Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7dc731b4-f896-3f19-989c-cb0196f99403.roa
File:                     7dc731b4-f896-3f19-989c-cb0196f99403.roa (raw, json)
Hash identifier:          pjYPruw8KVfwfAIBJtM9PEhy+MuFFBPo0zZ9Og2LWTM=
Subject key identifier:   7E:30:1F:93:33:0B:BD:F1:92:53:C4:91:D1:DD:D3:80:13:9A:DE:CE
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285848E147C8CB64A6EE2D20765800
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7dc731b4-f896-3f19-989c-cb0196f99403.roa
Signing time:             Fri 14 Feb 2025 12:48:24 +0000
ROA not before:           Fri 14 Feb 2025 12:48:24 +0000
ROA not after:            Thu 15 May 2025 11:48:24 +0000
asID:                     213676
IP address blocks:        104.37.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Feb 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:47:c8:cb:64:a6:ee:2d:20:76:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Feb 14 12:48:24 2025 GMT
            Not After : May 15 11:48:24 2025 GMT
        Subject: CN=24b5da1a-cdbb-45ac-aadb-3f9646f600df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1a:16:ce:28:fe:f9:3f:58:55:75:e2:0b:58:
                    61:0c:65:57:25:07:9b:61:2f:c5:18:0f:f5:9d:86:
                    c7:24:41:f4:80:8b:aa:ba:de:82:99:f4:2a:ed:fd:
                    29:d5:0f:8f:70:52:29:1b:57:2d:4f:15:bf:52:f4:
                    80:a5:45:51:e3:a5:e0:95:55:a0:09:63:4c:18:19:
                    56:be:c5:5b:9a:82:eb:62:47:df:13:dc:de:b3:54:
                    de:36:ff:1d:1b:28:9d:2a:ce:1d:58:f4:25:2f:f1:
                    69:ce:d7:ed:76:62:f0:38:49:fc:e2:e0:9b:86:2f:
                    34:b6:e6:a0:e8:8a:d1:ba:3f:a7:c4:f1:49:28:88:
                    e0:f5:ee:76:e3:4f:86:47:d4:13:16:21:63:bb:09:
                    fe:27:8d:3d:a2:6a:35:13:0f:fe:9f:d3:98:b6:99:
                    00:91:da:0d:b7:1f:fd:37:1e:b6:8f:1c:20:2d:e0:
                    28:76:7c:49:0c:5f:05:bb:3d:ad:91:e0:e7:f1:9f:
                    38:07:2b:8b:4b:88:d9:85:c3:fb:67:e4:c6:0c:4e:
                    07:65:67:e3:f1:ba:13:87:7e:88:14:01:7c:9e:94:
                    4c:a7:fc:df:8d:66:68:b9:f6:23:f4:45:2b:9a:bd:
                    d5:ae:fb:0a:6c:2a:b1:80:27:a6:06:ca:83:91:ef:
                    90:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:30:1F:93:33:0B:BD:F1:92:53:C4:91:D1:DD:D3:80:13:9A:DE:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7dc731b4-f896-3f19-989c-cb0196f99403.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:9b:41:86:2c:50:cc:ba:58:a8:52:94:44:0d:2e:9e:33:dd:
         d1:51:4e:0c:53:0e:e1:b6:05:7d:2a:c1:58:6d:7a:29:21:80:
         b1:b5:33:1e:78:66:12:ad:5d:7f:92:80:39:ce:38:41:c0:44:
         8d:91:db:cf:9c:d1:f2:35:bc:e9:91:d8:b2:78:94:88:24:b3:
         93:f8:8c:ed:d2:a9:62:08:bf:77:f4:5d:6c:85:91:6a:cb:5d:
         d0:6a:0c:07:e0:ac:5a:d9:a8:46:ec:74:fb:01:e7:96:56:34:
         f5:a9:89:f1:41:7e:a9:e6:e4:a9:a6:6c:e0:88:58:2b:2a:22:
         6e:83:29:d9:5d:64:71:3c:51:91:29:56:4a:7f:07:2c:fa:87:
         40:f5:4b:b6:1c:4c:c3:b6:47:e0:98:b6:84:c8:2c:e6:9b:0d:
         b4:73:b9:85:d2:d0:a1:cf:22:9a:b1:14:f2:b6:fa:5d:63:3e:
         ec:7b:43:73:1b:ab:84:bd:89:4b:87:8e:b6:87:79:d5:dd:26:
         8d:f0:ff:4e:cf:52:43:78:79:20:ee:47:86:9e:43:34:12:04:
         e5:e1:47:e9:fd:09:c9:82:df:d7:3a:08:12:73:e5:9d:a5:e6:
         4d:bf:ba:03:c7:d7:16:e2:de:84:72:c3:53:c6:54:f2:23:52:
         bc:38:1e:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjhR8jLZKbuLSB2WAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDIxNDEyNDgyNFoXDTI1MDUxNTExNDgyNFowLzEtMCsGA1UEAxMk
MjRiNWRhMWEtY2RiYi00NWFjLWFhZGItM2Y5NjQ2ZjYwMGRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRoWzij++T9YVXXiC1hhDGVXJQebYS/FGA/1
nYbHJEH0gIuqut6CmfQq7f0p1Q+PcFIpG1ctTxW/UvSApUVR46XglVWgCWNMGBlW
vsVbmoLrYkffE9zes1TeNv8dGyidKs4dWPQlL/FpztftdmLwOEn84uCbhi80tuag
6IrRuj+nxPFJKIjg9e5240+GR9QTFiFjuwn+J409omo1Ew/+n9OYtpkAkdoNtx/9
Nx62jxwgLeAodnxJDF8Fuz2tkeDn8Z84ByuLS4jZhcP7Z+TGDE4HZWfj8boTh36I
FAF8npRMp/zfjWZoufYj9EUrmr3VrvsKbCqxgCemBsqDke+QPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH4wH5MzC73xklPEkdHd04ATmt7OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvN2RjNzMxYjQtZjg5Ni0z
ZjE5LTk4OWMtY2IwMTk2Zjk5NDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaCUBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAebQYYsUMy6WKhSlEQNLp4z3dFRTgxTDuG2BX0qwVhteikhgLG1Mx54
ZhKtXX+SgDnOOEHARI2R28+c0fI1vOmR2LJ4lIgks5P4jO3SqWIIv3f0XWyFkWrL
XdBqDAfgrFrZqEbsdPsB55ZWNPWpifFBfqnm5KmmbOCIWCsqIm6DKdldZHE8UZEp
Vkp/Byz6h0D1S7YcTMO2R+CYtoTILOabDbRzuYXS0KHPIpqxFPK2+l1jPux7Q3Mb
q4S9iUuHjraHedXdJo3w/07PUkN4eSDuR4aeQzQSBOXhR+n9CcmC39c6CBJz5Z2l
5k2/ugPH1xbi3oRyw1PGVPIjUrw4HtI=
-----END CERTIFICATE-----
Generated at Sat Feb 22 04:49:10 2025 by rpki-client