Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b479f451-df4f-3f75-b625-b950e008769d.roa
File:                     b479f451-df4f-3f75-b625-b950e008769d.roa (raw, json)
Hash identifier:          DF4b3rSTown6Yunz87CYeI8IETUYMM3WM8c+HNh+0tk=
Subject key identifier:   D0:73:5F:6E:E6:6D:F3:54:FC:29:69:73:B9:40:44:1A:84:1B:E7:75
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848BFEBC042AE34AD03C2523780
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b479f451-df4f-3f75-b625-b950e008769d.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     395973
IP address blocks:        104.134.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:c0:42:ae:34:ad:03:c2:52:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=fde72bd6-d0d8-42d7-a462-81e888a20978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7d:c1:91:4e:b3:db:c1:91:be:ee:b8:6f:9a:
                    54:05:46:97:10:f8:4b:7c:5e:90:5e:6f:6e:36:79:
                    a5:39:c4:51:a1:e6:b9:d4:d3:64:47:f2:ee:74:8e:
                    50:d1:1f:0e:94:0e:46:5e:06:9e:54:26:03:fa:4c:
                    73:f8:4a:ca:51:fb:5e:f4:70:5b:42:09:81:e1:eb:
                    ed:3a:c9:e2:96:cd:49:59:fb:a7:42:06:97:a4:b4:
                    65:61:a6:2f:5d:49:70:f3:98:60:9b:c2:21:5b:44:
                    b5:11:47:a6:51:13:08:2c:b2:f7:86:38:e6:e6:81:
                    35:88:06:59:e0:e1:65:44:fd:8d:8f:db:bf:6f:e9:
                    99:b7:4d:31:04:c4:fb:df:3a:bc:1c:55:46:1f:af:
                    08:50:46:15:e4:a3:fa:ac:f1:ca:06:a6:91:b6:04:
                    bc:37:ad:4d:58:db:82:b1:00:ea:68:be:d3:7a:c5:
                    3e:af:1d:b5:ed:4c:2d:40:9e:1c:93:6b:af:99:fa:
                    0f:86:b5:1a:5f:5a:c7:aa:5d:8a:fa:d3:25:3f:ad:
                    7a:a7:8e:57:55:ed:bd:66:b8:f0:6f:5a:06:1c:4a:
                    77:b9:89:76:59:e5:33:13:b3:d8:23:31:16:e5:db:
                    41:5d:fa:ae:3e:4e:17:e7:c5:30:92:7d:0f:f5:95:
                    77:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:73:5F:6E:E6:6D:F3:54:FC:29:69:73:B9:40:44:1A:84:1B:E7:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b479f451-df4f-3f75-b625-b950e008769d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:81:0c:3e:90:a1:97:5f:b1:c6:9b:24:0c:f3:9b:d2:a9:90:
         26:9b:49:cc:e2:9e:03:30:d8:fa:61:40:7f:b1:c8:3b:8a:9d:
         c3:2a:33:88:fa:15:e7:97:69:ac:43:f0:3b:0d:bd:a1:ca:68:
         60:b5:97:ef:69:96:f7:27:8d:dd:32:16:dd:29:a8:42:a8:42:
         98:6c:d0:83:c1:15:8a:b7:4f:92:66:cd:a2:37:2d:8e:e5:0f:
         21:07:b5:5c:86:35:bd:5f:50:e5:c0:4b:ab:4e:02:96:82:58:
         04:41:fe:73:01:6a:3a:a0:c7:da:46:e4:59:f8:c4:be:58:95:
         87:09:9b:f5:d8:65:3a:4a:ff:17:1d:dc:6b:b7:43:a1:fb:17:
         97:a7:6c:a0:41:5b:11:06:3c:ac:15:ba:32:ac:65:d7:ab:6a:
         83:58:7a:f4:7a:90:0d:d6:ab:d2:04:ad:f6:22:bd:48:80:3f:
         8b:30:c1:d3:be:15:95:0e:ec:8f:a2:e5:2d:e7:7d:cc:10:ec:
         48:c3:8b:40:08:e8:18:cb:2d:e4:cd:e7:38:3b:b3:e4:9c:3a:
         da:35:c7:7d:0e:2e:94:67:b0:0d:b8:91:cb:2c:c4:6a:54:ef:
         4f:53:b1:af:91:6e:bb:eb:96:8e:76:be:90:cd:7c:3e:fc:ff:
         8c:f8:be:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:43 2025 by rpki-client