Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6f9e4139-9cb2-3d5b-ac6e-4895d7f0c0b6.roa
File:                     6f9e4139-9cb2-3d5b-ac6e-4895d7f0c0b6.roa (raw, json)
Hash identifier:          0NCoRQhNomYLnXUJFFRgUBdO4ureAAB5GTjW8WhHw4E=
Subject key identifier:   77:0E:3F:51:D4:86:B0:86:77:D4:C8:F8:50:37:35:F8:F4:43:DF:E6
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285848EB310A3531E377C7B3A0D300
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6f9e4139-9cb2-3d5b-ac6e-4895d7f0c0b6.roa
Signing time:             Tue 18 Feb 2025 02:00:38 +0000
ROA not before:           Tue 18 Feb 2025 02:00:38 +0000
ROA not after:            Mon 19 May 2025 01:00:38 +0000
asID:                     53356
IP address blocks:        104.250.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:eb:31:0a:35:31:e3:77:c7:b3:a0:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Feb 18 02:00:38 2025 GMT
            Not After : May 19 01:00:38 2025 GMT
        Subject: CN=31adcd06-fa22-4bfc-aea6-b668d9b28276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4d:67:98:93:79:9a:f5:3f:c2:16:3d:2e:59:
                    91:e3:c4:97:15:0c:10:a0:31:93:6d:47:d1:b1:ae:
                    c2:dd:ba:2c:f4:d9:ab:f4:d5:a1:f5:dc:16:79:66:
                    d2:8f:0f:0d:10:39:69:07:af:a9:7a:81:b0:ba:62:
                    07:0a:2a:84:32:61:34:87:a5:67:a3:15:02:14:c3:
                    04:ba:b6:9f:55:26:9a:c1:2f:fc:de:dc:7f:e1:37:
                    ee:a8:cf:97:6d:c4:5f:dc:a1:16:52:8b:ac:db:33:
                    2e:77:db:fb:8a:dc:83:56:31:a1:8a:bc:0b:f1:91:
                    8f:b0:68:1e:60:37:2f:89:8d:31:54:f9:2a:25:ff:
                    c6:a5:8a:e9:73:81:33:1e:19:bd:30:a4:43:dc:3c:
                    43:86:09:b5:20:8c:eb:f3:1e:f7:28:ab:81:76:c7:
                    88:18:d7:6f:0b:1e:e8:38:73:53:d3:2e:6f:c2:20:
                    c9:6a:7b:ad:1d:8d:46:01:cc:54:a7:64:da:84:ba:
                    7c:86:c7:c7:0f:10:e0:44:f9:28:43:03:1e:00:14:
                    e6:14:82:c4:8d:9e:30:e4:72:0f:01:bc:21:ca:4c:
                    03:72:f8:86:d4:85:08:96:50:b0:56:84:de:26:5b:
                    32:be:80:dc:02:a2:43:8b:bf:d4:8e:c2:7e:6f:06:
                    bc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:0E:3F:51:D4:86:B0:86:77:D4:C8:F8:50:37:35:F8:F4:43:DF:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6f9e4139-9cb2-3d5b-ac6e-4895d7f0c0b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:11:a0:02:c7:2a:d3:f7:83:55:38:7b:54:56:b7:50:20:9e:
         71:0c:1e:34:ed:ab:ea:03:70:ef:bf:43:57:b3:f8:4a:ff:59:
         39:b0:d5:e1:ab:fc:c5:ec:a3:92:eb:09:91:11:3d:59:79:94:
         60:7b:09:a3:ca:26:65:5a:69:a5:3f:f8:c7:6f:8c:04:5f:cc:
         e6:86:c4:76:d5:b0:6f:f0:b1:b1:ce:3f:dd:11:c3:8e:cf:dd:
         4e:09:8a:82:fd:3e:50:58:f7:1f:4d:2f:f5:2f:63:c3:27:5b:
         a2:34:9a:90:2d:5d:38:17:a0:ad:8b:48:da:d8:1a:35:d9:f0:
         19:e9:0e:82:12:86:34:4c:cb:7a:4f:dd:7b:67:a6:fe:2d:03:
         25:d8:4f:1e:fa:7f:7c:99:6c:49:be:7c:2c:02:6e:a0:4b:a0:
         f9:e8:b8:25:c4:98:9b:53:d7:cb:65:64:85:61:97:ef:85:cb:
         a6:e8:6c:a5:9c:ac:e0:ca:54:07:39:b8:ef:00:fa:13:85:39:
         58:79:5e:a4:f5:c0:07:28:42:ba:fb:68:3d:fa:0d:35:13:68:
         05:43:75:c3:e1:c1:2f:22:51:d7:5e:9f:9f:96:21:c6:da:b4:
         e9:fd:d9:44:ea:ea:f5:e6:58:82:7f:20:bd:4b:38:a4:48:08:
         4a:de:87:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:29 2025 by rpki-client