Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/a35ca9db-353e-3cf3-9e78-e41bdff6dd91.roa
File:                     a35ca9db-353e-3cf3-9e78-e41bdff6dd91.roa (raw, json)
Hash identifier:          YQgiirn/m2c7raI3nJXQdI/j9tjFo3DU01xR69nUGRo=
Subject key identifier:   C6:DB:0E:F2:61:A4:5B:12:28:C3:16:3E:87:1F:82:B8:E5:95:36:2F
Certificate issuer:       /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial:       010D0C9F43285849350E9662821D09A2DB462F80
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/a35ca9db-353e-3cf3-9e78-e41bdff6dd91.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     36231
IP address blocks:        104.152.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:96:62:82:1d:09:a2:db:46:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=d082d02c-619d-4a0d-b982-d70f14073ad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:87:56:c4:63:0c:d5:cb:ed:ef:c0:34:f8:78:
                    6a:b7:41:33:91:e2:eb:ee:48:03:dc:43:95:5e:c1:
                    69:31:75:bb:a1:92:de:e3:f6:93:db:b8:46:5b:89:
                    f3:73:d1:b3:9c:8e:3c:71:dd:1f:33:40:c4:91:1c:
                    7a:76:d8:ac:f8:21:52:03:50:2f:4b:08:bd:77:24:
                    06:5c:3b:97:04:a6:5b:e7:17:c6:1f:8a:52:0d:9e:
                    c4:68:a0:a9:f0:d5:67:ea:83:ca:3f:4a:5d:bb:14:
                    69:3e:f7:6a:04:39:0a:b4:31:23:4c:6a:a3:51:37:
                    cf:da:36:94:81:37:89:46:cc:ef:cb:39:a8:5a:63:
                    e2:39:bf:09:e7:1a:f9:71:dd:d2:1d:54:87:1b:b3:
                    4d:bd:39:55:09:8c:13:d0:aa:4a:7d:e5:e4:e6:87:
                    37:52:c3:75:2b:01:92:25:38:43:2a:ef:34:cc:18:
                    52:94:e5:67:96:11:5d:f8:aa:d5:1d:21:74:93:89:
                    ba:43:d5:0e:35:57:cd:ca:63:99:ac:d5:c2:d4:c5:
                    90:85:61:8e:01:33:41:5b:1c:86:f7:b3:f9:e9:c3:
                    10:df:b1:88:7a:a5:aa:d5:84:b7:00:f0:9f:31:9f:
                    2f:3a:7a:84:bf:03:3f:bb:d6:0e:81:7c:1d:02:c2:
                    62:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DB:0E:F2:61:A4:5B:12:28:C3:16:3E:87:1F:82:B8:E5:95:36:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/a35ca9db-353e-3cf3-9e78-e41bdff6dd91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.152.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:cc:f3:f3:09:1a:a1:8c:54:d3:39:6c:35:4f:89:34:9c:46:
         1b:ed:ca:aa:49:43:df:16:5c:09:18:d7:a0:89:99:c7:f1:81:
         87:91:36:59:7a:48:37:e6:57:27:2e:e3:b5:e6:14:d2:db:a4:
         a1:99:25:c1:db:e0:21:cc:69:65:96:ba:d7:8e:cc:2a:c4:0d:
         78:79:a1:24:40:2b:2f:d0:2b:81:5d:1b:a1:c7:dc:ad:55:cd:
         c7:c5:5d:79:b2:b8:da:ab:03:da:6f:53:22:83:9d:a0:c5:c6:
         6d:df:06:54:cb:c9:64:ff:d5:d4:98:d0:fd:55:9e:67:2f:2f:
         7a:8c:57:73:c7:67:9b:09:b3:ed:c8:01:34:b2:d0:d6:25:5f:
         63:18:01:d8:ce:1c:17:ff:4f:d0:b4:40:88:d5:27:e8:e3:24:
         ea:9f:c6:a6:ca:b3:62:af:99:36:71:e5:a1:f9:1a:e5:69:76:
         14:fc:11:12:70:64:33:bc:b0:44:82:c5:9e:2c:72:e0:d3:9e:
         de:9e:fa:99:77:f6:00:e6:33:6e:dc:5a:65:e2:b7:cf:9c:b2:
         ed:26:57:6d:57:b9:c2:c2:5a:24:87:04:9d:05:28:f2:23:24:
         aa:51:8d:e0:da:ad:46:9a:cc:c3:a6:b9:3a:1c:d9:03:83:5f:
         ba:a4:07:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:55:10 2025 by rpki-client