Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/ed6c7aa2-052b-31bb-8c89-6adf1c125bed.roa
File:                     ed6c7aa2-052b-31bb-8c89-6adf1c125bed.roa (raw, json)
Hash identifier:          ngIkMQu3dVrHGw3goaCzrSHMduq+Xd9lqs2vu5ZHtXA=
Subject key identifier:   A7:FF:23:FB:7C:D2:36:21:B5:5B:83:39:05:33:16:CE:98:51:D9:8E
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F432858492CAE8BAB48E1F6F464C1DAEC
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/ed6c7aa2-052b-31bb-8c89-6adf1c125bed.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     19905
IP address blocks:        104.218.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:8b:ab:48:e1:f6:f4:64:c1:da:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=8950d160-42b7-452d-bf1e-d54d10b52961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c9:01:bc:97:b2:e5:ae:8a:03:72:ce:e8:7e:
                    77:93:3f:12:87:e6:a0:13:82:aa:a2:93:ff:dc:53:
                    fa:a1:c5:c6:f4:73:27:cc:a3:c5:b8:d6:45:c7:e4:
                    72:ec:3a:15:cf:67:bb:d7:33:2f:62:cc:ba:15:5f:
                    7b:f7:ac:6c:c9:02:71:0b:d0:43:91:16:75:5a:9f:
                    e9:f6:16:0b:97:4a:94:4e:ac:94:e8:d7:52:0b:f3:
                    4b:eb:09:fa:58:7f:cd:a9:28:26:a0:c2:87:30:95:
                    1b:b9:51:63:bc:cf:71:2c:cd:1b:04:0a:60:01:14:
                    d9:23:e3:95:70:a0:fd:3a:59:c0:1a:cd:ed:c9:58:
                    2a:4b:97:69:cd:45:c3:18:73:0a:39:04:42:58:eb:
                    64:02:63:e6:71:7e:5d:0e:3f:89:07:86:b9:35:11:
                    ac:3d:61:d8:2d:20:46:11:44:f9:74:4d:da:7b:2b:
                    70:f3:0f:ff:84:96:22:e6:f8:78:83:dd:41:c1:27:
                    bb:b5:9f:5d:a5:22:68:18:96:bd:4b:55:d2:28:3b:
                    d2:9c:5e:fe:bd:b8:b3:d5:ff:35:2e:92:56:b5:75:
                    31:8f:f9:fd:01:3a:c8:04:11:0a:89:42:80:cf:c2:
                    45:c4:d5:ba:34:2d:ad:17:28:dd:5e:99:c0:43:34:
                    ba:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:FF:23:FB:7C:D2:36:21:B5:5B:83:39:05:33:16:CE:98:51:D9:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/ed6c7aa2-052b-31bb-8c89-6adf1c125bed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:c8:5e:77:58:54:f6:74:a4:0e:0b:33:31:52:08:94:61:5e:
         60:2a:aa:43:67:a9:7f:1d:2e:bb:85:0a:3a:af:52:b2:5b:f6:
         1c:93:94:7f:c2:b2:67:b7:a5:0e:b5:56:e6:56:2e:c8:0b:21:
         ec:63:cf:61:6e:e6:60:42:a6:89:09:1a:c3:88:7a:ac:c7:14:
         b8:6d:01:74:5e:95:e7:f4:d4:27:c4:87:fb:e0:2b:58:36:74:
         91:7d:75:b4:f2:6c:83:4d:f5:5c:27:a3:ca:b5:9c:73:52:bc:
         6c:d1:0e:b1:35:f2:ab:8e:da:74:74:2f:50:e2:f3:8d:98:2c:
         6a:f4:9c:d6:17:7d:25:0c:e9:6d:e7:0e:1a:3d:c1:1c:00:ea:
         99:47:92:00:80:25:94:d3:0f:90:e6:63:1a:47:cd:17:18:b5:
         93:08:64:46:6f:d9:29:39:d4:9b:55:c6:a1:4e:f7:d1:23:ed:
         e1:83:da:32:fd:88:f6:68:87:7d:f7:92:74:33:a5:a7:5a:c8:
         64:e1:28:ed:9c:79:b1:16:57:b6:91:8d:19:4d:f9:7e:8f:10:
         be:39:e1:8d:ed:2c:65:fa:aa:f5:87:49:ac:12:e0:18:9a:a5:
         15:49:75:ae:97:cd:e4:f7:2f:f3:54:db:f2:d3:d3:fb:47:f6:
         df:1f:32:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:28:04 2025 by rpki-client