Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/59322c2d-6f24-393a-b195-8088f231b471.roa
File:                     59322c2d-6f24-393a-b195-8088f231b471.roa (raw, json)
Hash identifier:          Wxd37RzmQr1xP0Rzt8LjsDBmCQ3XDpn55G+OqOvOct4=
Subject key identifier:   44:5B:FF:3A:C0:91:56:D3:B2:2A:8A:BF:09:0D:1C:19:F2:E3:66:0C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B4C0FD436C0078E3A1B1CAC8
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/59322c2d-6f24-393a-b195-8088f231b471.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     395973
IP address blocks:        104.134.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:fd:43:6c:00:78:e3:a1:b1:ca:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=24106d86-8770-4ac7-a9c4-baccd5c63d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:25:ac:0c:d2:af:f5:4d:09:c3:96:52:04:a9:
                    d8:31:40:57:2c:29:68:2f:14:09:42:5a:65:6d:76:
                    39:a7:a0:34:d6:34:fc:2c:00:4b:8a:24:62:f7:9b:
                    5c:c0:c9:b2:da:e1:24:66:29:54:7a:a6:ba:cd:e1:
                    cb:37:1b:eb:db:53:74:9d:cc:58:c4:f5:7e:7d:56:
                    29:c8:23:23:20:ed:0c:f1:47:d2:90:ca:b8:82:d7:
                    16:02:d6:45:01:40:6a:7b:e3:cd:85:38:ce:b4:7e:
                    f7:5f:99:5a:db:0f:44:0c:10:64:52:bf:3c:f4:dc:
                    94:6a:7d:79:23:4a:4c:ce:61:19:b1:20:bf:49:cd:
                    5b:e2:33:b0:d2:1f:72:23:1a:de:d0:72:e3:6d:c2:
                    24:a0:49:70:55:8c:0c:e3:bc:05:02:d8:8b:3a:99:
                    11:ab:55:71:89:bd:f7:d0:c5:b6:4b:ad:4b:21:1a:
                    3a:3f:45:c6:66:3b:17:6c:5a:6c:7b:3d:3c:2a:4f:
                    88:cf:4d:e7:2a:e1:1d:95:99:13:6e:de:4b:2e:51:
                    19:e7:c4:f4:5d:ab:c1:7b:9c:68:88:37:55:43:28:
                    3a:a5:60:0c:c1:0c:7a:be:64:55:1b:df:39:3a:02:
                    16:4c:76:88:b9:1e:a3:76:48:01:d5:4e:82:62:b1:
                    83:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5B:FF:3A:C0:91:56:D3:B2:2A:8A:BF:09:0D:1C:19:F2:E3:66:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/59322c2d-6f24-393a-b195-8088f231b471.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:f9:b3:cf:46:e5:d6:15:77:83:19:bc:54:3b:25:ea:6b:8b:
         4a:0f:ae:95:04:ad:e9:c9:e8:f2:d5:0e:57:45:c0:85:62:2a:
         69:25:8a:3d:73:87:37:c8:f0:c3:20:97:d3:ed:7c:12:d4:90:
         17:3b:65:91:0b:be:70:53:70:f5:fc:44:ed:ef:28:7f:d8:e2:
         73:84:ad:8e:40:10:ad:5f:d6:b9:9b:2e:a5:03:27:35:85:b3:
         c4:42:43:fb:05:26:cc:34:07:fa:72:23:eb:82:b2:0e:09:00:
         56:4e:fa:ff:ac:09:ba:03:f4:c1:d0:ca:6d:d9:29:de:33:12:
         ee:37:67:54:f7:c8:99:4e:b5:30:af:e2:8b:63:1c:9e:00:1e:
         7b:fc:31:3f:13:0c:43:56:be:20:9d:a5:d8:e8:84:34:76:b9:
         4c:b0:e9:78:1a:37:df:34:bd:a7:80:e2:8b:aa:d1:8e:86:b6:
         35:f3:52:d9:35:8b:e7:a5:90:84:35:4d:2b:91:f7:05:af:0a:
         13:3a:62:33:2b:f1:40:4f:03:7c:66:b8:d6:62:0c:8f:24:35:
         b2:93:7c:19:4b:aa:47:45:4f:84:2b:80:9c:e2:19:5b:3d:01:
         af:29:31:50:b6:8f:61:da:85:a5:ae:20:1c:dc:c6:e7:a6:6f:
         07:3c:6c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:57:38 2025 by rpki-client