Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9c084484-15a4-3b83-8c82-29fbcb22e69c.roa
File:                     9c084484-15a4-3b83-8c82-29fbcb22e69c.roa (raw, json)
Hash identifier:          QEROlh3aX546yR7o0hZtWbGQnz1YXyfTIdJZvojLWcw=
Subject key identifier:   6D:60:03:1F:FF:86:42:22:A2:3F:7A:93:1B:94:55:D4:7F:08:B0:01
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F43285849B14A051ABDC6F437F001A580
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9c084484-15a4-3b83-8c82-29fbcb22e69c.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     1239
IP address blocks:        63.161.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:05:1a:bd:c6:f4:37:f0:01:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=9d46150c-ea69-4b82-b584-093e4f87e280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6b:7c:bf:86:8e:5e:35:7b:90:ad:b1:88:29:
                    e4:ac:9b:67:f9:26:88:af:d1:14:ce:69:25:e7:65:
                    5f:1b:72:d0:cf:d2:a4:04:df:61:d5:2c:03:b6:51:
                    db:8e:5d:1c:b9:bc:23:78:45:00:0e:d3:aa:5e:ae:
                    8e:1d:63:6d:ec:fc:9a:96:b1:a6:cc:5c:b8:74:41:
                    01:eb:6b:36:a7:59:45:1b:21:9b:d8:b3:6b:19:68:
                    ba:14:57:f0:e8:b3:57:2f:8a:ab:77:28:ce:22:41:
                    0b:ad:bf:7e:ce:4d:4f:b2:39:23:5a:07:7f:7b:38:
                    f7:d6:14:bf:12:ac:b1:26:f4:a1:b9:ae:89:88:22:
                    b6:9a:da:07:9d:69:43:f4:12:c6:42:47:c6:5f:4a:
                    6f:ef:fb:7f:82:80:fa:59:74:c6:b0:ae:3b:28:55:
                    d0:08:48:8c:82:a3:11:62:4b:47:de:80:7e:af:5b:
                    9e:d6:20:db:67:50:a4:48:1b:18:e9:a9:6b:f2:f1:
                    ad:78:4e:d9:93:c9:7f:af:39:09:9d:2c:a1:e3:46:
                    fa:8e:00:a5:ac:8a:97:bd:98:fa:00:f4:35:78:3f:
                    0b:d6:76:c7:12:61:f5:53:c5:e6:af:e8:32:d4:03:
                    e6:2f:c6:40:61:16:e2:7d:9a:10:a7:1f:8a:d6:ff:
                    82:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:60:03:1F:FF:86:42:22:A2:3F:7A:93:1B:94:55:D4:7F:08:B0:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9c084484-15a4-3b83-8c82-29fbcb22e69c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.161.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:ec:6f:42:82:38:6c:d0:42:b1:96:a5:50:d4:11:cd:5a:d1:
         8e:7e:13:fa:2c:d0:e1:69:b7:eb:ad:b5:08:82:03:68:a8:24:
         8c:04:1c:7a:9c:cc:e1:2c:26:ff:a0:40:b5:85:43:de:2c:d5:
         ee:35:18:74:d6:f3:6a:76:2f:e8:3d:c6:f1:c0:ac:67:8e:cf:
         a2:db:19:f6:39:29:59:67:42:73:63:70:6f:d9:fc:04:69:34:
         98:6d:e4:3e:53:1c:1d:d9:ef:47:ec:22:ae:2b:a4:90:5c:99:
         aa:f1:e7:db:8c:6d:3b:39:7f:b2:c7:a2:cf:61:da:98:d7:93:
         4a:a1:7e:1b:b2:95:c3:c6:55:d2:a1:80:8e:e2:ea:49:10:64:
         c3:66:97:92:c8:49:e1:33:fb:1d:73:95:f2:02:d6:e9:5f:a8:
         37:0c:ef:d2:3c:5b:25:2a:df:b8:ca:31:79:66:91:ec:38:5f:
         ac:63:d1:81:62:1b:ed:37:27:e8:bb:ed:6e:66:2c:0f:c4:c6:
         5e:e1:64:d6:47:7d:cc:cb:b7:c5:a1:ee:ad:11:04:34:28:56:
         c2:a9:0a:77:c6:e9:3f:32:35:ea:06:e6:9c:bb:8a:27:8b:0c:
         68:96:fb:6d:91:87:ed:2d:13:0d:8a:9a:4e:a2:33:52:5d:df:
         ae:ff:e3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:08:33 2025 by rpki-client