Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/f1b53950-8f95-3608-896e-d18a018c60b7.roa
File:                     f1b53950-8f95-3608-896e-d18a018c60b7.roa (raw, json)
Hash identifier:          w8uNNOjwrgGRh6MTiLRiYmTE+/4yMZ/wvF2uiEhtOIE=
Subject key identifier:   A4:61:17:B2:25:3C:11:0D:C3:31:E9:41:9E:7C:B6:61:6C:A9:88:48
Certificate issuer:       /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial:       010D0C9F432858492E13C5C85643665DF792C980
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/f1b53950-8f95-3608-896e-d18a018c60b7.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     401241
IP address blocks:        104.238.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:c5:c8:56:43:66:5d:f7:92:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=6b07e716-b511-486c-8cf7-40b4e7df31e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:96:a6:d6:41:5b:85:ec:6e:f3:6d:2a:e1:97:
                    66:b3:58:99:6d:f8:36:77:ad:3c:ea:bc:d0:44:f1:
                    5a:11:3d:ba:20:a2:0b:95:78:66:3f:06:03:90:51:
                    31:2d:02:3e:2c:0d:e4:f6:60:c5:b7:71:9f:a3:fd:
                    dc:9e:97:6f:fa:34:d6:08:76:cf:ef:8b:0f:09:0e:
                    cf:b2:0d:90:83:72:8e:e6:d8:53:e4:34:d9:f0:e9:
                    89:09:88:0f:30:ad:2f:21:86:00:2e:42:3e:bf:e4:
                    3f:ac:10:5e:c0:b6:2d:ac:1f:ec:76:08:32:d8:80:
                    14:18:2a:6c:a3:49:af:35:f0:3b:e8:90:1d:ed:89:
                    92:ea:b9:d8:c8:33:e4:fd:23:04:39:e8:18:a2:ce:
                    c3:30:cd:a7:e1:f3:4c:ea:9a:2b:64:55:a4:fb:85:
                    81:73:2e:00:ff:61:c3:f1:bf:e5:94:32:58:af:1f:
                    67:52:2b:90:67:82:a0:2f:17:07:44:86:e2:8f:80:
                    7d:41:ad:19:71:86:5b:ad:a8:ed:94:11:8b:f3:49:
                    c7:eb:25:53:a9:f8:13:c8:c3:92:7f:ff:da:21:c8:
                    8f:b7:50:12:c2:33:e0:05:38:af:1f:2a:17:72:31:
                    b3:67:e9:6f:19:8e:d7:c6:53:4d:57:59:50:d1:48:
                    aa:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:61:17:B2:25:3C:11:0D:C3:31:E9:41:9E:7C:B6:61:6C:A9:88:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/f1b53950-8f95-3608-896e-d18a018c60b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl

            X509v3 Authority Key Identifier:
                keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.238.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:3b:ac:66:f3:ee:c2:44:9f:89:b7:08:91:96:23:4e:bb:18:
         e8:a3:54:b4:ee:27:5a:85:26:6f:b2:57:00:46:8c:6e:db:3d:
         6f:54:28:77:ea:79:09:6d:11:14:58:e2:4a:9b:71:08:ae:6f:
         4e:5c:60:92:1b:12:3c:81:f4:72:bd:20:cf:68:2b:f5:8e:6c:
         89:0c:d7:13:52:32:62:e9:57:d2:99:f2:61:98:a5:8b:02:07:
         ba:d5:17:67:cf:4d:14:2e:6e:62:c0:62:40:be:1f:80:5d:a0:
         b1:e6:01:30:4c:f7:4c:07:7c:28:a3:08:46:a8:7f:e3:23:51:
         ae:93:72:f4:a7:59:c2:23:ff:37:07:92:19:b1:a1:e4:2c:46:
         c8:38:a5:dd:3c:30:bf:98:9b:ba:99:85:fd:04:ee:af:56:bd:
         ad:3e:7b:0c:42:07:53:84:56:6a:a8:c7:2e:64:22:2b:90:c2:
         39:c0:f2:18:9b:5b:2a:a8:2f:ce:62:c9:3f:8b:13:c6:22:f1:
         01:ba:db:5d:1f:d7:c2:ab:ac:77:be:22:60:8f:83:82:6d:d2:
         28:2c:91:ec:6f:9a:0c:b0:8e:13:63:20:ab:1f:a8:01:30:26:
         87:c8:27:b7:27:17:1f:61:54:34:03:13:51:c1:0e:d3:b6:2f:
         eb:4e:1a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:53:00 2025 by rpki-client