Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e21d52e-79ad-3256-a390-7cde55e3e72f.roa
File:                     2e21d52e-79ad-3256-a390-7cde55e3e72f.roa (raw, json)
Hash identifier:          WMtSo/cMHNumfiphJziLxoSLkmn3oUrriGasSYFpQEg=
Subject key identifier:   FE:28:7C:3C:51:FC:37:2C:C1:2B:F2:A1:96:15:0C:BB:3E:EC:23:6F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849350EC414785B58366F1BD800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e21d52e-79ad-3256-a390-7cde55e3e72f.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     16625
IP address blocks:        104.102.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:c4:14:78:5b:58:36:6f:1b:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=37bb04e8-a01d-4289-980b-c130d64f976c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1e:b0:de:62:5b:1e:db:f2:05:d9:35:3e:1b:
                    da:a4:1b:88:e0:70:92:03:61:f4:f1:5d:5b:46:f9:
                    e7:38:66:fb:27:17:81:66:84:4b:91:2c:75:80:f0:
                    8e:63:bd:fc:88:28:e8:9e:41:63:bb:30:60:fc:74:
                    13:ae:7f:92:45:94:f2:1c:16:1e:3b:c3:30:55:5b:
                    d9:41:e8:0c:ba:55:64:b4:56:7a:22:a0:1d:8e:ac:
                    a2:fd:fd:6f:42:5f:88:7c:7d:02:b5:e0:54:47:20:
                    e7:b5:a2:16:a6:99:9a:6a:fe:cc:99:6c:13:3f:46:
                    6b:41:4c:92:4c:fb:7a:57:cf:b9:ce:cb:25:ee:1b:
                    2b:e7:52:d5:6c:0a:af:2c:a3:a7:67:b2:2d:bb:61:
                    8d:14:45:b7:f2:46:d7:75:1b:ab:11:bb:2f:9a:69:
                    7b:53:2a:e4:64:a7:8b:e2:75:c9:56:53:10:71:a3:
                    8e:93:b9:ff:ce:e3:a0:4f:19:41:fc:65:e6:fc:b2:
                    06:b9:dd:57:f8:46:11:20:8c:1f:6a:f8:b1:35:16:
                    41:93:ea:05:c7:45:48:84:ba:cb:7d:e3:aa:da:55:
                    e4:f5:8c:3b:f7:78:45:f8:97:a6:91:2c:8b:a2:d4:
                    8b:9a:c1:d0:6f:b2:07:f9:c9:dc:92:a6:e3:b2:d1:
                    6b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:28:7C:3C:51:FC:37:2C:C1:2B:F2:A1:96:15:0C:BB:3E:EC:23:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e21d52e-79ad-3256-a390-7cde55e3e72f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.102.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:8f:35:6e:72:66:36:8a:4d:0c:5d:4a:92:ab:e7:6b:85:37:
         2f:91:ad:64:b1:b1:61:f5:6b:4e:31:b2:11:a7:f0:e3:ab:fa:
         f8:c4:f1:79:dd:1c:89:32:94:2d:69:dd:c6:70:cb:46:fe:34:
         bd:34:cc:eb:68:c4:7e:50:b9:9a:f4:56:7c:bf:86:12:50:e9:
         38:da:9b:4e:5b:12:79:69:ec:48:98:92:84:3a:e8:1c:bb:96:
         64:d1:61:3a:1f:19:0c:1d:c0:42:8b:42:c3:d1:e6:43:a9:07:
         d2:e8:91:ec:9f:16:9d:81:8d:80:7a:8f:85:6a:1a:2d:2b:15:
         f7:e1:66:9a:f8:cd:86:1e:33:4c:9c:d5:3e:70:26:1c:a2:de:
         fd:ab:16:07:87:47:2b:8c:38:74:90:36:fa:b3:7d:cc:34:a0:
         a1:9d:e8:34:00:41:d7:0c:2b:7a:54:15:66:6d:53:80:be:61:
         6b:95:5d:db:42:76:f4:4f:ce:ad:03:a5:f5:3c:4b:0c:36:1f:
         5a:ff:d4:d8:f7:35:92:8e:23:cb:c2:3c:23:eb:f5:a4:ec:4b:
         d1:5c:1e:08:7a:be:e1:12:b0:99:55:8e:48:1e:15:49:d0:81:
         52:08:ea:22:c9:b0:9e:48:6c:d5:83:b0:a0:93:ce:62:07:ef:
         05:ee:5e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:53 2025 by rpki-client