Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d13b873c-8ec7-3dd9-8f2e-39015fb9f5f5.roa
File:                     d13b873c-8ec7-3dd9-8f2e-39015fb9f5f5.roa (raw, json)
Hash identifier:          iM3S4W6Ti8ZhzszLA9892aYJvwtD9Sf7C97lsMR2faQ=
Subject key identifier:   6A:CB:50:88:82:5C:92:E0:49:F7:EC:FE:D2:E7:98:35:0A:E8:F4:FD
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848BFEBCBCB7F919BFE5BFA6CA0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d13b873c-8ec7-3dd9-8f2e-39015fb9f5f5.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     15169
IP address blocks:        104.134.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:cb:cb:7f:91:9b:fe:5b:fa:6c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=3bedfe09-6bbb-4c55-b66f-14aa58394f73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2e:56:74:3d:26:10:53:5a:47:54:69:55:ed:
                    41:9e:0b:08:1e:f9:37:b5:32:4c:c1:ea:f6:00:a8:
                    43:e6:71:c6:7f:c1:5d:9a:59:97:ba:32:60:dd:71:
                    1f:91:4d:2f:92:b6:7b:42:5d:1a:cd:49:e5:b6:59:
                    b7:84:be:84:30:b2:97:c7:2d:4d:e2:0d:bb:f7:ae:
                    74:c9:57:6e:a1:2b:91:d8:da:9d:1e:f6:76:41:3c:
                    8c:23:45:e5:91:8f:05:e2:aa:2d:da:87:2b:82:99:
                    df:b5:bf:16:e6:62:13:d0:ba:f0:34:44:cc:8c:78:
                    dc:47:f4:58:2f:1d:13:75:47:03:cf:ee:28:72:f9:
                    5c:cf:a8:25:88:b2:92:49:9d:18:d8:12:fc:1e:54:
                    31:66:8e:9f:2c:eb:37:ae:d2:79:c9:aa:89:b3:8f:
                    b8:75:78:f6:86:f9:91:01:62:83:16:35:8a:c6:97:
                    45:52:c5:bd:00:f2:e9:14:9a:33:ac:93:18:e5:69:
                    1e:2d:10:0c:0e:22:1b:b9:5b:d2:8e:9b:fd:83:6e:
                    56:be:b3:a5:69:fd:7e:76:d8:35:b8:83:a5:bc:b9:
                    7b:eb:4b:0b:e2:66:23:10:96:d1:d8:ef:25:e9:fa:
                    7f:6b:9c:49:51:29:31:89:4a:d0:ee:a1:7a:ce:17:
                    77:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:CB:50:88:82:5C:92:E0:49:F7:EC:FE:D2:E7:98:35:0A:E8:F4:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d13b873c-8ec7-3dd9-8f2e-39015fb9f5f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:2d:8c:87:75:41:fa:8c:7f:39:be:b8:bc:92:73:44:b5:a3:
         99:ff:04:b9:93:aa:43:fd:20:0d:f5:53:c0:5b:cf:86:1e:99:
         43:43:64:7e:47:20:5d:7e:58:c1:18:46:07:f2:10:e5:4e:3f:
         33:0d:07:da:3e:f8:6c:2c:76:aa:2e:df:59:05:1e:75:94:53:
         30:e9:e1:20:eb:a8:82:7b:c0:23:73:17:be:ec:61:8f:29:e6:
         f3:9b:32:0d:6c:9f:7c:ba:5b:13:a5:5c:bb:9d:9a:40:f1:77:
         18:1b:69:b6:aa:cd:3c:fa:df:e9:08:d4:6c:65:ad:37:fe:77:
         75:16:78:5b:b5:4f:fc:c1:50:df:dd:5e:6e:36:d2:81:97:ef:
         e7:a7:af:c7:82:77:d8:83:f6:ef:13:fc:7c:fd:54:07:4e:ac:
         b6:25:27:d5:3f:c3:7c:48:7b:91:70:c7:42:e6:eb:0d:da:22:
         1b:b6:d1:af:96:4a:34:98:9f:99:fe:5e:d6:36:24:52:02:3d:
         eb:0c:c3:6a:f6:7c:d9:70:c4:58:d5:09:75:09:57:c0:f9:b1:
         db:4e:3d:c7:93:43:d1:1c:f9:11:1c:eb:30:6c:fd:c2:19:ae:
         ec:06:8d:31:a6:24:6f:13:a0:44:eb:f0:77:01:99:8b:9a:04:
         5d:75:7b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:29:31 2025 by rpki-client