Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2397e60b-0e89-3d4a-9efe-fcc3aed9eea6.roa
File:                     2397e60b-0e89-3d4a-9efe-fcc3aed9eea6.roa (raw, json)
Hash identifier:          OlGfmfYBQ0w13cUeEM0Ozn2A/g5Far+W2HOF7/4hGLY=
Subject key identifier:   F1:A1:00:5A:67:5D:7B:9E:6B:49:52:C1:FD:CF:D4:3D:6C:0F:33:D8
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7E7B8EBECDF0CC5CDE04DF32
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2397e60b-0e89-3d4a-9efe-fcc3aed9eea6.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     41264
IP address blocks:        104.134.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:8e:be:cd:f0:cc:5c:de:04:df:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=e5ccad33-7762-4632-89fb-1529cf957e84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7a:0f:e2:49:df:6d:0f:10:2a:5c:2d:32:21:
                    96:9b:5a:1b:49:2e:7d:a3:f7:34:f1:99:3e:00:3c:
                    63:1e:5b:4a:39:13:61:1a:33:65:35:fe:b4:71:d0:
                    63:9e:33:a8:3b:2c:cf:35:81:86:2c:dc:91:f2:61:
                    9e:26:01:0c:9c:fb:4c:6d:00:78:7b:cf:58:5e:f4:
                    b8:37:33:a1:08:d9:a8:35:ea:4d:33:7c:72:b9:be:
                    cb:95:3e:28:c6:ab:90:41:72:62:11:bf:14:9a:bf:
                    9a:e5:ff:e6:31:78:58:8b:1b:e7:cc:8c:87:0a:c5:
                    47:bd:e8:c7:22:1f:2e:27:53:f6:37:de:5b:3e:73:
                    29:b3:6f:20:c0:b4:dc:f8:35:a5:63:1e:b2:e0:18:
                    de:b9:14:4e:89:c0:2c:83:8d:7e:2f:9a:36:03:87:
                    e1:6a:50:77:2c:84:ce:94:83:6b:2c:dd:a7:de:e9:
                    d2:e3:40:57:e3:b2:25:7f:8f:8d:87:61:54:9d:d9:
                    bb:b0:27:a3:e0:b6:4c:a8:65:7f:bc:58:d2:66:5f:
                    ae:df:63:f9:55:25:5d:94:e6:8d:68:55:85:c4:ec:
                    8d:ea:37:13:f1:86:72:1c:3a:65:9e:10:90:42:ce:
                    16:8e:87:41:54:1e:f0:31:16:ec:07:28:91:a6:84:
                    72:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A1:00:5A:67:5D:7B:9E:6B:49:52:C1:FD:CF:D4:3D:6C:0F:33:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2397e60b-0e89-3d4a-9efe-fcc3aed9eea6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:61:26:18:37:34:32:5b:c6:77:d1:09:36:76:08:ff:c0:42:
         6b:a9:2b:cc:09:d4:45:45:6e:ee:c1:15:f0:73:42:f6:78:df:
         61:19:de:eb:a8:ec:68:e1:eb:13:05:86:aa:a5:9e:6a:35:84:
         e7:47:03:52:97:b2:20:85:68:09:b4:9b:f4:8b:ff:72:00:e0:
         51:80:cb:f1:af:d3:15:20:dc:59:f0:bb:78:2f:1c:4c:18:2c:
         5f:8a:8d:19:d7:bc:58:db:91:b0:39:aa:cd:7f:f5:82:17:0b:
         b0:37:32:2e:48:71:c6:59:27:f2:ad:5a:86:12:c2:fc:73:a9:
         c5:83:96:8c:29:35:68:e8:ec:3b:3f:c3:5e:ea:1f:5a:5f:c4:
         74:7e:c3:50:94:21:1f:93:2f:0b:43:d7:31:93:3d:5f:1f:37:
         a2:ff:55:6e:1c:36:24:cf:f4:da:28:c1:50:1e:b5:19:a6:1d:
         7d:9f:4f:2a:d2:af:22:91:50:0c:c2:c1:08:03:dd:1d:55:19:
         12:c1:ad:7f:dc:b7:c7:52:04:31:31:f8:93:44:60:1a:36:2f:
         2d:fe:de:ed:52:00:0f:c3:c3:a3:ba:9b:08:47:ec:84:ad:fa:
         79:f9:05:9f:91:7d:3e:4e:73:12:12:5d:23:2d:03:40:ad:de:
         e8:e9:cf:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:29:30 2025 by rpki-client