Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f54ca75-dd37-300d-b13d-8654563622a5.roa
File:                     2f54ca75-dd37-300d-b13d-8654563622a5.roa (raw, json)
Hash identifier:          B/hFwZlFbIeKWrOaP1WBKohXaw9frF8il5mXZcbMY50=
Subject key identifier:   1B:75:AC:52:DE:B9:0E:78:A3:E4:C7:85:D9:D6:43:9E:1C:76:2C:2A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AF5215DC8A8D948535D2EC480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f54ca75-dd37-300d-b13d-8654563622a5.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     20940
IP address blocks:        104.90.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:5d:c8:a8:d9:48:53:5d:2e:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=aeb1dce4-d5f1-4b88-8a4b-50a8b1b09ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d0:30:1d:47:c2:47:8b:fe:24:a0:05:11:ba:
                    51:ba:d2:29:5a:62:10:a6:b6:46:50:61:e2:13:77:
                    b5:ac:9c:81:99:b9:64:5f:da:fd:8b:6d:d7:e4:c8:
                    18:e0:aa:29:f0:c5:78:1b:b5:df:5c:18:5b:a9:fe:
                    d2:04:9e:28:32:82:20:b7:f0:a9:d7:07:7b:cb:df:
                    54:cf:bc:41:28:36:f1:fb:e3:ba:31:aa:04:cf:3d:
                    99:43:e7:d4:59:6b:f2:c0:c8:b3:ea:01:5e:6d:b8:
                    92:a8:38:57:1a:3f:64:2d:23:75:84:ab:e7:c2:1e:
                    8d:12:d3:bf:a1:76:b2:c2:31:f8:d7:61:15:62:88:
                    ed:f2:f1:57:13:9b:2e:bc:ac:db:cc:45:a2:b4:f3:
                    53:bc:88:19:d9:8a:d4:77:b2:68:80:5b:08:ac:a8:
                    05:0c:b7:69:9a:81:41:25:37:bb:ac:85:8b:9e:10:
                    c4:d1:09:9a:2c:d2:f0:33:6d:93:c5:15:2c:7e:39:
                    44:5d:94:42:78:ba:af:6c:75:df:37:d8:b1:a7:89:
                    c6:36:5f:63:ca:cd:45:b6:04:02:88:2d:16:b2:6b:
                    c2:22:50:95:57:92:b2:85:0a:a4:5d:2e:44:ed:84:
                    23:92:50:48:77:77:87:46:4d:94:90:db:c9:9b:15:
                    20:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:75:AC:52:DE:B9:0E:78:A3:E4:C7:85:D9:D6:43:9E:1C:76:2C:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f54ca75-dd37-300d-b13d-8654563622a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.90.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:53:65:75:f0:f1:e4:eb:c9:e7:de:d6:57:a8:3b:84:95:a1:
         3b:38:b0:59:16:b2:9b:83:45:f8:23:e2:9d:68:8c:95:83:27:
         87:af:7c:3b:82:5d:71:64:e6:10:1f:00:4c:2d:bc:05:70:4a:
         da:f7:78:eb:07:94:9b:f0:47:4f:06:4a:30:c1:65:16:69:65:
         8a:45:05:72:b3:51:7f:25:ff:a0:00:a7:7c:db:79:62:de:e6:
         4d:73:68:87:b5:7e:66:09:fb:fc:41:03:4b:a3:c7:64:40:c8:
         66:9b:ed:de:c8:7e:9b:50:6f:b7:a2:17:df:4e:a6:98:9e:52:
         d5:af:22:5e:6d:62:71:56:e4:3e:7d:96:73:b0:8d:6f:12:27:
         60:a7:99:a2:4d:73:e9:59:2d:85:33:9d:b7:3c:92:e3:05:b7:
         2e:f8:ee:4b:07:2b:5e:a8:bd:cf:f5:1f:40:d5:c1:ba:5f:69:
         f7:2e:2b:37:27:50:86:9c:77:9d:69:71:84:e1:69:dc:ed:00:
         41:f2:0f:82:6a:bb:a8:f8:bc:50:9f:27:65:c0:db:d4:86:77:
         39:18:0b:78:ae:92:cf:12:ec:f6:60:f2:83:49:df:74:1a:06:
         c0:20:0d:68:99:96:bc:e4:44:ac:d5:dd:4d:40:1f:54:b1:34:
         e5:c7:f7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 05:22:42 2025 by rpki-client