Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/7f634129-9df2-33a9-9d13-537681daf704.roa
File:                     7f634129-9df2-33a9-9d13-537681daf704.roa (raw, json)
Hash identifier:          TZ77F/niAl57Ofm/yxutW46txpF3yGsSVuqRc8+LKqc=
Subject key identifier:   12:3F:31:EA:4D:34:D8:25:B1:BB:61:52:84:7A:E3:7C:2C:7D:7D:78
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584A1E2AA25B7234AC768450F7C0
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/7f634129-9df2-33a9-9d13-537681daf704.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     29802
IP address blocks:        104.156.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:a2:5b:72:34:ac:76:84:50:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=fa69e50a-6e2c-4d6d-906f-346a8c5f7e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c7:06:68:7d:d5:d7:d6:0e:42:ef:80:55:9d:
                    b4:20:94:82:96:6f:c1:21:01:ae:61:d5:a4:9f:77:
                    3a:ce:32:6e:71:4b:a8:97:66:ec:93:01:dc:8b:d8:
                    f0:a0:61:d1:71:56:44:58:18:09:a4:2a:df:73:39:
                    88:a9:8d:77:80:40:ab:ab:d6:6b:f4:70:92:3b:a1:
                    54:c7:4d:bc:69:12:89:1f:26:93:e3:36:a0:ff:9c:
                    84:97:8d:45:c3:ec:24:ec:b0:90:3c:67:12:39:44:
                    2d:ac:96:3a:00:ca:09:e4:c5:7e:3b:36:0d:b4:ea:
                    d4:00:77:ae:2c:b5:a7:d8:73:64:a9:64:97:50:d7:
                    a6:9e:72:5c:de:70:a7:85:f1:fe:db:47:f8:5d:8f:
                    80:5d:2b:d7:25:5a:20:00:b1:4a:16:6b:f3:3f:0a:
                    51:9f:87:f8:e4:1c:78:13:b7:29:07:98:0c:e5:25:
                    ca:b6:90:0c:7b:71:d0:7c:76:22:4b:13:c0:8f:67:
                    11:21:bb:7d:dd:9e:58:6e:b1:ae:8b:cd:5c:5e:83:
                    ea:92:f8:5c:1f:fb:02:1e:e6:e9:9b:41:5a:10:d6:
                    de:7e:be:ae:bf:fe:dd:a8:5f:bd:f5:5f:e2:23:dc:
                    2e:c7:82:52:a3:3e:fd:b4:87:84:51:ee:f9:5c:a6:
                    6e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3F:31:EA:4D:34:D8:25:B1:BB:61:52:84:7A:E3:7C:2C:7D:7D:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/7f634129-9df2-33a9-9d13-537681daf704.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:df:33:fc:27:5b:35:c1:22:1e:81:27:d8:7c:89:ea:67:1f:
         7d:c4:32:1f:12:29:c2:15:9a:a2:2a:4b:2b:7b:46:08:6f:66:
         4f:fb:7d:57:a2:7b:35:5e:7e:8a:cc:4b:68:0c:6c:de:95:48:
         2c:84:af:89:9f:75:58:0c:37:0a:37:e2:c5:77:50:0f:f4:28:
         61:5a:a9:b1:08:07:28:9e:ca:ce:89:36:30:a8:be:26:0c:60:
         1f:21:35:2e:7b:68:b3:64:98:36:94:27:95:ba:f3:7e:25:3c:
         c3:1e:9a:87:c2:de:56:c2:06:22:60:18:c6:7d:23:51:8f:aa:
         25:1f:63:cd:a5:fc:85:1b:2d:58:6a:3c:29:95:57:10:11:00:
         0c:b2:4b:df:c1:c9:91:d2:5f:36:51:df:38:07:fb:11:a7:64:
         23:8e:3c:db:82:1c:fa:f3:8d:dc:46:23:6c:6f:41:f7:b2:c7:
         40:4e:07:92:9b:dc:e0:cc:ad:d5:5f:36:c3:9f:1f:dd:76:5f:
         98:db:2c:53:07:f2:fd:e5:e6:e6:0b:0b:a0:bf:6a:f6:c0:38:
         61:5f:f3:76:d3:ee:cc:67:30:a1:20:4a:a9:e2:ab:2a:6a:64:
         d0:17:b7:59:a9:a2:62:c0:de:83:c5:38:a7:e4:ba:b8:7f:7b:
         c0:da:5f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:49:23 2025 by rpki-client