Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eb9d72d4-c317-3e1a-a081-60e0a74a1099.roa
File:                     eb9d72d4-c317-3e1a-a081-60e0a74a1099.roa (raw, json)
Hash identifier:          WeTnih9pHpBkCqmT9GxN7Egu6Hhi+ZpqOvg13Zvp6OQ=
Subject key identifier:   15:E6:17:48:E4:26:23:38:59:43:CD:D5:EB:78:23:65:0C:CC:16:D8
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285848EE57F8FA4B1EA09E61B392C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eb9d72d4-c317-3e1a-a081-60e0a74a1099.roa
Signing time:             Wed 19 Feb 2025 05:06:32 +0000
ROA not before:           Wed 19 Feb 2025 05:06:32 +0000
ROA not after:            Tue 20 May 2025 04:06:32 +0000
asID:                     834
IP address blocks:        104.129.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ee:57:f8:fa:4b:1e:a0:9e:61:b3:92:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb 19 05:06:32 2025 GMT
            Not After : May 20 04:06:32 2025 GMT
        Subject: CN=5a0117d7-cd3c-4251-8563-61b87177f423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1d:3f:8d:07:31:16:04:58:71:e7:76:ce:c4:
                    4c:ab:3d:a8:47:77:91:e6:ce:a0:8a:fe:9e:f3:bd:
                    73:b3:17:ef:5d:0c:d3:19:3a:f1:5b:43:df:0f:9a:
                    40:26:b8:ce:cb:c3:ce:27:d7:03:f1:28:20:d1:92:
                    6d:15:1b:7c:61:b1:c1:1a:4e:3f:57:ec:05:94:7f:
                    e6:16:14:5b:17:c1:01:27:d1:07:3b:ba:e0:7e:07:
                    9d:89:c2:eb:91:c6:1a:bd:ea:08:f5:52:84:9c:11:
                    f2:c4:57:02:aa:50:c4:74:13:60:50:66:97:94:e9:
                    46:de:fa:9b:ce:73:4d:da:9f:a1:f7:00:ef:8a:86:
                    ba:7a:4e:90:ac:81:4f:27:4f:3d:ca:c2:38:43:de:
                    4f:f6:12:3a:ed:fe:cb:ea:77:73:1c:5a:8b:44:2c:
                    ac:1c:38:72:e7:ae:80:75:25:5f:1b:fe:e9:86:40:
                    1f:b1:36:77:9e:f3:dc:27:2f:20:85:74:2e:05:64:
                    4b:30:fd:59:d1:c0:61:a1:c1:2d:f0:b7:a8:93:ad:
                    80:7d:ee:5f:f5:3d:2b:db:da:db:80:3e:ce:77:b4:
                    de:9c:b8:68:ad:dd:a3:47:cc:27:d6:b9:b0:52:0a:
                    9f:27:22:f1:23:c4:8b:ed:57:a7:fc:c0:40:3d:fa:
                    d8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E6:17:48:E4:26:23:38:59:43:CD:D5:EB:78:23:65:0C:CC:16:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eb9d72d4-c317-3e1a-a081-60e0a74a1099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.129.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:76:6d:8e:81:e1:51:73:ab:56:c7:1b:58:39:eb:b9:c1:24:
         93:46:28:52:50:81:78:53:32:be:68:ec:85:df:5b:17:b3:40:
         35:1a:d5:8e:ed:a8:86:af:62:36:ef:8d:ec:b8:ad:4b:11:c1:
         6d:4e:7b:ce:1f:13:b7:5a:89:ac:2e:d8:3d:9a:97:0a:ab:bf:
         72:75:df:ce:ad:17:80:23:cf:ac:f8:66:13:a0:5c:30:df:ab:
         99:15:75:ec:e8:d5:8e:78:a6:bc:b8:4c:96:3f:2f:95:c0:3e:
         6b:4b:bc:ba:76:04:d2:ee:e7:71:7d:87:cb:d2:eb:9c:39:95:
         0a:ad:b2:dd:e9:43:66:51:62:60:c2:1f:cc:0b:21:ee:78:b6:
         ea:1a:2f:03:aa:3b:6b:db:fe:3e:cc:9e:aa:4b:88:3b:39:12:
         38:a0:27:50:05:dc:9e:d9:7b:de:74:f2:43:14:da:0c:df:93:
         c7:e6:c9:f9:c2:c4:4a:f5:db:2b:d9:cb:36:59:98:c7:ea:15:
         e8:5b:bd:fc:44:a3:2e:eb:c3:53:b9:c5:73:ab:57:9b:46:18:
         1c:75:89:56:dd:64:be:ed:f6:04:0f:e8:e3:dd:38:be:cd:ad:
         75:f3:46:30:94:da:e6:e4:5f:b3:ab:8a:28:39:c0:b3:80:fb:
         5b:87:42:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 15:01:02 2025 by rpki-client