Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/9c494fa1-59d2-3347-b18f-58e46e60efd3.roa
File:                     9c494fa1-59d2-3347-b18f-58e46e60efd3.roa (raw, json)
Hash identifier:          0D87CIVdXCrvcvAeTBnx2+oXXz3l+BPFiDPaR6+9cOI=
Subject key identifier:   79:83:E2:24:98:D0:F0:5C:A7:CC:70:9A:E2:2A:01:93:28:E6:D8:1E
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285848BFEBB943094B9A74443E2800
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/9c494fa1-59d2-3347-b18f-58e46e60efd3.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     36040
IP address blocks:        104.237.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:b9:43:09:4b:9a:74:44:3e:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=5fb90eee-c0c5-44bd-808c-48606e5deecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:19:bc:78:fe:60:cb:24:82:4d:6a:49:7d:b4:
                    dc:75:57:8a:92:d3:c9:c8:e7:7f:14:aa:fd:1e:19:
                    18:9e:d5:30:d8:e2:e2:7d:16:0d:29:ef:b3:e4:b4:
                    bc:25:9d:8f:d3:65:cd:48:bf:31:5f:68:a2:99:66:
                    3e:85:48:9c:6a:0b:89:56:90:0c:c6:d8:72:97:a4:
                    e6:70:48:63:9d:ba:c4:1a:ba:0e:39:bc:b2:13:36:
                    a4:77:70:a3:8d:3c:ac:47:b5:67:f9:7b:3a:b4:03:
                    ea:16:a3:17:34:40:72:c0:00:02:41:00:f8:42:61:
                    e1:ac:90:16:c9:42:c8:0d:8a:3a:65:c4:02:ba:be:
                    d6:aa:ce:ae:0a:16:48:d8:fb:07:25:67:5b:fe:bb:
                    1f:12:fe:81:c6:02:52:87:d7:75:ca:7f:93:04:bd:
                    9d:54:87:41:b3:77:d6:7d:13:2e:0f:14:f4:8b:a0:
                    e9:d1:26:77:c9:dd:5a:b9:13:e8:6b:c9:f9:04:7c:
                    3a:fd:aa:4f:7b:4c:e5:4c:de:d1:30:0a:96:89:ce:
                    3f:82:47:fc:7d:34:27:6b:a9:f3:c1:c9:53:54:66:
                    b4:91:0e:80:c5:d5:b4:12:cd:ed:9f:10:cf:a9:23:
                    2b:ee:20:07:ce:5a:6b:17:e6:9a:9e:c4:34:86:fb:
                    e7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:83:E2:24:98:D0:F0:5C:A7:CC:70:9A:E2:2A:01:93:28:E6:D8:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/9c494fa1-59d2-3347-b18f-58e46e60efd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:9b:55:56:12:33:51:3d:e7:16:22:62:e8:f2:fa:31:39:ae:
         49:9b:36:0a:20:05:80:1a:6d:84:46:d6:b4:77:10:a1:b2:e8:
         1e:9b:da:89:92:8e:d1:2d:2b:94:49:ed:56:3b:7e:52:38:66:
         3b:4d:34:af:4e:0f:b8:d3:1f:cf:51:7b:79:41:2b:1b:17:7d:
         f9:7a:f5:16:66:7f:0f:6f:c0:c4:51:1e:87:ab:50:f4:5d:47:
         45:95:e4:a9:38:74:a6:45:ee:6f:47:7c:37:b7:a0:3d:5c:fe:
         19:12:38:b3:0b:ec:ce:ad:92:23:2c:09:49:3d:25:85:b9:0c:
         cb:fd:8d:2f:04:c4:07:64:01:5c:52:db:d7:f3:ff:2a:60:68:
         f2:82:47:bb:c6:94:06:92:d8:3a:8e:de:dc:9a:38:d3:26:39:
         1d:0e:e4:96:41:b6:e0:67:1d:36:b9:c1:3a:30:93:99:d7:32:
         d6:44:f6:ae:e5:ea:94:8a:f4:c1:73:44:11:0e:74:ad:6e:b3:
         fd:1f:6c:3a:04:0e:65:b5:9b:a0:83:a6:59:a3:41:33:0b:cb:
         8f:bc:76:e3:98:fe:66:c0:07:bb:a8:d5:b3:8e:c7:3d:09:12:
         b5:e8:cd:af:60:0d:9f:2f:68:97:35:3a:74:99:8c:21:eb:51:
         24:ce:24:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:35 2025 by rpki-client