Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/4dbd62f0-f97c-34bc-98d2-764588ca2cfb.roa
File:                     4dbd62f0-f97c-34bc-98d2-764588ca2cfb.roa (raw, json)
Hash identifier:          glFnzl51xkRT3vIqrBV0Cf9evgQWuu6zi8OTVPvJO5Y=
Subject key identifier:   54:D3:8C:4F:4F:C1:E5:42:41:CA:5B:AB:FE:15:F5:90:1C:5F:8B:27
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F432858491ED6D853A6690168A647D680
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/4dbd62f0-f97c-34bc-98d2-764588ca2cfb.roa
Signing time:             Sat 08 Mar 2025 14:00:52 +0000
ROA not before:           Sat 08 Mar 2025 14:00:52 +0000
ROA not after:            Fri 06 Jun 2025 13:00:52 +0000
asID:                     142617
IP address blocks:        104.171.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1e:d6:d8:53:a6:69:01:68:a6:47:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Mar  8 14:00:52 2025 GMT
            Not After : Jun  6 13:00:52 2025 GMT
        Subject: CN=e4c78505-edaa-4467-a9f4-83dcfbeacaf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:16:e9:b2:79:28:c4:14:fc:0c:4d:97:35:86:
                    c9:f5:3b:48:37:c0:52:7a:01:c1:3d:1d:09:ac:14:
                    59:a4:5f:77:ac:39:f9:61:d4:09:7d:05:86:04:2a:
                    d4:26:5a:50:4f:e5:6c:58:19:99:0e:a8:54:bd:8c:
                    18:c9:a3:1c:5b:e2:b1:43:2c:21:57:6e:0d:8c:8d:
                    9e:c5:8f:82:ac:c7:91:f4:00:a4:24:c5:62:a4:07:
                    6e:bb:71:7b:e6:e4:ef:10:30:7d:f6:f5:c1:ad:06:
                    42:83:97:02:6f:aa:df:31:29:82:53:87:2e:99:0c:
                    61:61:5f:09:c9:5b:eb:77:6f:64:84:1d:ec:db:cf:
                    1b:6c:f7:6e:f1:69:d9:7a:d5:5b:f7:69:bb:87:01:
                    78:1c:b2:7c:9a:15:37:d1:9b:0c:4a:d6:7c:02:39:
                    f8:e9:16:5a:34:2e:ac:62:31:3a:d6:63:6c:1b:94:
                    a1:a3:dd:7c:35:c5:b7:03:f0:af:d0:32:59:1c:e7:
                    dc:1c:8c:c2:d2:e7:d6:81:d9:2d:64:6e:e8:05:16:
                    2b:56:bd:93:ff:30:10:23:84:89:94:25:05:eb:9b:
                    47:3e:dc:d5:5b:37:a8:ec:d7:ae:c4:17:c7:b6:36:
                    6c:fe:56:6e:53:ca:5c:ad:12:58:0f:19:4d:0c:ff:
                    0b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D3:8C:4F:4F:C1:E5:42:41:CA:5B:AB:FE:15:F5:90:1C:5F:8B:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/4dbd62f0-f97c-34bc-98d2-764588ca2cfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:4f:fa:8a:32:17:21:50:f8:40:d2:dc:0a:8e:94:cd:99:f8:
         ee:3d:cb:00:df:47:55:d4:30:d6:9b:32:93:a4:b0:da:77:6d:
         38:8d:c1:fe:2b:4d:d4:4f:90:dd:dc:b1:13:ca:4c:b7:1a:4e:
         2f:d7:36:43:15:17:97:20:1d:2a:ed:e0:be:25:88:b8:fa:7f:
         94:da:7a:08:5a:79:c9:b6:bc:5e:d5:5b:eb:3f:16:8d:cc:ac:
         1c:41:44:f9:ad:b2:1c:05:3e:4a:ee:2d:66:23:b0:dc:4b:cd:
         8e:6a:d4:87:41:9f:dd:f4:c1:1d:2d:71:bd:d9:75:68:8c:54:
         d0:d8:26:ae:1f:86:a5:ce:d0:86:9a:71:04:98:38:9f:d5:00:
         ea:1e:c2:0b:f6:f6:dc:18:73:cc:a1:e3:d8:35:41:3f:9a:23:
         f7:55:70:71:de:b4:6e:d6:78:17:de:bc:87:9f:33:a0:67:7c:
         e3:6d:75:d3:0a:3a:9b:11:fc:bc:e2:7d:3c:a5:14:0e:34:53:
         29:51:ce:e2:49:42:73:fe:a0:74:62:46:d1:6b:95:05:7b:00:
         27:b0:46:97:85:6c:ef:f2:6c:52:85:96:f4:38:a4:16:e2:17:
         4e:e0:7f:8b:05:2a:86:d3:3b:82:9e:79:6c:29:ae:d2:f7:f7:
         cf:35:3a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:19:36 2025 by rpki-client