Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07623340-3853-35a1-8fd1-9b6c1d2e9675.roa
File:                     07623340-3853-35a1-8fd1-9b6c1d2e9675.roa (raw, json)
Hash identifier:          pBjM2y0gKnsuk6IFadFHbrkzrstSmCO8vETGJ5psqrA=
Subject key identifier:   94:5F:51:1A:F9:1C:08:36:31:E5:3B:8C:C8:1C:D8:8E:16:F7:A5:F2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A189550439878D7236F16DA50
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07623340-3853-35a1-8fd1-9b6c1d2e9675.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     16625
IP address blocks:        104.122.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:50:43:98:78:d7:23:6f:16:da:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=0d66fa7d-c869-4293-bc7f-1082388ca812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ef:2b:be:29:58:f6:7a:92:90:20:3a:48:0f:
                    7c:f6:ab:a2:08:ff:75:2c:2d:3d:c1:07:89:a5:15:
                    9d:ed:dd:88:e2:73:74:91:c8:ab:c0:5d:c7:5b:be:
                    fb:4e:70:a5:21:8f:3b:67:8d:bd:53:68:8d:b5:89:
                    d1:b1:e7:a0:94:7f:37:63:ee:73:a8:52:0c:1e:86:
                    51:87:3f:79:d8:83:fd:5e:bc:9e:05:48:25:28:7f:
                    a7:b4:d2:1c:fc:ab:df:13:68:28:20:18:13:54:81:
                    6f:eb:9b:e2:b3:8a:d6:f2:f9:52:fc:47:a6:5d:88:
                    bb:79:58:7e:82:e7:c8:9d:15:bd:6b:2a:0f:39:d5:
                    54:54:68:ee:99:92:d4:72:90:59:92:e1:75:35:8f:
                    19:7b:f3:f3:25:78:52:bf:33:36:4f:e8:b9:5f:d3:
                    e9:63:80:4c:0a:0c:3e:20:9d:6d:24:ec:d9:bc:0b:
                    65:4b:ca:7f:b4:b1:10:a4:27:8d:7b:0d:c5:03:57:
                    47:ea:62:ff:fd:bd:e9:4f:ac:99:5d:87:73:92:16:
                    33:9e:e9:c3:03:b8:30:22:35:70:83:8b:1d:a2:ad:
                    0a:1f:0f:c0:b4:71:69:06:3e:1e:9d:b5:e5:f9:1a:
                    27:ae:92:e6:3d:43:e0:23:5a:d7:54:6d:4d:1a:e2:
                    f6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:5F:51:1A:F9:1C:08:36:31:E5:3B:8C:C8:1C:D8:8E:16:F7:A5:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07623340-3853-35a1-8fd1-9b6c1d2e9675.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.122.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:47:2a:77:51:36:48:87:31:5e:f2:38:9f:0d:c7:5c:33:9c:
         3a:b4:f0:65:8b:56:0a:d5:47:ff:b5:e8:55:65:7b:f6:a6:65:
         ec:1d:58:89:07:ed:cd:fd:81:6b:f1:4f:b8:5a:25:43:88:66:
         ce:21:74:60:0f:d6:ac:79:85:3a:78:f2:71:8b:9e:df:65:f2:
         e0:1b:7f:92:9f:e8:65:a5:ea:57:8c:6b:41:a5:43:11:88:4f:
         9f:2f:ba:2e:b7:c8:a9:b8:c5:64:0d:b4:95:1f:59:ed:60:5e:
         66:72:a6:d5:4d:72:85:0f:f9:29:3a:6a:5e:01:18:30:d2:46:
         17:b5:d6:38:7c:6d:31:f2:f2:23:be:15:9a:fb:42:51:89:7f:
         b2:b8:b4:aa:61:49:df:5c:91:26:2c:aa:8c:a0:70:42:1b:f2:
         4a:95:8d:b7:76:2e:74:3f:d9:1a:f3:bd:c3:ac:6a:cb:e5:df:
         9b:57:da:80:f6:7f:4d:15:95:eb:ae:3f:70:91:71:8e:b7:c0:
         17:a4:d9:e1:fc:93:ab:73:f1:24:1c:9c:97:9a:71:93:c3:37:
         d8:f7:4f:c0:60:c8:2d:57:bd:2d:cd:11:2b:f1:89:fe:8c:91:
         72:8a:56:0c:f1:3d:f1:8c:a2:e8:2c:f0:89:77:63:e8:9c:a0:
         b3:a5:bb:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:16:02 2025 by rpki-client