Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/8fa4741d-7763-345d-8a6e-84a1da7bd394.roa
File:                     8fa4741d-7763-345d-8a6e-84a1da7bd394.roa (raw, json)
Hash identifier:          +OZ2drt5OO+uFEQEefMhnYoKAh8zzUQdCiMYHDfgLwg=
Subject key identifier:   05:1D:2F:BC:76:2F:A7:75:AB:A6:A5:78:74:27:24:6E:B6:00:54:2A
Certificate issuer:       /CN=f2fcde55-dd78-49f8-8c66-802a68b8f6c4
Certificate serial:       010D0C9F43285849350EACE58DF69E743433B5A0
Authority key identifier: 59:20:26:E6:D7:C6:47:62:EE:A3:1C:A3:AC:33:A5:32:CC:CD:15:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/8fa4741d-7763-345d-8a6e-84a1da7bd394.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     13737
IP address blocks:        104.244.208.0/22 maxlen: 22
                          104.244.208.0/24 maxlen: 24
                          104.244.209.0/24 maxlen: 24
                          104.244.210.0/24 maxlen: 24
                          104.244.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:ac:e5:8d:f6:9e:74:34:33:b5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2fcde55-dd78-49f8-8c66-802a68b8f6c4
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=5a81d609-da9d-4751-acab-51d274a65d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:42:6f:b1:3f:c2:0f:be:ae:ef:83:84:d9:ed:
                    9f:52:4e:b9:17:8a:3f:9a:f7:86:fc:2a:e7:25:95:
                    2e:c2:96:ee:59:a4:fb:1d:7f:4f:b4:38:ac:e1:83:
                    3f:62:38:bd:da:df:e5:6e:cc:ec:cf:1e:5c:70:00:
                    0a:60:a8:97:37:0b:9f:43:e5:86:c7:f1:1a:d2:8e:
                    af:c9:dd:df:47:d9:e5:29:4f:e1:6b:24:08:49:a7:
                    c7:97:e8:9f:d8:a6:66:5a:6e:6f:c0:01:c0:21:4e:
                    8d:b6:25:1b:71:d0:96:fb:ea:2e:e6:8e:17:28:da:
                    30:cc:e3:91:b7:b1:d4:47:88:ac:e7:39:ab:ff:d0:
                    5f:5f:50:f7:9b:cc:11:f2:39:7c:fd:90:0e:ef:d2:
                    85:0f:ad:42:ab:5c:1d:b4:d6:6d:36:a5:fa:4a:32:
                    96:b1:16:ed:9b:40:7d:df:64:3e:ba:f9:cd:d7:2c:
                    f6:25:ea:19:93:02:f5:99:34:9f:62:93:20:c6:48:
                    db:6e:7b:9d:a4:d3:2a:92:0e:e9:25:66:22:67:b7:
                    cd:d1:b6:d1:2b:0f:a7:4c:b5:53:9f:8a:83:3a:94:
                    f8:f9:5c:55:a1:06:c1:bd:a8:39:3e:c8:03:79:f0:
                    e3:51:f2:47:c7:41:89:27:a7:06:a0:19:32:62:1e:
                    23:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1D:2F:BC:76:2F:A7:75:AB:A6:A5:78:74:27:24:6E:B6:00:54:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/8fa4741d-7763-345d-8a6e-84a1da7bd394.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.crl

            X509v3 Authority Key Identifier:
                keyid:59:20:26:E6:D7:C6:47:62:EE:A3:1C:A3:AC:33:A5:32:CC:CD:15:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.244.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:e2:26:07:4f:4a:c7:21:b7:f7:22:46:9b:60:63:1b:08:f0:
         1c:38:14:fc:8c:23:0d:a3:d1:b5:68:39:94:ab:b1:72:e5:f5:
         87:ba:64:d7:7d:38:86:96:3e:b9:40:9f:21:0e:72:ac:21:e9:
         85:b4:bc:a0:ab:79:12:ec:d1:7d:7b:27:6d:93:53:4d:6a:16:
         f6:3d:07:37:9e:7e:93:13:c4:17:66:f5:5e:4b:54:34:c0:14:
         84:33:3e:30:3e:2d:9b:d0:a5:7d:ea:ee:24:0c:d9:df:0f:b0:
         14:1f:52:98:ba:9a:96:95:a0:20:fe:ad:9d:90:6f:97:27:fe:
         5e:1f:fd:8b:d7:9e:2e:f0:7d:a3:b9:e0:48:a8:a7:91:63:d5:
         d7:2d:ee:ac:61:fb:93:30:01:0a:68:d9:b6:bb:88:a9:4b:82:
         65:90:6f:4e:e0:e6:26:3c:d3:49:1b:ad:5e:14:25:15:5f:21:
         2d:cf:72:09:98:90:dd:bd:a6:36:5b:ea:ff:07:cc:b9:44:5e:
         65:7d:8c:87:c6:a9:70:d6:e8:32:63:e4:19:43:f7:1f:65:c3:
         b2:3c:45:22:b7:d8:84:20:d4:21:29:5a:34:79:4e:7a:e3:ec:
         c7:ce:09:f6:2f:2f:0e:23:29:89:44:24:cf:1f:4a:2c:ca:e1:
         43:5d:c6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:26:32 2025 by rpki-client