Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8651a2c-f04e-3ef9-847d-7910a3cc1659.roa
File:                     c8651a2c-f04e-3ef9-847d-7910a3cc1659.roa (raw, json)
Hash identifier:          WPSFqJBck0RUygct9OcHfKVLofRx5H+1vHGQYGPE+EA=
Subject key identifier:   C3:AD:0F:20:97:AE:6E:F1:ED:C5:8E:16:7C:F4:1E:30:A9:1F:FD:52
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A1730118FE76F0FEF7E26D080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8651a2c-f04e-3ef9-847d-7910a3cc1659.roa
Signing time:             Thu 05 Jun 2025 13:01:03 +0000
ROA not before:           Thu 05 Jun 2025 13:01:03 +0000
ROA not after:            Wed 03 Sep 2025 13:01:03 +0000
asID:                     4761
IP address blocks:        104.106.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:30:11:8f:e7:6f:0f:ef:7e:26:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun  5 13:01:03 2025 GMT
            Not After : Sep  3 13:01:03 2025 GMT
        Subject: CN=1505f8ec-07a7-47e3-9d04-9f385663ba53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ae:07:37:a2:32:6c:02:3e:04:f4:72:93:e3:
                    5e:82:46:98:ac:cb:35:15:45:9f:0a:5d:9d:ad:7e:
                    39:4f:aa:b3:49:46:76:25:09:1e:b0:0a:04:22:6f:
                    43:f4:af:47:9e:d7:75:5b:da:4c:39:aa:ca:2b:07:
                    62:be:a1:3a:87:83:a8:2d:84:5e:16:06:63:f2:4d:
                    e1:58:df:35:46:63:d4:b2:ce:df:0c:46:b7:3b:22:
                    4d:59:34:f9:a2:b2:a5:97:28:e5:48:5b:e0:de:bf:
                    fc:0e:c1:db:3a:ea:f3:1f:cc:b2:fe:5e:e9:84:0a:
                    fb:fd:a6:08:60:21:56:71:c1:10:71:e7:e2:25:71:
                    26:cf:8a:e9:47:66:91:3a:78:52:f5:6e:ce:cd:22:
                    bf:4a:e2:8f:12:5c:41:fc:92:c2:a6:4c:55:7c:81:
                    6a:24:39:2b:a4:37:65:0c:94:f5:50:63:72:76:c3:
                    05:4d:1d:fb:5d:6c:60:bf:70:bc:3a:ef:40:87:9f:
                    44:e3:9c:a5:2b:7f:50:19:f2:1d:d6:e6:bc:43:47:
                    87:20:8a:1f:ae:c4:fe:32:ac:83:67:75:e5:eb:2e:
                    a9:6e:aa:00:d5:47:81:9b:06:e7:8a:34:eb:ce:9d:
                    01:6f:0c:b6:5f:d3:7d:52:46:2d:87:f1:bc:50:6d:
                    d3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AD:0F:20:97:AE:6E:F1:ED:C5:8E:16:7C:F4:1E:30:A9:1F:FD:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8651a2c-f04e-3ef9-847d-7910a3cc1659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.106.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:aa:99:8e:fb:cc:dd:78:45:10:43:3f:44:58:1a:4b:24:68:
         23:32:7d:ee:b9:6a:c6:54:4c:5c:a7:01:46:68:96:39:2a:99:
         d5:5c:30:08:c8:8e:fc:fa:d9:35:27:af:fa:8c:be:d8:a6:7c:
         60:30:64:c9:a2:3a:4f:4b:79:8f:1a:86:d5:f3:72:11:26:3b:
         e7:8b:ec:e5:5a:4a:1b:6f:13:8e:a4:98:dd:6c:c4:48:c5:4f:
         19:a6:4c:f8:49:6d:57:ac:ca:da:1b:6c:57:62:5c:80:c9:e4:
         dd:bf:ad:2c:dc:f7:c1:6b:21:f5:37:c8:1c:c9:5e:94:44:bf:
         50:18:0e:90:70:56:1e:78:9c:38:93:1a:09:5a:98:1e:8d:b7:
         d7:09:3b:bc:40:e2:42:da:e4:16:5b:33:67:7c:98:93:3f:5c:
         e2:89:e7:5a:1f:47:f5:fa:1c:25:90:12:98:98:c6:52:29:fa:
         46:81:a5:27:ed:a0:c9:e6:c6:5a:87:5e:6c:f1:7f:06:17:d5:
         f4:11:d2:88:a5:88:bb:2e:d0:11:b7:f7:6b:8b:4a:07:ac:ed:
         81:bc:fd:bb:ac:11:8c:5e:71:c5:f8:fd:65:b6:cb:90:f2:50:
         77:d4:5f:d3:66:45:20:88:52:82:e0:42:11:da:99:21:fd:48:
         05:4a:48:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:18:34 2025 by rpki-client