Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/2226bca6-8a5e-37c2-8da3-d2833e0a82fa.roa
File:                     2226bca6-8a5e-37c2-8da3-d2833e0a82fa.roa (raw, json)
Hash identifier:          L2ehmL8CiyMZkYG/Y5wLJkoi8YL8jKUioIp8wjeQJHA=
Subject key identifier:   5C:8B:69:88:F9:7B:E1:72:CD:33:16:18:5E:E9:4D:19:CA:05:5C:DC
Certificate issuer:       /CN=1126b6ac-3585-401f-b2a8-1c0c1dbe489a
Certificate serial:       010D0C9F43285848DEA11CAF519028718D4FFA90
Authority key identifier: F1:69:9E:0E:11:E6:9C:30:DF:7F:B4:BE:D1:37:14:4F:B9:D5:D7:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/2226bca6-8a5e-37c2-8da3-d2833e0a82fa.roa
Signing time:             Thu 13 Feb 2025 14:00:50 +0000
ROA not before:           Thu 13 Feb 2025 14:00:50 +0000
ROA not after:            Wed 14 May 2025 13:00:50 +0000
asID:                     36352
IP address blocks:        104.166.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:a1:1c:af:51:90:28:71:8d:4f:fa:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1126b6ac-3585-401f-b2a8-1c0c1dbe489a
        Validity
            Not Before: Feb 13 14:00:50 2025 GMT
            Not After : May 14 13:00:50 2025 GMT
        Subject: CN=f97500cd-a8b3-466e-a0df-003fcd1cd699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:65:03:76:10:2e:f3:7e:ad:be:dd:39:28:d0:
                    d6:f3:23:ae:87:c2:72:5f:30:8b:0d:57:35:78:3b:
                    52:4f:86:35:8a:db:ff:e7:18:0f:f2:26:10:14:74:
                    51:f8:83:a0:44:81:43:8b:3d:83:fd:01:9a:0b:80:
                    b4:37:ea:ee:da:9f:75:49:a2:2e:95:1d:4c:7b:bb:
                    47:d9:8b:68:3b:70:80:05:b1:c8:72:86:b6:5e:5c:
                    e4:84:3c:19:94:13:6b:3d:88:5a:3d:04:8a:06:06:
                    35:0f:57:b4:07:d4:1d:c3:e0:26:7f:5d:a5:61:9a:
                    78:af:b0:99:78:ed:ae:c0:f3:ec:f9:a0:f9:a6:8f:
                    53:bb:06:1c:fa:46:ab:d7:96:2d:ea:59:10:73:dd:
                    e8:36:a0:69:47:4c:c5:a2:d9:a7:e3:29:e5:5a:5f:
                    1f:b0:b3:c2:b6:8c:f7:43:37:70:07:e6:ce:8d:8a:
                    11:cb:d7:1d:d4:7c:b8:78:a6:71:f0:63:22:a6:75:
                    d3:57:6b:9f:ef:40:66:a7:85:69:e0:b6:18:69:9c:
                    2d:8b:85:9c:d0:e3:3f:2e:d0:e0:cd:e1:ca:91:92:
                    88:8f:49:02:5f:0b:c4:26:21:d4:4c:c4:7d:ed:aa:
                    0d:51:77:b2:ca:78:74:7b:ca:53:0a:54:17:c6:33:
                    90:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8B:69:88:F9:7B:E1:72:CD:33:16:18:5E:E9:4D:19:CA:05:5C:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/2226bca6-8a5e-37c2-8da3-d2833e0a82fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.crl

            X509v3 Authority Key Identifier:
                keyid:F1:69:9E:0E:11:E6:9C:30:DF:7F:B4:BE:D1:37:14:4F:B9:D5:D7:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.166.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:7e:0d:f0:18:23:97:8d:53:d9:cb:77:71:8e:c8:da:66:13:
         91:94:f5:6c:bb:d0:43:cd:20:dd:98:34:bf:38:68:a6:99:94:
         ee:9e:1f:52:23:29:d0:7d:69:5d:7d:8c:60:19:f2:ed:ab:8e:
         50:80:6b:34:31:4f:76:2f:94:74:58:d4:a7:97:d0:f8:f0:76:
         9a:bc:ab:a2:36:53:a8:ad:d9:16:ee:e2:c5:42:eb:0e:a2:a4:
         44:46:ab:7b:8b:44:e2:cd:46:a9:96:77:45:85:c1:07:09:cd:
         cc:0a:50:16:8d:bf:9e:e6:8f:64:09:88:70:8a:1e:68:0a:84:
         8d:c4:fa:d8:22:45:30:db:26:23:09:e3:67:a6:1d:42:be:3f:
         73:e9:94:20:5d:9a:02:21:92:6e:79:68:32:1a:54:c2:25:6b:
         63:04:1a:ff:8b:ae:6c:7e:42:4c:88:65:a4:f4:5c:c0:a5:1f:
         35:9a:ff:80:2a:89:1f:5f:7d:e9:65:df:62:be:3d:72:09:14:
         81:de:e0:a8:98:05:e8:c6:54:ec:01:dc:aa:c9:41:fb:9f:d9:
         b8:37:93:9e:17:b1:d2:02:1f:59:ea:29:99:b6:09:0d:98:29:
         9c:cf:be:aa:ae:98:99:86:47:de:1c:9b:75:26:88:28:8a:e0:
         91:81:cb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:17:27 2025 by rpki-client