Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0ff2df3b-70d5-34fd-87e6-b887b580b020.roa
File:                     0ff2df3b-70d5-34fd-87e6-b887b580b020.roa (raw, json)
Hash identifier:          3U7voWWvqMWVkNB71UB2eNiRirIDGKPkhJAIS9/oDcs=
Subject key identifier:   D0:77:30:72:5A:6A:4E:7B:A0:7D:2B:2F:03:78:84:78:BF:A1:F0:6D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B4C0DEC98B219BBE5C96D000
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0ff2df3b-70d5-34fd-87e6-b887b580b020.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     41264
IP address blocks:        104.133.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:de:c9:8b:21:9b:be:5c:96:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=5f12fe85-42a6-4aba-ac86-9b081d005cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:63:ef:ca:f4:4f:43:cc:9f:32:00:21:a1:f5:
                    ce:b7:17:fa:a0:35:d0:49:99:63:57:a6:f3:c7:54:
                    a0:bb:20:b1:60:c6:0e:33:1b:05:0d:f8:ae:97:f1:
                    3d:cf:5c:d2:81:3e:a4:4b:33:6c:c2:50:20:20:8f:
                    0c:75:f8:12:e7:28:c8:74:87:b3:af:92:e5:d8:5c:
                    92:f6:44:08:6f:b9:71:fa:82:ba:8a:27:f9:9e:36:
                    17:11:2a:e1:a4:8d:d6:bb:aa:65:7f:0e:0b:f6:44:
                    d6:13:e0:7d:38:48:88:d9:bb:0c:d0:b2:a4:48:72:
                    73:5c:d9:86:d5:31:9a:a3:82:0b:89:0b:59:d4:e2:
                    05:ac:03:20:62:aa:63:e0:c1:90:ba:cb:79:03:15:
                    96:93:91:e7:ce:eb:3b:3d:03:15:a0:df:72:4e:89:
                    57:8d:cd:86:d5:3f:0f:49:bc:6b:57:88:50:63:03:
                    a8:a0:43:c2:47:f0:5c:b4:66:28:c2:2e:91:6f:98:
                    75:94:25:e7:f7:16:18:f2:84:29:37:11:08:08:2b:
                    86:a9:1b:61:5e:b9:8b:9a:ea:e3:b4:5e:cd:c9:e3:
                    62:4a:ed:a8:03:5e:ba:95:36:c1:1c:9d:c9:31:ea:
                    9a:6a:77:f4:4b:eb:05:59:8a:7c:79:ac:1e:10:d2:
                    3d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:77:30:72:5A:6A:4E:7B:A0:7D:2B:2F:03:78:84:78:BF:A1:F0:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0ff2df3b-70d5-34fd-87e6-b887b580b020.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:17:98:9e:cf:48:9c:94:75:43:19:d3:af:c9:e3:3d:22:36:
         95:14:6d:68:f0:13:f3:f7:92:2b:69:06:b6:39:dd:21:29:f6:
         99:83:88:db:05:80:47:1e:05:a4:f8:29:ec:0b:03:ef:dc:73:
         5d:7c:a4:be:fc:c2:47:75:2a:d3:09:7b:c9:87:d3:73:9c:28:
         aa:35:2e:d9:10:8c:0b:02:1a:23:83:39:e9:1f:a8:05:33:59:
         a9:93:0e:1c:8c:5f:81:3d:c3:f6:8c:77:7d:3f:c4:43:1b:e8:
         92:68:54:36:32:2b:84:c1:c7:7d:92:fd:ea:83:29:ec:4d:36:
         e4:0f:08:ef:ec:a3:54:bf:48:49:b1:66:38:8a:92:e3:a7:38:
         fa:46:c8:b1:c5:8d:d6:bd:9c:ad:95:f1:0c:72:f7:6d:fa:c7:
         8f:94:f8:1d:67:5f:41:92:5e:97:8e:4e:2f:82:3e:d5:6b:f7:
         b4:1e:99:ee:5f:a1:a4:2a:9f:f2:6e:02:96:a3:ab:06:44:63:
         de:2d:b6:29:93:e8:20:5f:00:3a:49:7c:28:a9:eb:6a:0b:99:
         16:2a:87:b9:ba:8e:26:4d:c6:97:46:06:58:b9:e8:91:aa:90:
         19:f3:2b:a2:59:2e:2f:dc:ec:0f:a1:8b:01:b3:85:b6:54:3a:
         31:f9:ee:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:09:48 2025 by rpki-client