Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2c2462db-9830-37e5-b3c0-b743a8d54064.roa
File:                     2c2462db-9830-37e5-b3c0-b743a8d54064.roa (raw, json)
Hash identifier:          /20+UgmgyONXSGlg6D+MWo7+OrBjKHEIHEqi59j3av4=
Subject key identifier:   8F:48:B5:60:ED:F1:A9:E5:83:38:6B:48:97:55:64:22:AB:7F:27:3D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848D70617D5749EFC38C1AF3300
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2c2462db-9830-37e5-b3c0-b743a8d54064.roa
Signing time:             Mon 10 Feb 2025 20:37:58 +0000
ROA not before:           Mon 10 Feb 2025 20:37:58 +0000
ROA not after:            Sun 11 May 2025 19:37:58 +0000
asID:                     36411
IP address blocks:        104.134.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d7:06:17:d5:74:9e:fc:38:c1:af:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Feb 10 20:37:58 2025 GMT
            Not After : May 11 19:37:58 2025 GMT
        Subject: CN=2e6c226a-061c-4387-ba96-d242d2ef9943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ee:04:ca:b6:e2:8c:c2:1a:73:bf:2a:d3:e6:
                    ec:ea:1d:0d:5e:3d:1c:57:6c:2d:fc:82:ea:95:b1:
                    a6:34:5f:a6:93:b9:8f:10:11:0a:d1:14:82:c4:ca:
                    f4:5b:19:20:7c:01:84:20:83:7b:d2:be:af:f7:97:
                    60:70:39:0f:19:18:c9:fa:e1:a0:43:83:e8:76:00:
                    01:88:1e:64:99:3d:14:01:16:f2:24:8d:aa:88:75:
                    0c:2b:55:78:0d:d8:cb:e8:a7:b6:76:5b:8b:4c:1d:
                    df:b2:74:8d:f9:de:96:b0:78:f8:ed:70:c9:63:dd:
                    df:aa:c3:75:02:45:07:7e:4e:48:e5:a2:f3:14:02:
                    7d:71:b8:6b:9e:9f:f7:8c:bb:27:5a:77:68:c2:7a:
                    11:a4:06:c4:ee:66:10:10:21:a8:ec:a9:8a:b2:23:
                    29:d3:f9:20:52:bd:d1:b2:5e:f0:2b:d3:80:18:e0:
                    16:f1:16:dd:4d:9f:f4:32:77:5a:f6:63:be:61:11:
                    a5:dc:1b:5c:8a:67:41:2f:7f:98:0b:ac:d0:ff:20:
                    5e:3f:b4:16:1a:ea:19:1c:c9:6d:6f:8e:78:6e:bf:
                    86:d4:57:ad:08:3d:a0:c7:24:d8:0f:39:68:0a:06:
                    a6:db:81:ea:80:7d:3f:1c:ac:39:3d:15:bc:32:e2:
                    44:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:48:B5:60:ED:F1:A9:E5:83:38:6B:48:97:55:64:22:AB:7F:27:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2c2462db-9830-37e5-b3c0-b743a8d54064.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:d1:03:d0:85:8c:7b:29:7a:09:ca:e0:07:0d:5a:d1:37:dd:
         30:d6:47:72:1e:e7:87:88:d3:57:38:07:3e:4b:89:ec:f5:88:
         40:27:be:cf:f6:db:44:23:f3:93:0e:91:4b:29:4b:8b:fd:bd:
         43:ad:5c:63:b8:f6:c8:d1:ad:af:57:6f:a8:f6:03:24:68:47:
         a9:75:3d:48:e9:f0:ed:47:3d:7f:1f:e1:bc:24:b3:13:1c:27:
         73:db:ad:db:11:06:68:96:7a:54:29:80:d3:c1:12:e4:c3:39:
         37:51:71:49:f1:02:2b:71:2a:63:1e:b8:ae:1d:3a:1d:c9:34:
         a0:b2:d9:88:c7:e8:00:c0:ba:e9:98:a3:dc:76:23:aa:46:a4:
         40:e3:84:fb:91:1a:ce:94:57:af:ff:38:d9:d8:37:fc:a1:93:
         69:3c:16:22:68:bd:0b:26:a1:95:4f:ba:0b:54:46:96:38:d6:
         26:d0:bd:68:9d:56:0f:c0:31:8a:04:04:7f:c0:7d:55:b1:f2:
         4a:07:34:83:ad:00:26:12:41:d1:b2:06:97:97:24:2d:4f:dc:
         cb:b8:ed:37:bf:cd:2d:2b:2a:b8:54:71:0b:e6:f2:22:fa:5b:
         fe:3a:46:5b:f8:29:70:b1:77:67:f7:32:d8:69:d9:24:6b:98:
         ef:30:81:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:33:59 2025 by rpki-client