Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/60b287c4-77c4-3f17-9afe-c56cd4942c25.roa
File:                     60b287c4-77c4-3f17-9afe-c56cd4942c25.roa (raw, json)
Hash identifier:          apYVqAeMVvSRcwQeK3E5t6cekw+LG1IiJ2pVYoEgpNw=
Subject key identifier:   1B:F5:26:A0:B0:DD:15:2C:C5:32:4C:B8:A7:60:48:3B:DC:18:53:A0
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B4C0DD71519784775065B300
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/60b287c4-77c4-3f17-9afe-c56cd4942c25.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     15169
IP address blocks:        104.134.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:dd:71:51:97:84:77:50:65:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=5375868c-386f-492b-815d-c53b903cda62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4d:8b:44:1c:ad:07:7f:5d:ab:66:7c:25:91:
                    9f:12:84:49:9e:c6:97:cb:11:09:e3:a5:5a:16:f3:
                    73:90:4f:01:f9:4b:49:d5:21:1a:74:f7:1a:bf:f7:
                    3e:64:90:f6:77:70:ba:23:e5:f8:6c:9c:ea:e6:c1:
                    51:ed:fa:47:24:a7:19:e8:f7:b3:74:56:e1:1f:52:
                    4c:18:32:85:ec:b7:36:b4:4f:f1:7a:d8:79:ff:8d:
                    9d:14:2e:85:b2:b1:ac:91:9a:6d:ab:e1:a5:39:0d:
                    bd:a3:9f:41:39:cf:5e:8b:67:6e:10:f4:c7:7f:ac:
                    40:af:df:8a:c4:4c:43:91:43:6c:79:91:ca:8b:6a:
                    ca:68:f6:dc:3a:5a:ab:24:0c:78:e6:3b:76:75:a7:
                    6d:dd:c9:54:b0:7a:4b:10:66:f0:ae:83:0c:56:f7:
                    64:16:d5:fd:a8:26:c2:55:86:52:da:00:32:c1:32:
                    f7:c5:b4:f8:7e:8c:c0:35:a8:8d:3e:5a:e7:cc:68:
                    16:db:a3:fd:87:56:2f:92:e0:4a:cb:33:98:b6:fd:
                    c4:f9:81:11:65:0a:d6:1f:11:54:c0:a2:6e:f3:c7:
                    44:fd:64:f8:66:0f:e0:c2:65:db:96:4a:01:44:e8:
                    96:1d:61:e8:ff:41:6e:a1:ce:a3:71:75:56:73:53:
                    31:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F5:26:A0:B0:DD:15:2C:C5:32:4C:B8:A7:60:48:3B:DC:18:53:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/60b287c4-77c4-3f17-9afe-c56cd4942c25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:9a:fd:a4:8f:9c:b1:18:7b:92:d5:a6:df:8a:77:77:a3:3d:
         f1:08:8f:31:9f:6b:66:16:a7:d5:93:30:9e:ed:5f:14:bd:19:
         fe:73:65:c0:cf:8f:45:c8:23:9b:75:7c:7d:69:7a:db:10:7d:
         5b:06:19:d6:c3:1f:7e:da:5c:d8:7a:1a:3d:f5:ee:69:71:54:
         e2:22:a3:f8:44:24:d9:8b:e9:23:08:41:a1:1b:76:5e:6c:bc:
         a9:fb:32:1e:54:8a:22:85:cc:35:71:d8:5f:13:2e:f6:0d:03:
         36:88:69:51:37:8d:79:61:31:23:18:1f:53:8c:cf:25:5a:8b:
         3e:20:7a:13:13:42:56:81:91:11:d2:43:a1:92:41:73:1b:f4:
         29:9b:9a:bd:da:97:69:8f:da:4e:04:b9:12:9c:52:e2:8d:6b:
         58:0c:1c:b7:3b:b7:8b:67:28:d9:b1:4e:7a:d3:2b:39:ec:a6:
         9c:dc:7b:96:0f:4b:b7:25:d7:e0:12:11:a6:69:d1:c1:04:cd:
         0f:e1:5a:75:3d:ff:c3:06:5f:f5:08:8d:28:33:50:9b:08:8c:
         b0:e9:48:72:87:c0:9c:2d:ca:ba:e1:e6:00:3f:63:45:35:0c:
         09:f6:7c:8b:ef:27:2e:c2:ae:f4:30:a6:47:a0:8e:15:bb:49:
         a6:2b:1f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:12:15 2025 by rpki-client