Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/54e7d065-600c-3a46-9f50-15aa58a909d6.roa
File:                     54e7d065-600c-3a46-9f50-15aa58a909d6.roa (raw, json)
Hash identifier:          teMAXl8tm8OUCkTKLyTwXVyR4w0dVLxdbRl1zTfpbS0=
Subject key identifier:   38:BE:BD:75:95:CD:C8:AA:BB:54:5F:8E:09:13:AB:9A:C7:97:49:26
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849028F9E9EBDF05287C97A9880
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/54e7d065-600c-3a46-9f50-15aa58a909d6.roa
Signing time:             Wed 26 Feb 2025 10:54:49 +0000
ROA not before:           Wed 26 Feb 2025 10:54:49 +0000
ROA not after:            Tue 27 May 2025 09:54:49 +0000
asID:                     30036
IP address blocks:        104.201.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:8f:9e:9e:bd:f0:52:87:c9:7a:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 26 10:54:49 2025 GMT
            Not After : May 27 09:54:49 2025 GMT
        Subject: CN=a48baf5c-f68b-4df7-ad9d-603c875d37f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9a:f9:11:ca:72:aa:9e:3d:8b:5d:13:5c:f9:
                    6f:84:ac:ee:4d:e2:52:40:19:2a:26:7b:32:48:48:
                    b3:11:0e:16:7d:f2:16:19:6a:94:51:73:6d:84:5c:
                    06:65:ea:7a:6e:b8:c1:1b:7c:8c:33:4a:b5:66:6b:
                    32:80:21:a2:6f:51:31:9a:3e:59:7f:9b:25:91:b2:
                    32:b9:88:cd:63:aa:dd:51:73:16:cc:ef:dd:53:92:
                    11:f0:2c:05:1d:56:b9:fb:c7:70:00:9c:0b:bc:08:
                    df:9e:75:e5:b2:83:32:fd:e4:10:58:f7:b9:00:37:
                    21:a6:07:ff:ef:93:68:d3:76:fb:3f:fe:c6:37:c7:
                    0e:dd:5a:3e:dd:c0:2e:15:4f:71:03:29:06:d0:7f:
                    55:ed:62:95:a4:54:b6:94:b2:1c:05:81:8b:6e:c8:
                    68:40:43:2c:f5:91:1e:9b:8a:5a:d2:c9:c5:ee:c0:
                    62:75:45:d6:23:ef:6c:9c:f8:3c:2b:30:9c:a5:1c:
                    88:b8:33:85:53:d2:1d:99:6b:e9:a6:69:a9:93:43:
                    05:94:3d:98:8d:7d:c8:ca:b2:7f:27:39:d0:e8:b4:
                    1b:5b:78:80:4c:ac:8d:3c:c8:04:d1:5f:bc:96:4c:
                    2b:50:c8:4e:f6:86:03:0e:15:1f:a9:74:ea:c5:a0:
                    78:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:BE:BD:75:95:CD:C8:AA:BB:54:5F:8E:09:13:AB:9A:C7:97:49:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/54e7d065-600c-3a46-9f50-15aa58a909d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.201.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:f5:9c:ac:be:31:43:fc:3f:23:08:91:71:3c:89:b1:2c:ef:
         51:cd:9e:85:b3:02:3e:28:ef:c7:db:90:40:d2:ba:0e:be:bd:
         3e:d8:a8:44:1c:05:15:cc:f3:2e:87:0e:94:90:9a:4f:b6:a7:
         32:81:08:20:ef:7b:9f:73:d8:cb:37:31:ac:cc:20:c3:9a:92:
         35:4d:0e:45:bc:3c:53:78:83:29:58:00:2d:76:cb:45:dd:61:
         74:5d:65:ce:70:33:d0:95:cb:4b:fd:7d:9c:26:e0:e2:3e:aa:
         cf:b6:8f:1a:b0:e3:f0:28:09:e7:56:06:57:62:7e:1f:30:03:
         20:a0:9c:e0:61:9d:b8:9f:d5:a2:55:6e:e2:3e:09:78:9c:e2:
         67:a0:a1:64:5f:47:c8:2a:24:8f:c7:7c:69:a4:9a:dc:bd:3f:
         c2:d2:18:b7:d7:a3:ea:9e:e3:6f:d3:b5:f6:10:e8:48:76:1e:
         79:61:e8:d5:f2:9a:40:04:69:17:5b:a3:30:48:7d:45:20:c2:
         26:34:60:70:0e:f9:fa:3e:ed:2e:51:70:7a:2e:94:a2:10:51:
         c8:11:ab:9b:fb:30:13:c8:a7:98:09:6b:2b:c7:6a:51:97:86:
         5c:67:23:0f:f2:f6:d1:dd:ba:5f:0b:5d:81:fc:bc:20:54:c7:
         be:5c:1d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:18:19 2025 by rpki-client