Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/6e698cc3-8ee3-302f-95e3-62caba3a0127.roa
File:                     6e698cc3-8ee3-302f-95e3-62caba3a0127.roa (raw, json)
Hash identifier:          3J0GbOpWHKgjfy8bIZTDBIhlQdRcfW10Fw4/DQMWph0=
Subject key identifier:   F8:EB:C9:C9:9F:EF:BC:B0:35:AF:83:0B:AA:79:D0:47:53:C6:6A:34
Certificate issuer:       /CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c
Certificate serial:       010D0C9F432858487325AB513A26CE386C746900
Authority key identifier: E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/6e698cc3-8ee3-302f-95e3-62caba3a0127.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     393653
IP address blocks:        104.128.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:ab:51:3a:26:ce:38:6c:74:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=92080d04-5ed5-490f-afbd-07deebe364c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:98:68:5c:ff:f4:64:af:36:0c:55:0d:9b:b9:
                    59:57:78:6e:96:b8:2e:15:cb:60:30:58:91:be:45:
                    0b:79:23:80:3c:af:d3:a3:d3:b3:b3:ec:13:59:72:
                    12:c2:d1:53:1f:16:ff:60:72:3a:7e:09:10:44:8e:
                    83:fc:04:43:8f:d7:d2:a6:2a:b3:1b:f8:66:41:95:
                    7c:b7:85:28:c1:53:4e:20:4e:8b:e0:12:bd:e4:77:
                    c2:ae:85:9c:51:78:29:64:ee:3d:90:c9:b9:94:e8:
                    f0:f7:c2:05:0b:f3:07:43:80:f0:96:2c:2d:d3:5f:
                    40:3f:aa:6c:8c:cf:cb:22:3f:31:b8:56:c3:82:19:
                    a5:46:d7:40:11:40:3a:5f:2a:ae:3c:43:bc:aa:5a:
                    d6:84:ad:e8:3b:23:38:f6:f5:ad:c1:a2:01:7e:8f:
                    ec:b7:11:b1:78:b8:f4:78:cc:92:b6:15:57:99:50:
                    aa:3d:91:b5:0d:47:b2:1c:53:55:45:55:62:35:8c:
                    0b:17:be:86:4e:d6:b8:6f:c1:82:d1:1e:d6:49:28:
                    97:74:17:4a:f9:26:56:85:4e:cc:04:d0:74:70:7b:
                    03:a8:6d:fe:20:c8:1a:2f:92:08:35:26:91:26:54:
                    2c:43:4a:c3:86:72:b0:16:09:9a:ad:f6:57:0b:a0:
                    78:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EB:C9:C9:9F:EF:BC:B0:35:AF:83:0B:AA:79:D0:47:53:C6:6A:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/6e698cc3-8ee3-302f-95e3-62caba3a0127.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl

            X509v3 Authority Key Identifier:
                keyid:E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.128.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:e9:23:08:63:fe:71:5f:63:17:7a:99:30:80:26:7d:08:6d:
         ed:da:c9:14:db:12:39:e0:ff:2a:8f:6a:19:a6:92:6f:36:c0:
         55:03:bb:29:a0:ea:80:98:1f:96:32:ff:57:b3:42:5b:23:b7:
         36:ad:33:fb:9a:23:99:8a:57:fc:6e:32:f9:a0:75:1a:c3:63:
         2d:bc:f7:d0:28:25:a7:83:7c:45:fb:98:3c:bb:f0:26:04:b7:
         16:0f:34:41:be:1a:eb:59:25:50:81:21:c7:f5:87:26:ec:cf:
         ca:48:31:fc:22:7c:eb:33:60:fb:a0:4c:ad:bf:03:5b:2a:ff:
         dc:c5:81:a1:d6:2f:cd:03:7d:db:7f:0c:39:52:9d:18:6b:bf:
         82:fc:ec:ea:d1:c8:d3:39:f0:ab:5d:52:2f:7a:48:4b:84:07:
         e6:1a:3d:dd:cd:61:72:92:bd:28:f9:f3:8d:68:c4:72:a8:47:
         41:aa:b3:d4:bb:24:6e:58:47:8c:8d:62:09:ca:33:ac:39:cd:
         29:3e:a1:9a:e3:40:d0:74:80:5d:9f:28:a6:37:fd:19:6d:f0:
         26:a2:79:22:26:69:b8:1e:23:c7:2e:e7:af:13:5b:b5:a6:83:
         e5:12:c3:04:2d:07:c1:2e:b6:2b:87:0c:d6:ee:ca:1d:da:d0:
         14:76:d8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:10:44 2025 by rpki-client