Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3132e54d-3fe8-35dd-8703-eae748695c8e.roa
File:                     3132e54d-3fe8-35dd-8703-eae748695c8e.roa (raw, json)
Hash identifier:          dZg3BsLDbLbSXFIt9vG0mrSTzUj1+7kMgCLhbziFa+Q=
Subject key identifier:   E4:1F:B2:55:DD:8C:11:2C:DF:11:0F:64:39:8B:F0:AE:AC:6A:30:6F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849E2250539DA707F55357C6500
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3132e54d-3fe8-35dd-8703-eae748695c8e.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     30036
IP address blocks:        104.201.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:05:39:da:70:7f:55:35:7c:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=bf33761c-3d0b-44fa-b33a-9465ce292336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e4:78:91:80:0c:36:b3:7f:13:be:fb:ab:6b:
                    19:82:20:9a:c4:35:86:86:89:77:9d:bf:5c:db:89:
                    d3:f9:57:7b:de:df:63:7c:7c:4c:92:84:45:37:ea:
                    2d:78:6c:c7:70:a7:7e:e7:84:64:05:e6:77:e0:f0:
                    66:d9:8f:ed:da:df:34:7b:83:ab:ba:16:c3:65:ef:
                    68:0a:a1:41:7a:6f:97:f2:b6:41:e4:94:6e:3e:ac:
                    b7:41:b4:c7:f3:c3:66:e5:38:c7:34:ea:2f:ba:f0:
                    47:7c:aa:7b:54:65:00:5c:b6:a3:89:5b:91:2e:cf:
                    8c:d2:d8:40:84:c5:80:fb:85:76:53:02:c3:d5:27:
                    72:c7:06:10:17:37:fa:75:60:3f:5e:d4:f3:1e:49:
                    bd:da:4c:28:a2:7a:f1:7e:d0:28:c7:77:05:81:40:
                    11:72:be:87:24:d6:07:44:f5:71:6f:3d:4f:aa:3c:
                    a1:e3:c3:50:d5:24:78:b1:e7:5a:d1:aa:2e:b9:a4:
                    a5:4f:86:14:17:a9:bb:f5:46:de:4a:a9:c4:92:b1:
                    d8:45:b2:0a:89:0b:b7:93:98:2f:c5:69:61:c4:1a:
                    84:c7:3d:e3:8d:75:2b:af:60:1b:9a:1d:37:67:24:
                    38:b1:6e:1a:ad:84:ea:d3:f0:51:c6:67:e8:e6:cb:
                    b6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1F:B2:55:DD:8C:11:2C:DF:11:0F:64:39:8B:F0:AE:AC:6A:30:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3132e54d-3fe8-35dd-8703-eae748695c8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.201.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:ad:3a:0a:85:3f:a0:00:9e:11:f0:c4:62:ca:4d:94:e2:2b:
         ee:ee:26:7e:e9:66:b2:28:62:85:ac:80:3d:eb:8d:d5:21:97:
         ba:fd:f1:d0:d8:f0:d0:ba:7a:a0:0b:69:ad:1e:ec:48:1d:b1:
         90:1f:11:e3:31:c6:db:79:f9:5d:6a:d1:92:7f:56:91:40:6d:
         3e:ce:ca:60:3e:a0:01:fc:10:bd:cb:11:dd:81:46:0a:81:90:
         70:e1:c3:47:b5:8e:e4:b9:87:06:d0:eb:f8:ea:72:e6:ed:3b:
         f9:1c:d5:aa:88:df:fc:06:aa:36:32:9c:64:93:53:a9:f8:67:
         cb:c5:b0:76:cf:4a:bc:fc:b1:ac:b6:d2:c3:c8:82:64:0a:d4:
         f1:c7:ae:30:04:02:25:16:fc:d7:d6:32:83:38:3c:75:d3:da:
         60:9d:18:e6:5e:81:b2:54:51:ce:b4:8a:c0:ac:8f:b7:0e:aa:
         76:34:a8:18:d2:00:97:7c:88:21:7c:94:12:a6:05:f3:14:62:
         50:9b:ba:40:0e:72:3a:db:bb:66:8a:37:5d:91:f5:ff:34:a8:
         7d:b4:7f:8d:f8:e9:e2:f8:92:f8:bf:ca:70:8e:6c:78:3b:c6:
         b5:b7:89:0a:5b:e6:6b:74:93:a8:20:d2:08:cc:4c:ef:98:49:
         36:b3:d9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:55:16 2025 by rpki-client