Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/007cdca1-4c0d-317c-a68e-4b2faaef0625.roa
File:                     007cdca1-4c0d-317c-a68e-4b2faaef0625.roa (raw, json)
Hash identifier:          uqnuXhgaI2q2BgLr6qm4PsG/ZZmVHcbUV1W6BgFVC0Q=
Subject key identifier:   6B:0A:F1:25:0C:85:21:95:32:36:17:11:D3:87:35:0B:FD:A3:DE:73
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584974EAA4B5DBBBB3C48C12C3C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/007cdca1-4c0d-317c-a68e-4b2faaef0625.roa
Signing time:             Tue 08 Apr 2025 10:00:22 +0000
ROA not before:           Tue 08 Apr 2025 10:00:22 +0000
ROA not after:            Mon 07 Jul 2025 10:00:22 +0000
asID:                     19905
IP address blocks:        104.201.96.0/24 maxlen: 24
                          107.167.212.0/24 maxlen: 24
                          198.40.241.0/24 maxlen: 24
                          198.40.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:74:ea:a4:b5:db:bb:b3:c4:8c:12:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr  8 10:00:22 2025 GMT
            Not After : Jul  7 10:00:22 2025 GMT
        Subject: CN=ebaa1dfe-5a91-45b4-b30d-ea2f9837081f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6c:87:a9:24:a3:c2:f4:82:57:b8:ca:43:3f:
                    e4:7d:73:4e:74:9b:a2:59:f4:ac:d0:90:bd:26:e5:
                    38:75:8f:7f:bb:7a:c0:7a:d3:14:51:21:09:b2:f6:
                    65:f6:9b:0f:b7:1f:2c:87:2c:82:28:3d:bf:28:4a:
                    e8:d1:64:d3:d8:46:e9:72:46:ff:9e:04:ed:f5:67:
                    19:5f:9e:85:43:77:b6:97:54:39:fc:0b:43:e9:be:
                    91:c3:89:79:59:0b:12:09:b3:75:a2:0d:78:f7:0e:
                    3f:df:98:60:74:f0:12:2e:3c:55:b9:b3:fe:d8:08:
                    e9:45:7e:07:f9:be:c9:7e:fc:a9:a7:71:7c:fc:c2:
                    41:85:ea:ee:1e:c2:63:8b:c0:e1:7d:61:e2:61:a8:
                    6f:cc:78:69:c9:6c:da:f2:10:9f:0e:a9:0a:41:df:
                    2c:8e:d6:4c:1d:ac:12:b2:9c:8a:06:99:2c:80:d3:
                    aa:22:a2:94:49:7c:30:e5:f4:0d:4e:ca:3a:93:17:
                    eb:42:56:00:fe:10:ea:9d:e6:7d:04:87:29:03:28:
                    6a:3d:06:0a:d5:d2:b9:72:6e:5c:df:a8:4f:b2:35:
                    7f:ba:32:c4:e1:8c:b4:32:84:c3:78:d7:31:d5:c9:
                    c3:de:02:4c:a6:04:54:59:7f:1e:fc:28:f1:a2:f5:
                    d1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:0A:F1:25:0C:85:21:95:32:36:17:11:D3:87:35:0B:FD:A3:DE:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/007cdca1-4c0d-317c-a68e-4b2faaef0625.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.201.96.0/24
                  107.167.212.0/24
                  198.40.241.0/24
                  198.40.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:43:a2:1a:62:68:ba:7a:6f:a6:e2:4b:69:25:42:ed:d9:45:
         a5:14:3c:45:2f:94:70:64:de:e4:db:5f:59:9a:12:6a:c9:53:
         cc:23:b2:86:a7:c5:30:36:2a:f9:49:00:cc:d3:3d:87:31:22:
         ef:6a:4e:78:a1:35:ce:34:5c:e5:16:04:18:1d:43:2b:c7:fd:
         38:f2:9c:af:0d:f3:fa:69:ac:e2:c7:57:18:01:1c:d9:81:8c:
         23:26:a7:67:ae:73:2d:4a:e7:66:ec:d5:31:07:7a:68:7f:df:
         68:2b:fc:66:7f:dd:42:17:9c:29:6d:81:cb:bc:e0:cb:f1:95:
         27:d0:e1:c0:49:c4:ef:ae:de:67:98:a0:c8:f1:cb:70:73:f7:
         db:b7:7a:2c:24:92:58:38:a0:65:e4:94:2f:6a:7a:43:cb:ff:
         7e:01:a2:f9:48:51:15:89:a9:dc:78:e7:f2:17:e6:af:95:94:
         31:56:b1:4d:b3:8a:53:2b:63:1b:b9:dd:b5:31:e3:cd:9f:cd:
         b3:c6:45:57:20:46:c9:1c:04:3a:8f:ba:56:66:6f:bc:4a:e6:
         85:be:49:cb:3c:e1:6d:6d:dd:44:9f:71:0f:da:4f:85:74:f8:
         86:b2:b9:29:9a:6b:58:12:c0:b4:fa:33:79:75:56:2b:24:d0:
         49:49:4c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:07:32 2025 by rpki-client