Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/c6097b58-c422-3f25-ad58-0368623ed0bc.roa
File:                     c6097b58-c422-3f25-ad58-0368623ed0bc.roa (raw, json)
Hash identifier:          EVroyqLe6DOL1isx2VL84mdTbDSbEiaM/bTq+E9NwkU=
Subject key identifier:   D1:90:88:8D:57:74:79:96:52:CD:B5:63:FA:14:3F:F0:B9:7F:02:6F
Certificate issuer:       /CN=239e2a72-9347-4316-9be7-20bdf6512711
Certificate serial:       010D0C9F43285849CE9A5F56B9CA238537FFA200
Authority key identifier: C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/c6097b58-c422-3f25-ad58-0368623ed0bc.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     5511
IP address blocks:        104.193.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:5f:56:b9:ca:23:85:37:ff:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239e2a72-9347-4316-9be7-20bdf6512711
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=4f458cf0-c699-4953-807d-e98897f07e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:96:2d:d9:4a:93:88:2b:70:d9:c0:02:52:17:
                    d8:e9:dd:7d:73:52:b8:88:0c:77:0d:8f:b2:89:87:
                    28:9f:c9:c9:74:72:6b:22:ec:1c:c1:1a:46:c8:ac:
                    52:11:92:31:a3:67:82:15:8e:d1:83:56:d6:03:16:
                    22:ca:f8:84:a1:b4:50:f6:57:a5:53:da:00:3b:42:
                    01:a2:66:65:ba:9d:1e:23:63:7e:4f:8b:b6:9a:5b:
                    1a:8c:fd:7d:00:27:5b:c9:a5:7a:3e:5b:99:0c:82:
                    5c:0d:5f:82:dc:16:b1:6f:a8:97:30:0d:7d:10:f5:
                    ef:a8:01:ea:22:8c:26:4a:b0:97:44:1c:f3:95:c6:
                    c0:32:a7:ca:52:e6:c9:23:47:a0:d9:e4:ad:7f:bf:
                    69:a3:be:ff:7f:20:e1:29:12:5a:a0:d3:f1:12:49:
                    1c:ca:8b:a9:0c:c5:0a:61:ea:e5:04:05:63:b1:60:
                    6a:2e:04:a5:e6:28:fb:d5:72:64:2e:37:7d:92:14:
                    36:08:f9:6d:38:76:24:fd:9e:43:4b:2b:2d:2e:66:
                    9e:73:e8:db:f1:37:ac:ee:58:d4:2c:5d:fe:44:df:
                    96:7c:d8:88:b2:3d:6b:3b:b0:af:06:94:c8:bb:40:
                    c7:6c:d0:1c:bf:db:ee:b3:0e:c4:0c:20:da:9d:52:
                    66:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:90:88:8D:57:74:79:96:52:CD:B5:63:FA:14:3F:F0:B9:7F:02:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/c6097b58-c422-3f25-ad58-0368623ed0bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl

            X509v3 Authority Key Identifier:
                keyid:C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:81:3f:32:4b:ec:54:f7:de:f1:83:4d:f5:31:65:1e:dd:ac:
         c3:19:6f:41:7e:10:fa:8d:2c:12:fe:0f:77:18:80:23:ee:47:
         93:bf:73:e8:e5:bd:56:47:0f:47:19:9e:84:89:4f:06:ee:87:
         61:c4:53:6b:b7:03:99:2a:cc:68:a3:7b:64:38:ad:3e:d9:d8:
         ad:4e:e9:2c:41:e9:7a:d5:df:80:a2:d6:38:da:fd:1b:38:8e:
         cd:76:34:1a:39:1c:48:fe:46:72:22:f9:05:39:ed:2a:1d:31:
         66:ef:24:09:56:86:30:8e:e2:51:aa:c1:87:58:df:d2:4e:9c:
         12:d2:8c:2a:32:57:8b:9f:63:ad:05:01:b2:a6:c5:74:8f:a8:
         32:48:cb:63:40:74:6e:c0:8d:8f:9d:63:e1:93:13:98:67:45:
         ee:ca:7b:0d:b2:e9:43:f0:98:f6:24:21:72:33:2d:1b:91:dc:
         36:ef:08:ae:45:74:6d:96:42:71:68:da:4f:81:f7:6d:92:27:
         5c:b1:88:5e:2d:0a:23:83:6d:0b:a3:77:a5:61:6e:78:22:f2:
         dc:dc:59:b6:9f:2a:e6:68:4c:c9:66:95:b1:ce:5a:50:6a:36:
         14:a5:48:4f:cb:f7:42:76:67:b6:26:2f:d0:d7:df:0e:2c:a1:
         d4:93:db:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 12:38:26 2025 by rpki-client