 2025 GMT
            Not After : Feb 24 05:08:51 2026 GMT
        Subject: CN=FBD2C30CD609C9B9D2768A9009AD4C5A2F9F8D65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:81:56:4e:06:ee:c5:ec:ba:b5:84:1a:4e:83:
                    95:2f:9d:b4:2c:cb:05:35:e3:b6:9e:e3:c2:61:4f:
                    62:24:c6:2a:5e:92:f0:b0:41:e1:93:08:d5:9c:a7:
                    b9:e5:d3:7a:a2:02:f4:6f:14:df:99:ef:60:ae:a4:
                    b7:f0:c9:67:39:3b:d3:df:30:cd:58:e0:05:2f:da:
                    af:57:20:ef:60:d8:c4:1c:5f:ec:1f:18:77:a3:c7:
                    68:59:b0:2e:ac:bd:b5:51:fa:b0:ab:c0:c2:55:72:
                    db:ea:28:34:70:32:9f:71:41:50:58:e3:9f:b1:96:
                    6b:55:f1:65:16:f5:e8:17:41:3a:4c:66:28:41:b6:
                    32:f1:88:5b:46:f6:ef:cf:13:0c:1c:2a:e4:cb:c2:
                    4d:20:ae:68:e3:71:96:dc:9b:1e:c3:5b:2e:cf:56:
                    ba:a6:bb:b9:7e:e1:25:5e:d1:7a:eb:19:7c:ce:fc:
                    a0:07:e9:51:c1:b7:4f:f4:24:38:10:a2:eb:d1:e5:
                    11:4a:a7:f0:d4:4f:d7:3a:54:b2:e2:62:a4:d5:a8:
                    f9:86:ad:03:69:24:ef:b4:10:77:f1:01:ff:c0:a0:
                    75:88:ac:16:16:e3:b2:7a:ec:29:87:20:a2:90:71:
                    5f:8d:d0:ed:53:be:37:44:ab:d0:d8:91:a3:44:dc:
                    6f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D2:C3:0C:D6:09:C9:B9:D2:76:8A:90:09:AD:4C:5A:2F:9F:8D:65
            X509v3 Authority Key Identifier:
                keyid:E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130342e3232362e302e302f31362d3136203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.226.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c8:6e:c6:f7:2d:95:98:d9:4f:ca:f1:e0:68:f9:92:5a:d2:9a:
         e0:c1:50:b5:5a:63:ef:87:d6:45:f7:f0:bf:59:ae:8e:3c:c2:
         0a:a4:af:79:46:4b:89:72:de:97:d5:eb:26:5c:27:0e:3c:24:
         75:f0:52:f0:a3:db:0e:64:0e:71:15:91:24:3b:2e:60:e9:4a:
         53:b2:2d:bd:3d:48:d9:0f:59:b7:31:6e:47:8b:26:af:67:1e:
         62:22:ee:e9:d3:bb:45:4c:e7:54:5f:42:0b:68:ec:89:b3:86:
         42:df:be:17:55:5e:e7:e5:a6:f5:23:3b:e6:18:b4:5d:a2:0d:
         5d:dd:30:fb:25:57:27:26:47:92:61:b3:b7:ae:74:20:19:80:
         24:71:0c:e4:73:9d:dd:5c:5e:2a:d9:e6:6e:b8:21:f3:7a:09:
         99:dc:77:93:7a:ee:5a:5d:d8:89:6f:07:19:ad:db:b4:7d:3b:
         61:67:b6:34:5f:87:a0:63:d2:48:cf:45:0d:0a:fb:33:49:9a:
         d7:54:c0:41:27:fa:9b:f4:ce:0b:10:c7:31:2f:e2:83:20:61:
         14:e4:54:6b:4c:12:03:f1:7e:c9:98:53:74:ba:94:96:85:c7:
         03:63:90:4d:2e:ac:93:87:6d:e0:c1:20:de:52:6d:23:81:ef:
         9e:50:0c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:30:28 2025 by rpki-client