Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1c1b7769-adc6-3b8d-bccc-d6ae02a79d9c.roa
File:                     1c1b7769-adc6-3b8d-bccc-d6ae02a79d9c.roa (raw, json)
Hash identifier:          gm3AGlrg4UUd04nUiwSE/lN5KY1go+KEAwLdND2g2hs=
Subject key identifier:   4C:A9:74:6A:19:D1:14:40:F3:85:5D:B8:7B:47:FD:67:D7:E2:DA:C6
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350BFCB71FB19F052805D00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1c1b7769-adc6-3b8d-bccc-d6ae02a79d9c.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     41264
IP address blocks:        104.133.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:bf:cb:71:fb:19:f0:52:80:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=671338c1-5d50-4907-90a1-ad2c86f14cdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:aa:99:5e:c7:80:b0:3c:79:74:88:9a:29:53:
                    50:8d:cf:7a:e0:e5:0a:22:46:00:83:7a:74:d8:82:
                    64:ce:63:1d:29:00:bc:9e:56:ba:7b:f5:13:20:8f:
                    ee:3d:62:fe:0a:8d:cb:6e:24:8e:12:ba:ae:0c:b0:
                    12:33:c0:8b:be:69:aa:0f:f9:4f:a0:aa:8e:a4:14:
                    80:b7:44:36:4b:64:01:b8:19:20:ab:81:c8:19:1f:
                    bb:da:3c:07:f1:0b:ec:4f:cd:b5:cc:95:41:79:01:
                    b3:b2:15:63:23:06:3c:32:fd:55:a1:65:c4:f8:b8:
                    a7:82:93:f9:ef:cb:81:02:77:47:8c:e6:bb:8a:67:
                    a9:5c:5d:a4:64:6e:99:62:a4:74:c3:fa:eb:d3:3e:
                    05:6d:57:8d:03:cd:b6:42:74:7b:8d:ed:43:62:0b:
                    fb:c7:91:8c:55:90:8f:02:1f:64:93:71:1b:13:df:
                    36:19:26:96:56:ce:b7:fd:a4:1e:67:8d:50:82:b0:
                    ac:b6:70:99:ce:aa:ce:54:97:61:7a:52:6e:cf:0a:
                    b2:69:4a:e2:2f:8a:ad:86:f5:bf:12:71:3b:54:1f:
                    6a:98:53:da:77:75:34:73:f7:62:76:d1:4e:48:65:
                    d3:43:6f:06:a6:cd:7e:77:5f:db:1d:0b:ed:e9:e6:
                    01:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A9:74:6A:19:D1:14:40:F3:85:5D:B8:7B:47:FD:67:D7:E2:DA:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1c1b7769-adc6-3b8d-bccc-d6ae02a79d9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:1e:e5:80:59:b0:eb:30:1c:ca:ed:3e:fc:1e:e3:0d:3c:48:
         60:ca:fa:be:b4:00:db:9b:06:eb:b8:ec:de:bf:41:b6:8e:df:
         3a:ff:6e:be:44:01:b2:e7:7d:d0:41:0b:95:d7:29:2b:50:de:
         d0:7b:88:7c:ed:42:9a:44:7c:c7:32:66:1e:0f:a2:4e:43:d6:
         2c:51:3f:04:a4:80:ef:25:a4:88:ad:f6:ee:de:eb:44:3d:60:
         72:4d:40:bc:0b:c5:35:5d:42:f1:48:8c:1d:8d:18:8d:82:f9:
         f3:aa:ce:f4:65:69:8e:1e:f1:98:3d:53:58:e2:91:27:43:76:
         8a:15:5f:48:fa:4a:12:56:10:66:69:b1:e3:1f:3f:ca:65:ec:
         07:79:2f:21:bb:55:8b:9b:df:42:56:c5:95:49:f7:fa:a0:bf:
         b1:a2:3e:16:30:e3:79:db:70:cb:17:a3:b8:ec:bd:43:f9:84:
         e0:fd:9a:e7:0f:cd:b3:3f:fe:e0:e0:b7:5e:5e:cb:3b:c1:57:
         cc:02:5f:db:e1:74:ee:56:87:0c:11:85:22:7d:eb:95:3d:5b:
         2f:2d:4e:b4:f0:ed:2b:29:17:1a:96:e2:0e:64:95:20:ff:f3:
         55:f9:cc:b0:2d:f5:49:4e:da:cc:85:35:e2:64:f5:5a:f4:2e:
         15:a9:a2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:21:21 2025 by rpki-client