Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/74f37091-0868-326b-ab76-3f839919f773.roa
File:                     74f37091-0868-326b-ab76-3f839919f773.roa (raw, json)
Hash identifier:          Zcehy/PeEDdyBqiVKlNXrl/OBP4AMjypS/Fmd++aK08=
Subject key identifier:   05:83:91:AE:35:C0:EE:24:DB:B1:36:FB:09:DE:EA:EE:70:C4:ED:5A
Certificate issuer:       /CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0
Certificate serial:       010D0C9F43285848DAEEB1C578771D602CB048B0
Authority key identifier: B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/74f37091-0868-326b-ab76-3f839919f773.roa
Signing time:             Wed 12 Feb 2025 06:14:03 +0000
ROA not before:           Wed 12 Feb 2025 06:14:03 +0000
ROA not after:            Tue 13 May 2025 05:14:03 +0000
asID:                     10996
IP address blocks:        104.37.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:da:ee:b1:c5:78:77:1d:60:2c:b0:48:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0
        Validity
            Not Before: Feb 12 06:14:03 2025 GMT
            Not After : May 13 05:14:03 2025 GMT
        Subject: CN=b1ae9a3e-635c-466b-ad34-76c8a5847cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:62:f1:5a:96:ad:44:9b:3b:96:33:4a:c3:18:
                    27:44:57:45:ea:ae:88:85:82:2a:cd:23:d9:66:89:
                    d3:32:29:12:26:00:26:db:dd:20:cb:d7:90:8a:69:
                    0b:89:30:e9:b0:0b:82:bf:34:c2:57:1d:1c:30:a6:
                    c4:de:37:af:81:2b:ed:33:ae:f0:2e:ee:b8:8e:3c:
                    71:ef:25:c2:c1:df:58:33:84:2c:89:88:ee:8b:ac:
                    28:62:22:cd:d4:d5:59:82:0f:64:ab:06:5c:ad:cf:
                    75:5e:93:64:c5:82:e3:26:73:56:d6:29:f6:74:5e:
                    14:10:57:05:1f:59:29:bf:3c:b2:af:30:8f:b4:56:
                    25:d5:2a:0a:34:be:15:90:6b:d8:04:52:ba:3c:b8:
                    32:4a:50:3a:39:8c:a0:89:e6:6b:b7:2f:53:9c:02:
                    d6:a5:99:de:87:9f:9e:1a:eb:96:35:d2:e1:b7:9e:
                    6b:66:c9:c0:a0:ac:55:c8:a8:de:04:fc:0a:de:cd:
                    61:1e:20:9c:34:d7:0a:da:28:dd:33:0d:44:40:63:
                    f8:8a:30:f8:27:12:08:36:94:3a:c8:e9:79:ad:a8:
                    0c:1f:0e:2a:c0:9e:63:0a:7d:37:99:a5:26:c2:6f:
                    01:4f:00:72:08:b3:61:b3:71:65:15:98:d2:4f:aa:
                    25:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:83:91:AE:35:C0:EE:24:DB:B1:36:FB:09:DE:EA:EE:70:C4:ED:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/74f37091-0868-326b-ab76-3f839919f773.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.crl

            X509v3 Authority Key Identifier:
                keyid:B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:c0:62:1d:ca:d0:54:3c:4c:b6:02:e4:4c:4a:6a:e5:e7:70:
         53:64:a2:63:d6:99:91:38:b9:a6:36:8e:87:87:97:9e:f9:01:
         45:e0:78:cd:e8:49:71:e0:65:3a:f0:7f:fc:f5:94:8f:f3:6f:
         e1:ed:49:ea:e6:86:23:44:61:62:24:d0:91:f8:8a:f7:e2:93:
         fb:ae:b2:35:cc:58:6a:95:91:4a:05:a8:e5:8f:a1:3c:4b:17:
         16:09:37:ce:c4:3e:f1:a3:60:91:20:b5:22:fe:c2:bb:a2:76:
         a0:84:1d:2a:2f:96:04:10:e7:65:a5:53:1c:62:06:74:34:d7:
         70:73:6a:74:99:e9:35:93:2d:4c:f7:7a:df:d1:ab:51:7c:1b:
         77:7f:6c:0d:03:0d:a9:e6:97:ef:55:ed:b3:74:1f:95:9a:3c:
         87:17:a5:d9:90:45:9c:be:d8:c1:80:0f:2c:bd:70:bb:d3:82:
         24:49:1a:28:bc:e5:d5:6a:97:bc:3d:e3:ff:3b:a3:18:19:7e:
         33:98:32:8d:99:29:33:68:bf:9f:a8:14:2a:51:8f:26:bb:7d:
         d8:14:29:2f:96:49:33:b0:40:c5:53:cd:d6:13:6f:23:d2:08:
         32:87:fb:50:46:50:5c:2b:35:48:a5:df:f9:f6:cc:01:85:91:
         e5:39:96:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:50:08 2025 by rpki-client