Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b450795-c4f1-35e1-91b3-a1ee5de2e375.roa
File:                     8b450795-c4f1-35e1-91b3-a1ee5de2e375.roa (raw, json)
Hash identifier:          FzS63QAWT4gAq+A/adYj66crjX8B8DlhKm/5ovxFQyw=
Subject key identifier:   C9:5D:81:41:E8:51:4B:65:2B:8C:27:76:7F:21:11:41:44:FF:44:A0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584925B3B16E044A170C83110F10
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b450795-c4f1-35e1-91b3-a1ee5de2e375.roa
Signing time:             Tue 11 Mar 2025 01:00:40 +0000
ROA not before:           Tue 11 Mar 2025 01:00:40 +0000
ROA not after:            Mon 09 Jun 2025 01:00:40 +0000
asID:                     16625
IP address blocks:        104.103.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:25:b3:b1:6e:04:4a:17:0c:83:11:0f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 11 01:00:40 2025 GMT
            Not After : Jun  9 01:00:40 2025 GMT
        Subject: CN=3f8e020f-be11-450f-996c-26116701e719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:51:25:29:6d:bf:1e:15:a4:ed:1c:8f:7a:5e:
                    21:1f:c9:f2:aa:99:0d:65:35:ff:f2:d1:89:85:2b:
                    e6:e6:02:ad:1c:df:31:1b:e4:fe:b9:cc:3c:f9:09:
                    e9:83:98:44:51:a1:2f:6c:2b:42:65:14:fa:0d:68:
                    75:58:59:b7:4a:70:87:c3:ee:0e:c2:ff:97:a6:ff:
                    26:70:eb:45:25:ae:d1:02:53:d5:9a:1c:94:65:d7:
                    09:86:44:59:22:30:c1:46:5f:0e:cb:19:09:52:00:
                    5c:7a:ba:8e:88:87:17:ea:ba:e3:06:d5:c9:9f:34:
                    a2:27:9e:a6:45:7f:69:bd:80:b1:d0:81:f2:47:03:
                    76:ad:f8:17:38:b4:32:89:6b:d8:c1:aa:f1:fd:bc:
                    f9:76:80:e0:d8:6a:ca:a6:56:e6:41:3b:bc:88:e3:
                    ff:a6:e8:1d:a2:d6:39:ff:9c:72:91:9e:b1:ca:32:
                    a6:88:13:8b:99:4f:83:cc:9a:1f:12:3b:40:84:ab:
                    b6:01:dd:78:72:2c:bf:05:6b:86:b0:2d:ea:2f:bc:
                    d9:67:aa:02:d1:9b:59:b8:ac:ef:b0:a8:9e:cb:aa:
                    a2:b5:44:b0:4c:fb:4a:86:1c:62:74:c4:fd:2d:63:
                    93:05:c7:e5:c9:18:5d:20:fd:36:4f:e9:7e:d8:ef:
                    2c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:5D:81:41:E8:51:4B:65:2B:8C:27:76:7F:21:11:41:44:FF:44:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b450795-c4f1-35e1-91b3-a1ee5de2e375.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.103.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:d7:a6:87:0d:9c:99:35:0d:c2:0e:cd:1c:16:ec:51:ef:2d:
         52:28:d7:8d:6f:26:b6:8e:3b:ba:2c:d1:28:1d:0a:a1:e6:1e:
         f3:04:85:fd:10:22:f9:9b:ea:79:d8:f5:dd:dd:31:12:47:9d:
         8c:38:c7:2e:14:25:ab:18:91:8f:43:20:20:29:cb:43:22:55:
         6a:fc:15:87:9d:a2:7e:7e:68:05:97:f8:30:98:57:03:61:e3:
         68:4a:08:d7:65:23:c5:02:4b:9d:87:a6:0c:7d:cb:5a:3f:d7:
         58:f4:03:60:46:25:da:e9:6b:72:e4:99:da:33:54:f0:3c:73:
         73:44:5d:f4:4f:70:15:4f:4a:12:cf:6e:f1:59:a8:a9:c4:72:
         99:74:bb:f5:4f:53:e4:06:6e:8a:36:bf:e9:29:fb:d8:34:5b:
         42:e9:be:28:94:e6:01:32:17:b6:84:9b:ce:0c:53:d9:84:7e:
         2e:56:00:d7:12:cb:80:60:95:0d:75:98:4e:8c:2b:0a:dd:2b:
         83:ec:35:0f:4c:3d:25:c6:fc:cc:14:48:9f:a6:0f:75:2b:c4:
         ca:ab:d3:22:08:3c:e7:0f:49:f2:54:26:d4:78:87:67:56:9c:
         8c:e0:05:37:36:3c:11:01:07:67:ed:86:98:28:93:aa:a8:17:
         e1:cc:e9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 07:46:50 2025 by rpki-client