Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/626bce91-cbad-34b1-9426-b60acb9b4ab1.roa
File:                     626bce91-cbad-34b1-9426-b60acb9b4ab1.roa (raw, json)
Hash identifier:          XHxOuV4H32345Jxdsbrj0apC1toISp7112sOkGwaE3c=
Subject key identifier:   25:9C:A7:5A:0E:39:F3:0D:6F:7D:1E:EE:37:0A:D2:AA:26:68:C1:AB
Certificate issuer:       /CN=265b0641-047d-4787-a12d-159370bfcdb1
Certificate serial:       010D0C9F43285848EF613BCDCF47E84F6EBA9FC0
Authority key identifier: 26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/626bce91-cbad-34b1-9426-b60acb9b4ab1.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     7029
IP address blocks:        104.171.22.0/24 maxlen: 24
                          104.171.23.0/24 maxlen: 24
                          104.171.24.0/21 maxlen: 21
                          104.171.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:3b:cd:cf:47:e8:4f:6e:ba:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=265b0641-047d-4787-a12d-159370bfcdb1
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=7ac8b047-a021-43b8-89f8-10aba77d39a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9d:70:8f:ed:ea:36:d0:7c:1b:31:fa:16:61:
                    ae:1f:87:2d:a5:ac:ff:97:58:66:1d:d2:46:dd:b2:
                    8c:d7:8f:34:72:fa:68:33:ff:ae:1c:f5:59:31:6a:
                    28:71:c7:b8:7b:5a:f9:36:e4:0e:4c:cf:82:17:2e:
                    6b:cb:c9:a2:47:45:10:b8:4a:a5:08:21:95:9f:b9:
                    65:eb:9f:eb:4a:7e:d7:fa:d7:89:e5:7b:18:14:63:
                    e3:de:c9:5b:f7:8b:60:05:48:d0:4c:95:d8:d4:00:
                    1a:24:f7:3e:6b:19:5c:e8:7a:ed:88:85:27:e7:27:
                    e6:58:ef:45:32:36:39:ca:5e:de:23:c9:dd:5c:15:
                    33:b0:ad:c4:4e:7c:e9:c9:79:a6:61:87:d6:44:f7:
                    a5:8e:8a:70:ba:a4:2a:39:03:b0:b4:35:c1:1c:99:
                    1f:fe:6c:3b:b9:b9:43:a4:50:7f:86:05:e9:2f:9b:
                    3c:33:45:79:ab:5b:f6:31:c2:ca:e9:b5:58:94:54:
                    53:ef:d7:07:d6:04:79:a4:c1:38:7f:42:63:de:4e:
                    19:cc:8a:8e:d0:4f:38:98:39:e3:80:30:9d:51:07:
                    6e:e5:d9:75:d1:9d:0b:6b:3e:15:f0:83:a2:9f:9c:
                    e6:d2:91:fd:36:dd:b8:65:11:f1:ee:b5:fb:8c:3e:
                    90:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9C:A7:5A:0E:39:F3:0D:6F:7D:1E:EE:37:0A:D2:AA:26:68:C1:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/626bce91-cbad-34b1-9426-b60acb9b4ab1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.crl

            X509v3 Authority Key Identifier:
                keyid:26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.22.0-104.171.31.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:79:8e:2e:e2:9c:ae:b1:19:a5:4d:0d:16:57:0a:f3:85:3a:
         75:03:ee:e5:86:61:19:ab:22:50:97:b9:42:51:b1:ac:44:79:
         5b:c5:60:d5:2e:67:bb:c4:55:ae:b0:a1:51:41:cc:af:80:0e:
         51:3e:a1:5e:4e:eb:8f:62:46:59:64:9d:40:a4:10:52:d5:6e:
         37:9e:7d:ff:48:e1:18:fd:cd:48:be:f0:2f:00:f2:95:99:96:
         45:76:98:63:c1:af:f3:06:a3:87:4b:9b:28:66:ab:cc:25:94:
         b4:98:13:b1:8f:01:0e:91:66:ff:de:00:cd:dc:8f:f5:91:4b:
         8b:eb:ee:36:66:b0:e3:02:e0:40:6d:6c:a9:ed:29:a9:9b:0d:
         d8:25:84:5b:13:bc:f9:a3:7a:12:7a:df:85:52:af:00:b6:86:
         78:cb:99:60:0c:f4:aa:2f:14:6d:6e:da:20:60:10:0e:99:e7:
         eb:4c:81:8b:a3:f5:43:01:42:16:a4:04:e1:26:52:8e:33:13:
         b3:63:21:83:99:5b:f2:32:79:4b:18:e5:9a:ad:61:a3:4a:57:
         e6:68:d5:36:c5:fc:7b:51:67:95:e2:1d:68:09:af:a9:07:59:
         5e:e5:25:e0:aa:a2:b6:f0:22:d9:57:da:4f:2b:ab:e2:b4:43:
         a2:b9:11:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:55:51 2025 by rpki-client