Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/8e0d3772-94e9-3c62-b8b7-de26c644d36d.roa
File:                     8e0d3772-94e9-3c62-b8b7-de26c644d36d.roa (raw, json)
Hash identifier:          QBYZs3UOJRrAFhvrX1XUzsgf7nw878cZ8E9D3b5WlRg=
Subject key identifier:   84:13:36:10:C0:19:A0:6C:65:37:E3:6E:15:7C:C1:91:A5:C0:6D:67
Certificate issuer:       /CN=c52a3659-4578-49f3-9ef2-ea8640fc6339
Certificate serial:       010D0C9F4328584A07D52D3ACA39A2F5FD74DA40
Authority key identifier: F5:1A:36:FC:86:A2:76:F3:BB:1F:6D:6F:3B:18:39:FD:CF:D9:98:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/8e0d3772-94e9-3c62-b8b7-de26c644d36d.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     399321
IP address blocks:        104.224.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/c52a3659-4578-49f3-9ef2-ea8640fc6339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/c52a3659-4578-49f3-9ef2-ea8640fc6339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:2d:3a:ca:39:a2:f5:fd:74:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c52a3659-4578-49f3-9ef2-ea8640fc6339
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=b61ecf13-b878-4e96-a2b4-de82343b1959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e6:cb:a0:dc:27:c8:4e:81:e8:cf:dd:80:30:
                    c0:26:70:ec:2f:39:f8:3f:8c:d9:c3:ce:18:41:47:
                    16:ec:52:d9:39:ac:53:02:24:ca:19:f3:3b:be:72:
                    05:5c:90:21:d3:5e:a5:17:fd:a6:6e:db:04:f0:e7:
                    30:ed:9e:7c:fe:ea:f5:5f:7d:13:f2:bf:54:28:7a:
                    88:25:fe:d2:e3:8a:a5:dd:07:60:cc:01:85:8a:9d:
                    57:2e:22:d4:29:28:b0:aa:0e:67:80:68:3b:d9:39:
                    59:16:3b:44:97:38:7a:75:85:7b:e5:fe:23:91:54:
                    cb:8d:ac:9c:ce:14:9c:f4:ae:f1:c6:5e:1d:ac:9b:
                    b9:6f:fa:3d:d1:50:cd:e6:dd:df:42:e5:59:7f:74:
                    9f:63:e1:37:a9:17:15:b1:19:02:33:e5:b5:96:99:
                    33:5e:e8:8d:85:91:03:aa:70:f3:e7:a6:9e:23:ff:
                    23:b0:c9:1b:f9:7c:84:50:19:e6:a7:92:ee:34:c2:
                    42:b7:00:4d:19:d3:13:db:7f:66:e8:43:23:97:04:
                    26:f5:db:6f:38:6f:ec:c1:15:71:6a:50:f0:1f:53:
                    40:ea:3c:7d:a8:5c:0b:ee:ee:48:21:db:59:c2:37:
                    8b:1b:09:94:21:3a:7f:63:42:17:84:3c:70:e3:17:
                    d5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:13:36:10:C0:19:A0:6C:65:37:E3:6E:15:7C:C1:91:A5:C0:6D:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/8e0d3772-94e9-3c62-b8b7-de26c644d36d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/c52a3659-4578-49f3-9ef2-ea8640fc6339.crl

            X509v3 Authority Key Identifier:
                keyid:F5:1A:36:FC:86:A2:76:F3:BB:1F:6D:6F:3B:18:39:FD:CF:D9:98:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:3a:58:3c:df:35:a5:c8:29:17:db:c4:01:30:00:a6:76:54:
         6f:cb:32:79:fe:b2:c2:ee:83:27:da:2e:11:54:af:6f:c9:1e:
         e3:1f:a2:e8:c0:a3:3c:32:35:34:af:00:a7:32:6e:7e:15:5d:
         55:96:2c:e5:bd:44:94:48:2a:f7:c2:db:11:08:cf:c8:f0:b2:
         23:80:cf:1c:a4:d5:66:09:b7:a3:3e:1c:0e:d0:a7:76:1a:03:
         4a:da:8a:97:9f:28:bb:f4:46:54:53:ec:31:43:cf:6c:e9:f1:
         bb:12:d2:c0:cd:a7:fb:f0:4c:68:5e:54:3e:89:68:d8:27:91:
         38:b3:b2:13:2b:20:8e:9d:50:42:f4:d8:c2:85:39:06:05:e4:
         af:59:95:a2:72:90:ed:02:b8:f0:e2:fc:30:03:69:5d:ec:e4:
         49:ed:3c:62:74:c4:79:a4:b2:bb:be:49:20:6a:f3:ac:22:b5:
         a2:e4:c5:65:43:2e:9a:3b:f1:8d:98:d4:ff:ad:a4:08:cf:86:
         b8:ae:c1:2e:78:60:07:80:72:07:78:d1:f2:26:d8:8a:1b:1d:
         a3:fc:6c:9d:3f:56:09:55:ce:0e:2b:9e:30:41:42:3a:12:9a:
         4f:da:fc:48:af:b0:89:c7:14:10:ff:13:c8:3c:34:03:98:16:
         99:f9:f8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:14:50 2025 by rpki-client