Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/785106ff-56d5-3672-b19b-4db474832dc6.roa
File:                     785106ff-56d5-3672-b19b-4db474832dc6.roa (raw, json)
Hash identifier:          jgGp3AbKg16v26FzBHV3EeSy7O3Z45NoFhi712ALqEI=
Subject key identifier:   07:36:95:1C:CE:9C:42:61:09:93:1C:92:DC:06:F6:29:68:3F:D1:DB
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B4C0F635AE11B8436A144921
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/785106ff-56d5-3672-b19b-4db474832dc6.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     41264
IP address blocks:        104.133.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:f6:35:ae:11:b8:43:6a:14:49:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=4e41312e-7ebe-44c3-b2e0-95cc478772ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9d:34:61:d3:a8:38:ce:64:61:f8:bf:7f:47:
                    d2:d7:e0:00:9e:35:f3:1c:12:83:f8:29:5e:cc:46:
                    82:d7:88:7d:eb:0c:f2:8f:d4:f2:b9:30:33:b4:20:
                    78:51:25:ab:39:eb:51:d3:97:15:cc:97:1a:48:f9:
                    ba:fc:d2:74:09:62:c4:c8:91:52:17:d5:e0:04:44:
                    64:92:5a:9e:3d:09:64:04:8d:08:22:bd:af:40:5b:
                    98:05:66:10:ba:39:44:a7:f5:e7:a5:64:cd:0b:84:
                    2f:08:11:be:9a:28:01:43:2b:74:f9:a8:e9:b8:ac:
                    9e:1a:62:45:6d:57:89:71:a4:bb:2f:a9:58:9d:60:
                    ac:f8:72:7c:91:67:fb:4e:51:b6:78:49:3d:e9:38:
                    ae:de:e1:45:5a:84:4b:18:b3:3b:88:dd:49:c9:a4:
                    a2:f8:33:ac:15:58:c3:d7:17:98:d8:29:69:12:66:
                    bc:7e:b0:4d:19:4c:25:1e:53:2f:5e:7a:1b:0d:b7:
                    47:c4:bf:29:11:fe:50:5d:2e:4a:19:bc:49:56:bb:
                    91:ff:16:84:04:64:04:43:37:2d:fd:6a:da:99:11:
                    79:86:ec:41:8d:07:7e:bd:10:34:41:2d:6f:69:75:
                    c2:e6:0d:95:b2:33:df:06:4d:62:ea:8c:9d:c5:b9:
                    74:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:36:95:1C:CE:9C:42:61:09:93:1C:92:DC:06:F6:29:68:3F:D1:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/785106ff-56d5-3672-b19b-4db474832dc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:31:9b:f3:7a:4d:39:19:42:45:5f:1e:6e:29:e5:f3:61:74:
         d6:92:b5:17:92:a1:d8:fe:eb:5f:7f:5c:5e:8e:1b:1c:5d:b9:
         79:f5:14:ef:25:37:1c:f0:d8:45:32:70:a1:2f:31:52:3c:7b:
         c1:3d:86:db:e7:bd:20:f5:02:b0:7e:6c:45:41:7d:41:b7:1b:
         55:a7:c4:e6:b6:99:80:74:3c:74:aa:32:45:b6:2c:57:32:98:
         07:8e:df:63:38:70:7c:e5:5e:4c:72:d7:a0:c8:d4:4d:fc:17:
         d9:7f:d5:8e:64:8b:13:74:fd:18:d1:d3:2b:58:70:a3:74:0d:
         aa:30:e2:e7:7b:be:d2:99:d8:52:f9:4a:09:8f:f5:9d:bb:07:
         43:8c:76:7d:dd:ae:90:74:85:ca:1f:14:c4:a4:45:a9:3a:b9:
         ff:1d:85:bd:69:70:dc:9e:79:fe:69:7a:4c:05:5a:0e:3a:ca:
         a8:3c:4e:4b:ed:db:9b:bb:10:55:30:91:82:36:de:b6:eb:ff:
         b1:26:5f:89:3c:db:60:e6:92:d3:11:93:64:42:4d:d9:35:7c:
         c1:0c:bb:5d:5f:9b:e1:0f:9c:ff:c2:b8:2c:e5:30:c6:6e:72:
         ed:ff:ec:4b:f1:84:8c:53:aa:1f:4e:7b:e9:86:e5:f2:73:06:
         f1:94:7e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:57 2025 by rpki-client