Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c01671a2-3cf0-359f-be36-c8783323ae9a.roa
File:                     c01671a2-3cf0-359f-be36-c8783323ae9a.roa (raw, json)
Hash identifier:          +CbGzqK+9PQhPexzy49Pri7gZ+i8djX77RPvY3+pA0k=
Subject key identifier:   90:EB:DE:6F:C8:F0:61:F4:85:D7:F5:71:B4:1E:58:C9:E4:67:6B:29
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F432858491E0BBBC23A0315FDDB317D00
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c01671a2-3cf0-359f-be36-c8783323ae9a.roa
Signing time:             Sat 08 Mar 2025 07:11:43 +0000
ROA not before:           Sat 08 Mar 2025 07:11:43 +0000
ROA not after:            Fri 06 Jun 2025 06:11:43 +0000
asID:                     23473
IP address blocks:        104.145.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1e:0b:bb:c2:3a:03:15:fd:db:31:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Mar  8 07:11:43 2025 GMT
            Not After : Jun  6 06:11:43 2025 GMT
        Subject: CN=ab0b2f9a-c285-4912-93c8-f220fcf3647c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9b:f1:f3:0b:c5:8d:c8:eb:be:5f:00:07:06:
                    28:69:4c:09:41:b1:23:f9:5f:28:3b:f7:31:64:9d:
                    15:a1:6e:ce:db:ac:35:7f:d3:7f:c1:c7:b7:3d:3d:
                    15:e7:b3:aa:ed:a7:a0:f0:59:57:3a:60:14:8d:13:
                    ff:0e:54:1b:19:ab:a3:9b:55:0f:ea:d7:3e:cf:a2:
                    b8:14:a5:66:86:5a:d6:84:b7:b1:4a:76:46:cd:f5:
                    a2:df:7e:9d:c7:7e:6c:36:f9:1c:3f:f8:be:0a:4a:
                    ba:a9:49:21:de:a5:27:1e:b0:39:21:54:86:ba:b6:
                    4b:da:c7:f7:20:06:35:fd:22:67:48:18:1d:ad:27:
                    46:0f:f3:d9:bb:46:28:e9:6a:42:58:01:53:41:4c:
                    2b:a6:2e:a2:92:53:a9:2c:6e:a3:30:cb:6f:73:89:
                    57:91:0c:68:3c:e6:a6:e4:81:52:2c:d6:08:d5:a1:
                    31:83:22:78:63:4c:59:be:83:15:96:c3:bc:9c:49:
                    37:af:3e:b4:c9:81:4d:e0:ae:cf:4a:6c:fc:ce:ca:
                    39:a3:56:e6:c3:d9:ac:93:24:52:ab:2a:de:f1:08:
                    b8:20:99:ce:ab:ef:21:4a:df:1c:7c:54:64:6a:4c:
                    67:84:19:bc:57:8a:19:50:1a:e6:c6:4b:cb:bd:32:
                    e6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:EB:DE:6F:C8:F0:61:F4:85:D7:F5:71:B4:1E:58:C9:E4:67:6B:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c01671a2-3cf0-359f-be36-c8783323ae9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:dd:e0:91:22:c5:b2:c0:b3:b5:bc:35:dd:5d:79:d2:0e:b0:
         f6:94:c5:ec:17:fe:4d:29:cd:04:d4:49:30:53:0b:3a:02:8a:
         f0:b7:d5:59:87:98:a3:dd:23:87:0f:48:e0:fd:80:c2:ad:55:
         85:50:73:fe:9b:91:d5:92:58:d6:5a:0e:ac:03:90:62:43:0d:
         d7:e3:52:d1:44:e0:e9:17:99:b2:ab:ef:f8:5b:be:d3:4c:c5:
         bd:34:4b:9c:a0:98:b1:eb:0d:c6:f5:63:4e:48:a0:8b:27:68:
         2a:92:14:55:90:8f:b8:7c:98:ba:31:35:44:8f:b9:36:e2:86:
         ad:c6:78:fe:ef:76:3f:2a:6b:bd:fb:e0:c6:dd:e6:7a:18:1a:
         83:c9:84:77:7f:71:26:78:3b:e9:ab:c8:ab:45:9c:8a:b9:ff:
         1a:e8:36:50:8d:8a:d7:1a:10:5e:6a:eb:d9:16:2d:af:b7:5d:
         1b:fa:55:07:b3:bc:98:3d:e3:3c:51:51:99:de:aa:1c:4b:12:
         b3:0d:9b:53:21:e3:33:99:4a:78:96:58:f5:0d:76:0e:c7:ae:
         70:3c:21:8c:36:21:f0:27:d5:cf:9c:d5:2b:99:81:a5:96:e1:
         f4:88:fb:d8:6a:4d:08:2b:51:80:f5:71:5e:f9:3a:63:0e:c4:
         f0:5c:fa:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:34:16 2025 by rpki-client