Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/937b1672-0e43-321d-b01b-3b0d13dd74fc.roa
File:                     937b1672-0e43-321d-b01b-3b0d13dd74fc.roa (raw, json)
Hash identifier:          kmEhVU+YvYIgQy74XE28bNH6+Xv9MZOjJK6XCQ4Tp6I=
Subject key identifier:   7C:D6:E4:A6:3B:5B:7F:EF:C1:79:83:0A:81:2F:B3:95:E6:C2:99:29
Certificate issuer:       /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
Certificate serial:       010D0C9F4328584909E695DDF711B833AC9B7180
Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/937b1672-0e43-321d-b01b-3b0d13dd74fc.roa
Signing time:             Sat 01 Mar 2025 02:00:39 +0000
ROA not before:           Sat 01 Mar 2025 02:00:39 +0000
ROA not after:            Fri 30 May 2025 01:00:39 +0000
asID:                     16789
IP address blocks:        104.156.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:09:e6:95:dd:f7:11:b8:33:ac:9b:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
        Validity
            Not Before: Mar  1 02:00:39 2025 GMT
            Not After : May 30 01:00:39 2025 GMT
        Subject: CN=81e619bb-9973-4240-86f3-624838cfb56f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9b:78:b5:8e:ea:09:eb:2a:f7:ad:4d:b3:1b:
                    81:99:6e:14:fb:92:e4:f6:4d:e0:28:a2:14:8b:ed:
                    b5:54:72:60:b6:dc:84:b3:07:15:b4:44:7e:9d:cc:
                    22:b3:8d:a7:79:02:5b:32:48:88:45:bb:20:22:36:
                    28:b6:a8:7e:a7:be:a2:52:ca:95:7d:8b:8a:41:4c:
                    9c:8e:41:6b:47:97:60:a8:c9:cf:05:a2:67:7d:8f:
                    5d:7c:67:61:9f:62:a6:f6:0d:af:d4:47:87:7b:39:
                    c9:e8:26:7c:11:cf:59:44:df:b4:28:c6:08:ac:37:
                    da:ca:58:8c:aa:c7:5b:8a:f1:a8:df:f3:11:35:23:
                    16:56:ba:78:fe:66:b8:bb:66:80:46:8c:05:67:6a:
                    05:78:94:8c:38:53:84:36:82:82:6f:97:18:ad:a3:
                    8d:61:76:c2:0d:70:1d:ee:ec:62:26:e0:eb:eb:97:
                    88:7d:5b:8c:da:0e:7e:73:bd:77:9d:5b:91:67:62:
                    8d:08:0c:2e:f8:e7:1f:c6:6f:10:d7:54:a1:05:9b:
                    86:33:eb:83:50:1e:eb:23:b0:c4:e9:c2:0a:19:6e:
                    57:dd:6e:ea:81:15:99:ca:b7:24:a9:96:19:cb:e5:
                    96:b1:c8:28:19:79:bd:ed:d8:e9:7a:27:1b:af:00:
                    9e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D6:E4:A6:3B:5B:7F:EF:C1:79:83:0A:81:2F:B3:95:E6:C2:99:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/937b1672-0e43-321d-b01b-3b0d13dd74fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl

            X509v3 Authority Key Identifier:
                keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:af:1c:89:ba:54:79:9d:a8:1e:70:da:29:33:b6:c6:e2:bd:
         27:5d:bd:cb:8a:cf:eb:2f:14:1e:96:d2:48:7d:d3:91:83:b8:
         41:02:79:f1:78:c1:a8:07:29:9b:e2:41:a7:aa:46:1e:cd:15:
         5b:df:1a:ae:be:e6:e4:e6:30:f0:84:00:56:a6:76:fc:e2:e8:
         e9:62:20:f4:b2:b9:22:f2:9d:67:95:53:39:5b:fa:95:09:8c:
         cf:f0:f0:23:26:b3:1f:cd:cf:2c:1e:83:f8:9a:e3:34:13:67:
         6d:0e:43:4f:6c:7a:e2:b3:3c:bb:cb:14:a1:a0:77:69:ba:43:
         7b:93:74:3d:c5:3d:8f:4a:0a:09:74:9f:fb:eb:da:50:4a:23:
         21:58:1f:cc:97:b8:b5:dc:b4:c6:33:8e:31:ca:76:c1:84:90:
         34:ca:04:3c:16:13:18:56:66:17:15:40:78:58:04:01:be:a0:
         71:e7:17:4e:57:73:ae:c2:c5:4d:c7:f6:ed:2f:b3:a9:29:e4:
         27:c0:e8:b0:e6:13:7e:b4:f4:3c:07:d6:67:24:88:db:9a:9e:
         69:90:61:dc:09:28:04:90:20:7a:1c:fe:14:79:31:88:48:ed:
         1b:fc:38:39:23:95:85:3e:8d:12:42:e3:b1:21:00:8b:fa:f9:
         f6:ce:c2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:56:47 2025 by rpki-client