Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/868bf3fe-fed0-31f6-ac92-eed66d75b845.roa
File:                     868bf3fe-fed0-31f6-ac92-eed66d75b845.roa (raw, json)
Hash identifier:          u2F9m7b8DplWGeOvoJRE1KvSdT6kzI4m8c7dzcezfAc=
Subject key identifier:   62:78:01:A0:3E:A0:B0:03:0C:64:0B:66:E0:36:E7:22:75:1C:0D:3C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B4C0DC50EA50D3A7DF906600
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/868bf3fe-fed0-31f6-ac92-eed66d75b845.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     395973
IP address blocks:        104.134.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:dc:50:ea:50:d3:a7:df:90:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=a8960ed8-9ac2-49d3-a701-e93405e46f0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:07:0b:c7:86:81:99:ce:78:e4:40:43:cf:59:
                    ae:ba:66:8d:5a:39:a7:e6:0c:2d:3f:b7:61:77:4f:
                    98:2d:a9:74:5c:24:b7:fa:be:19:6e:b2:6b:06:c0:
                    d9:ea:cb:13:a6:82:5f:99:53:ea:03:63:d6:c4:58:
                    cf:2f:cb:85:81:02:85:e5:1f:d9:b8:17:09:50:36:
                    5f:b5:47:2d:57:f2:34:8f:f3:48:14:4a:e7:09:20:
                    58:b6:2a:59:89:a0:2a:2d:d9:ea:4b:cd:89:b9:ac:
                    f4:51:3f:cd:f1:d1:41:87:ce:3d:65:e7:1a:7f:36:
                    0d:48:9d:71:e2:7b:bb:a3:f1:22:be:61:7c:6d:19:
                    c7:bb:8b:a0:db:5e:d1:ff:78:b1:01:a1:73:3d:c4:
                    ed:2f:98:bb:1d:e1:1d:b0:4a:da:11:c6:2e:ba:be:
                    93:d9:cb:11:e9:41:ec:f9:9f:67:c0:66:1b:2d:2b:
                    97:0b:0e:69:82:c2:7d:5e:4a:77:6e:46:7f:c8:8d:
                    1c:de:06:a6:e2:6e:68:c2:4c:64:c2:57:20:d8:fa:
                    e0:9d:96:e8:fa:2c:6b:ce:11:82:d1:86:cc:32:94:
                    a9:ca:98:0f:d8:12:79:6b:71:5a:8a:00:c7:a3:f1:
                    a5:eb:4d:de:cb:21:a0:f4:c6:05:d9:93:27:72:98:
                    18:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:78:01:A0:3E:A0:B0:03:0C:64:0B:66:E0:36:E7:22:75:1C:0D:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/868bf3fe-fed0-31f6-ac92-eed66d75b845.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:14:2e:34:25:45:71:15:7a:8d:67:44:1a:dc:26:37:3b:0f:
         50:6d:9e:b2:65:3d:d7:cb:73:f3:4d:93:8f:68:eb:cf:04:82:
         92:a1:95:49:9f:6c:75:15:5c:ef:8e:6d:fa:0d:5d:f8:31:31:
         13:05:9e:74:87:c4:3c:11:81:f5:74:8d:2f:df:b5:a6:2d:57:
         ee:f9:1f:a7:ee:fe:07:b1:5c:ca:93:21:31:ff:ea:a0:df:62:
         4d:1d:ae:4d:40:e3:97:a1:c9:ca:d0:3a:30:29:48:57:22:da:
         a4:67:0d:4a:a6:7e:e1:df:e5:33:25:5f:0c:79:9a:23:c0:68:
         fe:aa:c0:4a:3e:24:a1:4f:d1:66:88:bb:ae:82:a1:1d:2e:02:
         13:3d:01:1e:3d:49:fd:c7:46:9c:ef:c1:d6:14:fb:ad:f1:9a:
         1b:de:2f:b6:41:03:37:65:0c:a2:c8:b5:76:8c:c5:c7:d4:9a:
         91:19:19:94:1c:f6:e8:54:6d:6e:f7:2e:75:22:4e:67:34:b3:
         db:28:52:fd:9d:b7:ba:fe:1b:53:46:a8:ff:a3:f8:69:a5:63:
         22:76:77:b9:83:d0:fd:e8:7b:74:a7:5a:f2:bf:95:fc:38:69:
         cd:d6:d6:16:8f:18:d0:9b:fb:7a:51:35:40:0d:ad:e4:f6:50:
         6b:9f:3f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:28 2025 by rpki-client