Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/eedf104d-5f13-335a-9dbf-74a9d6e45701.roa
File:                     eedf104d-5f13-335a-9dbf-74a9d6e45701.roa (raw, json)
Hash identifier:          bNLCFDKA95jEyq+54kovRjS3DTnlQRTXIEmdMHh1cAM=
Subject key identifier:   CB:C1:47:DF:77:2B:92:85:2E:6E:61:F0:CC:B9:DC:93:97:F1:B4:4C
Certificate issuer:       /CN=77258d44-b15b-4045-943b-356f0becdaa2
Certificate serial:       010D0C9F43285848BE862DA0C256E3E1784E0220
Authority key identifier: 6A:A3:AF:A8:B1:21:12:15:87:14:BE:FC:BE:68:10:47:20:C6:F7:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/eedf104d-5f13-335a-9dbf-74a9d6e45701.roa
Signing time:             Sun 02 Feb 2025 02:00:39 +0000
ROA not before:           Sun 02 Feb 2025 02:00:39 +0000
ROA not after:            Sat 03 May 2025 01:00:39 +0000
asID:                     399554
IP address blocks:        107.161.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/77258d44-b15b-4045-943b-356f0becdaa2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/77258d44-b15b-4045-943b-356f0becdaa2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:86:2d:a0:c2:56:e3:e1:78:4e:02:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77258d44-b15b-4045-943b-356f0becdaa2
        Validity
            Not Before: Feb  2 02:00:39 2025 GMT
            Not After : May  3 01:00:39 2025 GMT
        Subject: CN=068bbd61-ffd2-47e3-8b20-7eedc93d2af0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6b:f8:5c:37:52:1e:2d:47:ae:2b:2f:3c:49:
                    04:8f:a0:3d:fd:4a:26:c1:3c:b3:60:b0:a8:a3:2e:
                    60:3b:ab:d1:d9:8e:5a:29:4c:9e:c7:5a:1d:cb:3b:
                    f3:e1:25:7a:81:0d:ca:09:5b:73:77:00:4b:78:2b:
                    7d:96:9b:3e:18:89:78:05:b2:27:87:42:f7:a6:ae:
                    80:6e:5b:99:2d:d6:d9:a1:a6:94:07:b8:33:c7:be:
                    96:07:cc:f9:b5:94:56:9d:50:da:ac:14:ac:0d:73:
                    e2:e1:46:e4:36:94:fe:29:97:4b:ac:58:52:cf:52:
                    f8:52:fa:91:2b:02:c7:7f:0b:ec:a2:ee:1b:77:47:
                    80:91:a8:ed:13:ad:0e:43:3b:c7:2b:0a:08:c3:bc:
                    f5:44:f7:33:53:4c:eb:16:21:f6:08:7b:96:fd:ab:
                    af:b5:d3:1f:cd:52:24:65:4c:68:62:e0:dd:6d:10:
                    a6:5b:0f:a2:25:95:85:a4:e1:ff:09:fc:a7:18:0f:
                    cd:34:bd:2f:00:83:d8:2e:2c:96:d0:03:d2:a8:22:
                    f8:77:4d:8a:7a:4e:e0:43:aa:1c:19:d0:16:2e:65:
                    ad:18:bc:78:22:7e:05:55:a6:a7:25:c1:7b:00:43:
                    f4:36:e4:55:b6:ea:73:a1:86:34:49:92:d2:f8:ec:
                    5e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C1:47:DF:77:2B:92:85:2E:6E:61:F0:CC:B9:DC:93:97:F1:B4:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/eedf104d-5f13-335a-9dbf-74a9d6e45701.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/77258d44-b15b-4045-943b-356f0becdaa2.crl

            X509v3 Authority Key Identifier:
                keyid:6A:A3:AF:A8:B1:21:12:15:87:14:BE:FC:BE:68:10:47:20:C6:F7:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.161.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:d7:53:5e:2e:d4:8f:bb:bd:ad:65:1c:ca:6e:bd:cd:84:84:
         54:d9:9e:b1:96:35:01:2b:e0:48:d2:45:22:32:31:c2:32:b6:
         b7:1e:6a:b8:a8:86:35:a8:50:f2:ca:e3:e0:40:c1:8f:87:8a:
         9d:aa:24:b3:61:b3:13:d2:d0:a3:3b:39:d4:7f:2c:ec:f9:ac:
         7f:4e:9d:b2:cd:6e:51:f4:85:87:97:ef:ec:5b:c9:01:76:bc:
         77:2f:c6:7a:6f:b0:bc:83:3a:9b:56:f5:7e:3d:5b:20:90:67:
         4a:9a:71:79:9d:7a:b6:13:ba:27:cf:b0:d8:fa:5e:39:7b:ce:
         2a:35:92:25:46:72:c1:51:c3:f5:01:c0:8b:5e:93:f6:ea:f1:
         d6:37:90:da:80:3b:83:7a:ef:63:a2:5b:63:b3:6f:22:5a:c0:
         8d:dc:3b:32:97:5c:84:53:6e:2a:00:30:7d:17:fd:08:40:45:
         7c:90:8f:d9:d1:1a:30:d3:bf:c9:7a:ee:34:61:45:f3:03:cf:
         83:38:1d:05:e4:a3:ff:fa:78:24:cd:82:a8:e6:67:9e:ad:fa:
         f2:19:3d:11:77:86:ea:1a:83:53:c8:e6:64:4c:85:a1:55:a0:
         ed:ff:b4:b3:4d:1a:a5:1c:ff:4b:bb:f9:eb:9d:c4:f7:d3:0e:
         67:e9:db:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 23:59:12 2025 by rpki-client