Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/c76d9779-fcb1-3b9b-8aaf-05a3ce372a6e.roa
File:                     c76d9779-fcb1-3b9b-8aaf-05a3ce372a6e.roa (raw, json)
Hash identifier:          U0U4VZkrvvR3CvORkHsHJ7jb8QhyxU4oU79Yj16dh7I=
Subject key identifier:   3F:BE:EC:2C:51:B0:60:1F:05:B5:55:C6:72:29:55:87:07:14:0E:3E
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285849E2253BFC0F79AA5576F83100
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/c76d9779-fcb1-3b9b-8aaf-05a3ce372a6e.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     19905
IP address blocks:        104.255.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:3b:fc:0f:79:aa:55:76:f8:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=5f6b73b8-65e9-4e1b-a8c5-f4745ca70935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d4:51:83:ab:a6:d4:f3:86:2f:8a:1c:02:39:
                    75:b6:34:3f:36:e1:52:62:bc:77:9c:e9:ae:5c:98:
                    60:15:52:af:ce:c6:10:7e:7f:f8:c2:d8:85:c7:74:
                    d4:00:01:54:09:06:3c:13:0f:ce:c4:94:12:50:f1:
                    e7:6a:f9:33:be:6d:22:90:d2:74:eb:ba:96:c4:23:
                    8d:70:cf:0c:81:8b:67:4b:cb:fe:db:41:4c:c1:eb:
                    89:59:cf:25:5c:99:c5:62:7a:8a:72:c6:65:43:51:
                    56:64:29:94:bd:d4:f4:3e:ea:59:e1:1c:81:8a:41:
                    8e:14:33:c5:22:e9:f3:8c:05:67:62:87:63:59:92:
                    d7:bf:0b:bc:bd:70:b0:86:d2:f4:e1:33:9d:e5:79:
                    fc:c8:97:6c:ba:86:1d:74:13:1d:14:4c:d0:3b:9e:
                    1e:e4:46:f6:7d:1a:a9:b8:54:8f:61:64:0d:6e:8d:
                    44:f8:37:43:ee:58:d0:1b:b6:57:9c:47:a1:06:70:
                    16:7d:cd:cb:00:43:f1:d1:45:b8:ce:77:74:25:21:
                    c7:f3:6b:ae:52:c7:08:d3:38:60:b2:9c:61:07:16:
                    47:00:d1:92:1d:e7:a5:26:78:56:c9:14:c0:2e:f1:
                    85:88:77:8d:7f:dc:77:f2:f3:1a:f3:89:f5:7f:23:
                    26:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BE:EC:2C:51:B0:60:1F:05:B5:55:C6:72:29:55:87:07:14:0E:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/c76d9779-fcb1-3b9b-8aaf-05a3ce372a6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:2c:f7:48:a4:26:73:10:3c:d1:12:c9:5f:98:63:b4:2c:ed:
         ca:fc:f5:02:8a:0e:ee:26:64:a4:b4:9e:6f:ac:f4:1d:02:6e:
         38:00:b0:22:25:4c:13:32:b1:b7:3d:cf:a4:0c:ce:e7:f1:d8:
         24:4d:95:16:c8:d1:2d:80:e5:1f:bf:9c:14:4e:4a:2a:70:09:
         1d:eb:7a:8c:72:64:98:b7:3c:a6:d6:7e:90:a0:df:c4:68:8b:
         dd:44:d4:d4:54:ce:24:c3:a2:4e:cf:d4:b3:29:d6:c9:18:be:
         51:fb:c8:84:0e:3a:67:3d:63:39:23:3a:bf:1a:9c:1c:50:ef:
         ea:e7:74:3a:ca:34:e6:4d:d5:c2:c0:d1:db:5b:4a:16:15:7c:
         b0:59:5b:0e:2d:79:a5:e4:1f:4b:66:cc:a2:59:ed:c2:02:d0:
         10:e5:2c:7d:5d:fb:23:be:f4:82:5a:8a:1c:6a:fe:8b:df:5c:
         79:7a:8e:3a:bf:98:c3:e4:ca:94:12:e5:fc:81:9c:14:47:94:
         df:f8:40:93:f6:6b:22:af:41:71:0b:93:4c:11:10:3f:04:44:
         c6:6a:5c:83:e2:f1:44:28:af:a2:69:40:b8:a5:01:0f:c0:09:
         24:c4:a6:49:12:02:ed:4a:c4:8d:5a:ab:9d:dd:86:c8:8e:0d:
         7a:16:01:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:40:03 2025 by rpki-client