Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/17449584-df2a-388c-bbab-cf97b03f4609.roa
File:                     17449584-df2a-388c-bbab-cf97b03f4609.roa (raw, json)
Hash identifier:          ZrfVF5fHKTEuwnurVu7DaxqGuTjQZDHfcPeD5lHHvTo=
Subject key identifier:   48:67:2F:16:04:38:96:C9:C1:67:4D:25:5C:ED:53:31:0B:36:8C:50
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350BF95BDF306D79520DC40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/17449584-df2a-388c-bbab-cf97b03f4609.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        104.134.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:bf:95:bd:f3:06:d7:95:20:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=87502b34-c7be-42ca-b306-8ce06181e16e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ff:75:c3:89:37:27:c5:dd:2e:df:4e:f0:98:
                    c2:5b:84:10:22:9d:76:dd:6d:9d:b7:82:0a:8c:b5:
                    56:2a:43:9f:79:4b:ce:e1:25:8d:0f:90:e4:6d:91:
                    56:81:a7:06:66:a9:12:ec:40:ce:60:da:db:11:a0:
                    58:22:5c:1d:c1:34:e4:59:5c:1c:de:37:fd:2b:94:
                    29:85:8e:f1:e4:a9:3d:61:ff:8b:0c:4f:ea:19:d5:
                    4a:4a:2f:e5:cb:32:8a:66:15:5d:2d:b1:02:fa:ba:
                    87:5d:78:08:f1:d5:a7:f3:22:2e:aa:9e:85:bc:70:
                    81:fe:1d:f3:08:70:dc:03:04:ee:71:72:69:66:ef:
                    e9:cb:e5:25:b1:60:56:1e:03:65:9f:32:24:57:3b:
                    a2:46:0c:cb:a0:3b:aa:66:02:d8:a6:4c:9c:8a:a8:
                    e3:65:86:ad:d7:33:33:4f:7d:d9:3e:ea:06:dd:59:
                    05:b7:72:da:6a:67:69:5e:54:23:a9:e2:b9:0b:27:
                    3e:eb:11:76:d0:c1:47:48:5d:b6:91:db:30:ab:cf:
                    f3:cd:21:9d:2d:99:3b:13:a8:09:8b:a9:d8:a5:9c:
                    e2:99:93:a2:ba:1f:96:a8:34:9d:ae:5b:a0:9c:c0:
                    9c:25:be:8b:d3:f9:3c:7d:84:7c:75:87:3b:5b:c2:
                    32:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:67:2F:16:04:38:96:C9:C1:67:4D:25:5C:ED:53:31:0B:36:8C:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/17449584-df2a-388c-bbab-cf97b03f4609.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:cc:74:86:58:01:be:fc:b7:f5:6e:df:4a:76:dc:1c:96:7a:
         5e:e4:7e:1d:ab:c1:e3:95:23:6d:5a:bf:ab:4b:f5:2b:50:b0:
         74:49:e9:e7:86:fd:c0:fa:68:e2:1c:5d:96:9e:47:17:8a:8e:
         79:99:dd:2b:e5:60:c5:99:f0:3a:2a:ed:fd:f0:58:fb:b1:49:
         f0:97:af:bc:23:c0:b3:1a:10:48:9c:f1:b6:02:9c:98:a0:cc:
         b1:92:d3:cc:6d:de:30:a1:2c:dd:f8:d7:1f:d0:e6:3c:ca:75:
         09:c9:c6:eb:c1:60:94:f0:d2:3d:4c:79:17:68:4e:63:8c:4f:
         e5:ef:64:12:97:3f:0c:7f:b4:a2:64:0d:ce:02:a4:6f:1a:40:
         43:d8:76:9d:81:d1:46:f2:9e:a8:76:e1:58:6c:7f:a3:4c:a1:
         82:e5:dd:e2:25:ac:6b:df:32:88:35:0b:7e:53:28:aa:9b:1b:
         6c:fd:af:0e:03:b6:f4:65:a3:3f:1b:89:7f:ee:19:d5:dd:4f:
         cd:bf:47:78:74:db:51:8c:11:a4:5a:95:e8:4a:13:bb:9c:d3:
         d0:9d:83:40:c6:ee:9e:3d:bf:e7:65:5a:c5:9e:43:a0:ec:1e:
         de:09:1a:ed:39:fe:bc:43:b0:cf:36:05:96:74:38:09:20:36:
         fd:57:f8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:05:11 2025 by rpki-client