Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/78dde3cb-2254-3dfa-92fa-d04e5cb07208.roa
File:                     78dde3cb-2254-3dfa-92fa-d04e5cb07208.roa (raw, json)
Hash identifier:          CkDuY1H//MLeAPGcHEqqs/F1etDbdFK8pd73or1uMM0=
Subject key identifier:   CC:37:DB:82:6F:FA:42:31:CA:DB:6F:25:D1:13:BE:5E:AE:5B:9D:AA
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B4C0E36A899F2613C5637CB0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/78dde3cb-2254-3dfa-92fa-d04e5cb07208.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     395973
IP address blocks:        104.134.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:e3:6a:89:9f:26:13:c5:63:7c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=e4b616a7-c119-4982-a14a-c1812d5e43a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:47:66:91:0a:61:83:6f:b8:b6:61:44:46:28:
                    81:95:b9:e5:b2:c8:95:e4:b1:27:d2:08:32:d2:c9:
                    50:96:f2:59:f7:1e:c2:3a:22:1a:20:68:b7:79:b8:
                    6e:98:ff:13:08:7c:f1:52:7e:88:b6:a2:fa:97:b5:
                    fd:a7:13:06:a9:15:2f:47:64:5f:6d:11:9f:72:f6:
                    07:71:2e:c3:0b:92:ac:89:f8:83:d6:4e:b1:0c:31:
                    25:4b:42:47:75:72:4c:5d:80:2a:a4:26:1a:39:51:
                    e0:68:fe:ea:cd:27:be:73:fd:fb:bb:8a:f9:1b:27:
                    1f:89:1d:bc:1a:83:16:77:70:cf:7b:97:c7:20:ed:
                    88:17:a4:55:90:dd:1d:34:46:86:e9:52:15:b3:9f:
                    8e:89:3d:c0:1b:53:4d:ca:23:22:ac:46:61:ea:f3:
                    ac:eb:71:01:28:b9:1d:48:a9:b7:68:c3:c5:81:58:
                    0b:ef:9a:4f:86:57:b2:45:99:e7:1f:38:a4:b3:4c:
                    c0:c8:90:f8:9c:b5:1a:89:23:15:8f:c5:2b:92:3b:
                    ad:46:cc:99:bb:80:11:e8:95:4b:8f:85:28:09:ea:
                    f0:15:df:06:17:4e:2e:8e:7b:9f:08:ec:61:fd:e8:
                    e1:bb:eb:26:34:4c:e9:77:78:21:73:30:2d:40:4b:
                    31:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:37:DB:82:6F:FA:42:31:CA:DB:6F:25:D1:13:BE:5E:AE:5B:9D:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/78dde3cb-2254-3dfa-92fa-d04e5cb07208.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:08:10:24:6d:46:fd:be:a1:2e:b2:a4:f3:1c:94:37:1f:c9:
         7a:7e:15:0a:02:75:4a:c3:1e:c0:4d:1a:60:33:eb:07:26:8d:
         fb:32:04:df:dc:c1:18:ac:49:81:02:07:ae:22:8e:34:dc:23:
         20:36:0a:df:46:b4:34:92:72:6d:59:1c:ad:2d:c3:38:a1:d5:
         a6:cb:07:1e:c3:c0:57:20:0a:ae:52:c5:36:1c:15:f1:93:93:
         b4:37:3c:9b:7e:dc:53:64:15:c1:70:b9:fc:fa:6d:70:52:d5:
         f3:e6:99:5c:7a:09:fa:ac:e1:ec:d1:13:93:59:37:03:76:30:
         ed:08:8b:d2:3d:b9:b5:fe:8f:c6:ab:2e:35:d8:4b:cb:ac:f8:
         c1:9d:26:4b:c8:60:4e:bf:35:a9:b1:a4:5c:8d:1b:07:4b:d3:
         72:e7:bc:c5:5e:8a:be:dc:33:d9:53:93:86:07:ed:f6:67:25:
         e1:b4:ad:f8:73:b4:86:fa:aa:3c:a3:68:2a:7e:34:c0:6c:59:
         4b:d1:67:4d:3c:3a:3b:e7:5e:f2:cd:1c:4d:c5:7d:26:66:e4:
         92:78:53:61:c6:78:ce:6a:ee:df:e8:a7:88:7d:45:81:2f:91:
         90:a1:4f:61:3b:26:28:a3:7f:29:61:bf:8d:25:82:6a:11:b8:
         51:5f:89:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:20 2025 by rpki-client