Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed18252c-f27b-39b7-a18e-a21c64cd89e9.roa
File:                     ed18252c-f27b-39b7-a18e-a21c64cd89e9.roa (raw, json)
Hash identifier:          eYOVnbXqHQg3af5+iWFKZH/SEUF4gaf4wfB3mllRMik=
Subject key identifier:   5B:5A:18:9B:A2:7F:59:0C:32:D4:DB:50:7D:8A:0C:1A:0A:D7:B9:28
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A146592DFDF9962CED344F880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed18252c-f27b-39b7-a18e-a21c64cd89e9.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     16625
IP address blocks:        104.100.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:92:df:df:99:62:ce:d3:44:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=bea1121a-c92a-42c7-9df3-0b04f40cbd82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:09:d2:64:80:e5:91:58:d2:e8:cb:cc:b8:ec:
                    09:8f:52:d0:11:53:87:ab:e3:2f:f3:fd:c2:93:b3:
                    1b:ab:e0:65:3b:41:fe:80:2f:f7:ef:5b:e6:62:0b:
                    a6:74:54:6a:3f:6d:2c:12:9f:d5:ed:9f:56:b1:b5:
                    76:c9:aa:0b:70:27:b4:df:5b:18:c7:34:4a:04:0d:
                    46:cb:af:f9:e2:97:3c:d9:52:1d:04:fb:ad:2e:32:
                    ab:8b:17:2c:b8:10:50:01:ba:61:ba:3c:95:22:e4:
                    9c:79:6c:9d:33:b1:db:4c:04:64:d3:5c:2b:0e:be:
                    91:e0:74:1a:52:e6:cf:9c:97:f1:7d:ae:f1:4d:3c:
                    7b:5d:97:83:d8:e7:2c:fd:6b:c2:68:3f:6b:70:3c:
                    77:da:5f:b1:0e:ed:f0:37:aa:e1:3b:f9:c7:4f:ec:
                    e5:1b:b7:eb:8e:08:6e:2a:2a:92:92:f5:8e:d0:c5:
                    c4:9f:52:28:40:c9:6d:4b:2b:fe:9c:38:41:ce:0a:
                    30:bd:94:c9:05:0a:01:d1:95:af:04:81:02:06:cb:
                    60:8e:8d:22:5f:6e:e7:5e:a7:d6:e4:5d:64:8f:5d:
                    5a:b1:53:51:c4:02:ad:47:7d:46:7e:05:3e:3d:39:
                    59:1e:11:b2:13:c2:98:bc:4a:9d:74:a9:14:6b:9d:
                    68:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5A:18:9B:A2:7F:59:0C:32:D4:DB:50:7D:8A:0C:1A:0A:D7:B9:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed18252c-f27b-39b7-a18e-a21c64cd89e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.100.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:a4:69:72:75:6a:26:c3:c5:8a:48:2a:b7:ae:17:da:6c:19:
         23:1d:f1:91:65:32:20:97:ea:0e:b3:3d:8a:80:f1:48:52:8e:
         23:11:44:12:18:7b:13:63:77:b1:9b:51:eb:74:0f:20:2f:11:
         6e:bf:86:e2:37:05:ff:36:94:c8:af:d8:f5:c1:ae:1f:c5:43:
         dd:a0:9c:8d:87:b1:eb:7b:38:96:61:b4:b7:24:29:87:14:ca:
         c0:0d:4e:0f:d4:62:27:c9:02:28:d4:73:5e:07:82:ad:c6:67:
         af:a6:08:58:73:93:81:96:f9:04:17:f4:3f:be:a1:91:87:d4:
         c8:87:1a:56:e5:43:a3:77:be:f5:16:c0:95:2d:d1:46:35:15:
         ca:07:f5:e9:3c:07:96:0f:7c:bf:6f:00:cd:fc:f0:66:0e:37:
         45:13:5a:6c:af:c6:3d:4e:c4:eb:8a:bd:5f:73:55:74:9c:a0:
         85:84:bb:7f:61:e4:41:91:cb:b9:0b:87:31:25:13:6b:e2:38:
         48:4c:e5:56:d2:af:c4:1a:20:eb:fb:41:b9:ea:38:15:0f:78:
         47:b7:cb:1d:bb:97:fa:42:af:8d:d1:f1:40:d0:c0:98:91:1e:
         73:b5:fb:50:67:af:ac:cd:e0:bc:3b:39:b1:ce:c2:2e:32:fa:
         54:4b:d2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:40:30 2025 by rpki-client