Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7e4648ba-18fa-3c1d-a319-9a13fc217700.roa
File:                     7e4648ba-18fa-3c1d-a319-9a13fc217700.roa (raw, json)
Hash identifier:          jRfqGqEDfebRIj7n+NtqFjo2CCFlzrA9Cr84t4ZlBEM=
Subject key identifier:   AE:92:1E:C5:B3:43:13:18:5D:29:CE:8C:43:BB:F4:46:99:E5:57:C9
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848AF2BBAAE7AE980371B3F60C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7e4648ba-18fa-3c1d-a319-9a13fc217700.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     41264
IP address blocks:        104.132.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:ba:ae:7a:e9:80:37:1b:3f:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=92680a84-8fed-4da2-9175-a2c10166e37f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f4:c5:1f:76:95:0f:d8:f1:fd:14:a2:3f:fe:
                    a1:a1:53:63:27:b3:34:64:6b:b4:02:4f:1e:69:2c:
                    df:4d:75:9c:e9:c1:13:df:67:42:bd:d5:b5:90:17:
                    07:8d:0f:74:69:5d:38:b9:f0:e9:e5:9a:7b:d2:28:
                    13:34:6c:42:95:6d:01:07:53:5b:67:ed:72:6a:9f:
                    f5:43:ab:cd:17:b8:d2:d5:2e:a4:44:f5:2d:e9:0b:
                    11:f2:18:19:fb:49:3d:04:92:9d:53:3c:4f:f4:a3:
                    47:fc:32:b8:5c:a3:11:54:ea:82:89:54:43:db:77:
                    1c:dd:f2:76:ce:bc:03:38:f5:b3:23:9c:7f:92:8f:
                    e6:ab:05:57:2d:1e:65:f8:be:62:9b:90:ca:78:1d:
                    28:7d:c9:5c:13:2d:ee:a2:27:7a:e8:1e:1c:92:b6:
                    1d:88:b5:11:58:70:6a:a7:9f:82:4d:79:10:0d:77:
                    0b:b1:f1:f4:a8:87:78:ab:d0:ba:af:0c:24:e6:e9:
                    98:7f:8a:2c:79:14:ed:3d:e4:40:ec:99:f7:34:b3:
                    46:5f:08:ef:00:5e:3b:bf:9d:bd:93:7c:24:aa:b8:
                    65:47:36:19:ca:0f:b3:df:f5:e0:80:23:29:aa:75:
                    c6:53:44:44:cb:70:47:f8:6c:97:6c:e0:c0:62:e3:
                    48:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:92:1E:C5:B3:43:13:18:5D:29:CE:8C:43:BB:F4:46:99:E5:57:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7e4648ba-18fa-3c1d-a319-9a13fc217700.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:55:c0:90:e7:2e:a1:71:72:87:f7:fd:95:70:f1:6b:ac:2d:
         55:06:fe:ed:f3:79:19:cd:fb:e8:67:f0:bc:7f:5b:07:10:24:
         69:d4:fd:04:0c:6d:22:99:25:93:bf:c1:3e:ba:cb:55:34:3c:
         81:32:94:12:db:9c:82:15:6c:ca:02:56:66:d9:f4:2b:c5:da:
         0f:29:78:2c:64:16:ad:28:92:46:bb:28:c3:3e:db:e7:00:5e:
         4a:cb:66:44:c9:1f:6e:16:c9:ab:0c:c6:7b:79:9b:fe:98:6e:
         67:91:74:58:a4:93:86:3b:b9:1f:a3:e8:90:1c:fb:65:25:74:
         25:8b:db:b8:ef:28:df:0f:9f:8d:b3:94:3c:b6:ce:4d:ab:fa:
         4f:37:1b:ec:54:32:c7:21:22:65:8c:65:3f:95:99:e5:b0:6c:
         1c:04:50:f0:53:db:20:5d:93:48:e6:d2:39:1d:7e:2d:91:35:
         c1:51:6c:c8:fb:b1:81:c1:bf:75:c3:02:8f:ed:2c:6d:50:49:
         13:9a:ef:67:aa:0f:5d:04:e9:04:39:81:00:a9:ee:cd:96:9c:
         d4:85:47:9d:39:82:d7:51:8e:11:ca:a5:c0:db:e6:f5:f0:cb:
         a6:58:1c:7f:92:5f:0c:98:a2:5f:5b:7c:e9:92:19:6e:d1:9b:
         eb:c2:40:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:56:59 2025 by rpki-client