Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/373e32b0-66c2-3690-8181-2797518f5210.roa
File:                     373e32b0-66c2-3690-8181-2797518f5210.roa (raw, json)
Hash identifier:          87S/+S/ymi6vok40fI0oLIgAy6r1nihHJptE5u1aU7g=
Subject key identifier:   C4:B8:56:E2:53:8D:6B:82:7B:1E:31:11:EE:1C:EF:F7:A6:33:11:7E
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F43285848F65BCCC9A3CA04673EDFAA80
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/373e32b0-66c2-3690-8181-2797518f5210.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     16904
IP address blocks:        209.237.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:cc:c9:a3:ca:04:67:3e:df:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=4574aa96-1d66-4f18-bc1a-b9f22720dce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:42:f4:7b:e1:d1:3e:26:57:44:43:67:bc:aa:
                    cb:bc:d4:99:d7:4e:c6:fd:93:91:27:8a:74:1d:a4:
                    cf:61:74:9a:e1:34:ff:ae:61:1d:64:7b:c7:ed:d6:
                    f9:87:54:75:b8:21:1a:08:5e:c8:35:4e:b1:cb:5d:
                    32:4b:dd:65:cc:cb:80:07:3c:d3:19:84:df:fa:11:
                    07:f8:32:3f:42:18:62:e4:a4:34:5e:6c:3b:3b:e8:
                    e1:16:b9:15:8b:4e:89:16:de:c4:15:2e:27:c3:ba:
                    23:cf:d2:e5:77:b7:55:06:bc:4b:24:87:1e:dd:31:
                    3d:46:bb:06:1c:4d:24:66:76:6e:d9:18:18:78:64:
                    26:77:48:10:d2:5b:cc:7e:8c:02:bd:63:a8:83:08:
                    86:32:a6:cc:9d:50:b2:e7:f6:99:99:4d:2d:de:05:
                    40:22:c7:6d:c8:d8:d5:28:1c:3f:32:08:9f:24:00:
                    3f:53:9e:ed:cb:e0:1b:e9:3b:2f:2d:bc:6e:1e:71:
                    3b:0b:1e:60:3f:51:75:8e:1a:d5:79:80:e4:d1:af:
                    df:93:31:bf:21:19:0a:ca:1c:24:a2:33:d2:e1:da:
                    23:77:b8:34:7f:ba:7e:b3:b2:b2:4a:0a:e4:6a:29:
                    14:4c:01:33:ea:9f:06:fd:29:f0:58:69:04:dc:f6:
                    24:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B8:56:E2:53:8D:6B:82:7B:1E:31:11:EE:1C:EF:F7:A6:33:11:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/373e32b0-66c2-3690-8181-2797518f5210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:8e:97:29:39:f0:23:51:f4:11:58:30:44:1d:6f:c2:48:5c:
         64:18:cd:04:af:31:92:ba:44:98:d3:fb:00:8b:d9:60:05:c1:
         e4:aa:79:43:cc:d8:bc:2f:5a:bb:5d:5f:a8:18:75:96:8c:c3:
         38:48:f6:d1:f9:4d:cb:c6:f8:67:14:d5:f3:5a:0c:aa:70:06:
         3f:49:f1:1d:88:70:41:8c:62:08:d7:b7:72:21:c7:94:66:fa:
         ea:fd:26:e8:c6:35:15:47:81:ad:5e:33:b2:29:75:bc:bf:ba:
         7c:2c:f4:ba:a8:40:52:37:60:3a:93:b5:cb:6f:ec:0c:56:a5:
         f8:b1:88:47:72:25:5d:58:d3:d1:2a:d4:ac:8b:48:7f:45:6d:
         80:33:a4:5a:d6:9f:9a:cf:93:27:28:ee:65:41:56:42:c3:76:
         61:86:c2:a5:44:eb:d2:d1:03:57:b4:cb:01:63:2c:e6:94:fc:
         80:0c:af:85:6a:8e:67:6b:b8:66:0c:33:83:2a:7d:c7:52:6f:
         1e:93:c9:21:cf:31:c3:34:51:80:30:62:12:f0:46:7c:fc:dc:
         5f:bd:18:67:35:3d:00:f8:fb:d2:0e:98:ed:14:18:4d:d6:34:
         9f:b1:a5:e7:05:bb:39:c1:79:31:0c:cc:c5:67:57:13:d5:18:
         79:30:73:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:14:23 2025 by rpki-client