Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/52703a63-9fec-3c65-9164-84d0bb817028.roa
File:                     52703a63-9fec-3c65-9164-84d0bb817028.roa (raw, json)
Hash identifier:          CBp4WHLXGQfcrMuk7d5Gwqsv6QxE0CvhQUVphtIGhCk=
Subject key identifier:   95:96:71:68:8A:FB:8A:6A:6C:85:C0:1A:8C:DD:0E:F6:EC:A2:B1:B4
Certificate issuer:       /CN=5d69c2a7-f7d7-48bb-a177-7c0b67654580
Certificate serial:       010D0C9F432858486AC598BF65B66421F46607C0
Authority key identifier: 93:D1:0F:40:82:93:2B:AF:BF:B2:20:7D:C6:3C:B3:00:03:5F:00:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/52703a63-9fec-3c65-9164-84d0bb817028.roa
Signing time:             Fri 03 Jan 2025 02:00:40 +0000
ROA not before:           Fri 03 Jan 2025 02:00:40 +0000
ROA not after:            Thu 03 Apr 2025 01:00:40 +0000
asID:                     396982
IP address blocks:        104.232.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6a:c5:98:bf:65:b6:64:21:f4:66:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d69c2a7-f7d7-48bb-a177-7c0b67654580
        Validity
            Not Before: Jan  3 02:00:40 2025 GMT
            Not After : Apr  3 01:00:40 2025 GMT
        Subject: CN=7b03e5a1-f136-4445-8e79-3515c6805274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:85:94:2d:b4:fc:fd:81:e2:ef:f4:1e:8e:b9:
                    01:4c:8d:ca:3e:63:26:35:69:47:a3:2b:fd:e7:1a:
                    a8:bb:e6:01:1e:be:01:fe:80:ce:14:04:c6:5c:1f:
                    f4:fb:99:1e:da:b5:2f:fb:bd:e6:cd:14:c8:7f:34:
                    09:8b:63:1c:36:a7:fb:52:4a:db:66:c8:97:6e:16:
                    e3:0b:f8:46:b6:5a:1d:d5:2c:31:9b:3d:68:18:f8:
                    9d:34:36:93:0a:39:d3:bd:1a:cd:f2:94:4f:ee:67:
                    5b:6a:1a:35:33:d2:17:5c:5e:23:c1:1b:78:ad:32:
                    51:5c:22:40:eb:b0:1b:71:cc:a7:15:9b:fb:75:1a:
                    21:bc:49:99:93:61:3d:35:6c:fb:6d:d2:e0:bd:ab:
                    d1:a1:60:be:be:28:f3:11:25:da:cd:a5:11:d6:79:
                    27:3f:5d:7b:0f:de:84:5a:34:3a:ea:e2:3f:66:bb:
                    5e:32:3c:f9:8e:66:e5:2f:bb:42:cc:47:bc:a5:1f:
                    b8:5b:2c:04:c6:25:17:e0:1c:07:66:8a:93:a2:6c:
                    7f:f5:4b:2a:45:36:5b:a9:7e:e5:4e:34:0b:9e:04:
                    c6:5c:66:0b:42:db:32:4c:c5:5e:f1:4c:e4:f7:64:
                    d3:1d:b6:f9:bb:e3:e3:40:91:c3:42:1d:bc:32:a4:
                    5c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:96:71:68:8A:FB:8A:6A:6C:85:C0:1A:8C:DD:0E:F6:EC:A2:B1:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/52703a63-9fec-3c65-9164-84d0bb817028.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.crl

            X509v3 Authority Key Identifier:
                keyid:93:D1:0F:40:82:93:2B:AF:BF:B2:20:7D:C6:3C:B3:00:03:5F:00:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.232.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:8c:65:a1:a6:1f:e5:44:d5:79:75:e7:11:9b:3a:29:5c:d0:
         d8:e7:b1:55:99:db:da:66:df:f0:06:92:b2:90:9a:fd:a4:65:
         83:cc:83:ef:48:86:b9:76:0f:ed:6e:2d:08:c3:f8:f0:70:c3:
         3d:39:38:b3:da:f3:0b:f2:0a:e1:b3:34:63:a9:c7:87:65:99:
         7b:c0:61:24:85:28:82:d9:81:28:38:c5:c5:5b:48:8e:4c:c0:
         25:b5:07:b3:2d:1d:3f:b6:7b:7f:70:a6:05:e3:fd:7b:bc:ff:
         27:57:d0:ba:f9:02:98:07:d3:a0:76:1d:a2:57:c5:7f:85:fd:
         e2:31:57:91:08:39:d4:f4:af:43:06:06:ed:9d:d2:0c:d4:9b:
         2d:09:94:88:6b:30:0d:be:e9:db:c5:03:c9:49:39:fa:7f:c3:
         d8:f3:50:f7:70:89:68:0c:d0:8b:6e:eb:00:97:cf:d2:de:4e:
         7e:b8:65:f3:8f:a0:0f:03:da:61:1e:d0:60:11:ec:ac:88:f2:
         7a:8e:3f:61:67:f8:0b:c1:d3:47:d0:c9:1f:c6:7c:ba:a5:b9:
         4d:69:16:18:c3:d8:23:83:75:bd:3f:f7:d3:53:b1:9e:6a:91:
         45:48:01:14:88:be:09:20:90:47:b2:34:82:89:23:a1:2c:19:
         5c:ff:b5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:06:36 2025 by rpki-client