Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/84e95a43-4c2c-358c-bd04-67966cc26d7d.roa
File:                     84e95a43-4c2c-358c-bd04-67966cc26d7d.roa (raw, json)
Hash identifier:          e6ZkPEKRcaE1c5rkeRar/wnLuWEoM+o5c+3/W9+0BA0=
Subject key identifier:   B7:E9:4D:72:01:43:CC:3D:BE:59:93:59:2F:4F:E9:F5:39:7F:47:21
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584A03A53EC1AC3DB66F3D4C3A7C
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/84e95a43-4c2c-358c-bd04-67966cc26d7d.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     14061
IP address blocks:        104.248.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:3e:c1:ac:3d:b6:6f:3d:4c:3a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=bd34b4ce-b4bd-413f-9c4c-c534af9bcaf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8c:05:aa:65:70:9e:45:11:66:42:39:c2:e7:
                    f1:67:01:d1:c0:c8:49:6b:1a:16:33:cc:e5:34:09:
                    0b:cd:c8:63:34:eb:a2:94:a7:0c:db:1f:8a:ab:2c:
                    9e:0f:e2:17:e4:bf:72:ad:0c:2a:17:87:f4:cd:73:
                    1f:36:c8:3b:95:bd:10:cb:d9:09:47:83:35:42:ab:
                    00:b7:92:53:c8:18:12:cf:e8:07:e3:4b:d6:c3:1b:
                    1f:2c:e6:a1:11:62:05:62:7d:32:e3:b5:9c:5a:2b:
                    36:74:02:69:8f:a6:73:a5:1e:d7:a9:f7:c5:98:2d:
                    93:e3:98:a5:bf:e6:e7:1b:a5:38:f4:b0:89:01:17:
                    62:45:26:49:5a:48:97:33:67:f3:71:8b:cd:e5:7b:
                    be:f2:70:19:ec:83:b6:a8:b6:c7:a8:d7:0a:2f:f6:
                    b3:e1:f3:de:6e:5c:ea:ac:b8:cb:f8:7a:0b:00:54:
                    05:47:ed:08:92:78:22:89:04:88:04:96:d9:31:28:
                    93:b0:b6:2a:55:e0:03:ed:43:ec:20:36:59:12:92:
                    e9:f9:8d:92:c7:8d:5f:c3:31:12:bd:48:84:5d:15:
                    d4:72:e3:30:9c:55:f8:49:b2:3c:8c:00:9c:c9:f6:
                    48:ee:ae:c6:cc:1b:7d:fe:e8:01:2f:f4:cc:03:66:
                    e1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E9:4D:72:01:43:CC:3D:BE:59:93:59:2F:4F:E9:F5:39:7F:47:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/84e95a43-4c2c-358c-bd04-67966cc26d7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.248.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:26:3b:0e:66:91:d6:48:05:85:63:7e:6d:83:00:e7:7f:7f:
         ea:f3:59:f6:af:ee:2b:0b:20:7b:6b:b3:a8:3e:3e:89:e1:fa:
         b8:fa:3d:38:5c:24:35:f9:b4:b4:ab:f0:f4:9a:9b:3d:f0:82:
         9c:4b:8f:f1:a4:9f:76:65:e6:96:de:7f:60:d4:54:a9:6b:cb:
         cb:af:6c:fe:ad:11:96:35:b0:b6:f6:59:44:2b:ed:c3:db:f3:
         87:6f:59:07:69:5c:ed:44:77:cc:b5:c2:e7:89:50:67:77:91:
         2e:2a:4b:0d:0c:10:ef:53:1b:59:92:a9:34:30:a6:72:9b:37:
         f3:d4:52:4d:e3:b5:39:5c:82:fe:f7:09:09:80:0a:1b:b9:13:
         aa:0e:1f:4f:97:61:97:df:6b:4d:f0:2b:78:73:75:7f:35:6c:
         70:f1:73:0c:da:91:53:46:02:52:f4:9d:f4:78:94:f9:1b:a4:
         cc:b1:3a:80:30:80:cf:1f:21:71:1d:5c:bc:90:ac:b9:a6:a8:
         fd:f6:02:ce:09:e4:1e:49:19:20:0e:99:e3:50:8f:cc:a2:01:
         2d:79:bc:7f:33:4b:d9:ee:6c:b8:16:96:ed:14:f8:c9:04:73:
         4f:80:03:e0:a4:c4:5a:c3:b7:60:15:f6:c8:bb:ea:9a:18:5d:
         ef:41:2b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:22:48 2025 by rpki-client