Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/377c67cf-0a40-3a13-a0cd-4c33512de5cb.roa
File:                     377c67cf-0a40-3a13-a0cd-4c33512de5cb.roa (raw, json)
Hash identifier:          EHI3SZfooAVUF7XFzO2apogQx1vumOWEt56UfCTNtdE=
Subject key identifier:   22:A2:01:2F:42:56:32:C9:67:49:D5:71:21:DD:AB:26:41:90:BF:0A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7E7B9099BB3B874AA6382300
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/377c67cf-0a40-3a13-a0cd-4c33512de5cb.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        104.134.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:90:99:bb:3b:87:4a:a6:38:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=e766fc7f-f7d9-4bfb-b1c0-05864c687418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:03:5a:ec:1f:61:66:c8:51:f3:b2:e4:7b:6f:
                    f4:8e:9f:da:da:92:59:4d:48:ff:dc:5d:57:3c:23:
                    70:84:54:90:c1:d0:d5:1d:25:a3:00:7d:35:d9:90:
                    48:66:bf:00:e6:12:41:e3:8e:60:1c:97:41:fc:96:
                    09:48:89:71:9b:d4:13:59:86:12:3b:eb:cc:b0:9e:
                    bc:6d:80:5c:32:7f:b7:25:50:9a:7e:98:1e:e6:6c:
                    88:dc:98:cc:47:07:6c:2d:b5:c7:e5:04:03:49:9e:
                    18:58:a1:32:16:cb:7e:25:b5:10:af:10:a4:76:ff:
                    85:86:90:b1:19:a1:26:fb:61:81:8f:82:13:2d:19:
                    71:16:2e:4e:0d:a4:8a:e2:b0:c0:2d:0b:5a:7c:ed:
                    27:cf:9c:76:5a:89:38:7b:d1:ec:ed:58:99:73:d7:
                    18:5e:7b:9a:d7:fb:24:f4:90:a3:89:17:af:c5:3f:
                    1a:a4:17:e8:e1:aa:b7:d0:55:be:16:10:8c:cf:94:
                    cb:f5:ad:fa:35:8e:de:5b:2f:d7:b2:f8:a3:12:95:
                    26:45:74:41:85:65:5b:47:e3:90:37:bb:4a:a2:2c:
                    75:c0:f1:b4:ca:3a:dc:d6:4b:5f:a8:41:71:3f:1f:
                    14:9e:89:27:2a:97:4b:a0:9b:04:cc:bf:d6:ff:b9:
                    50:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A2:01:2F:42:56:32:C9:67:49:D5:71:21:DD:AB:26:41:90:BF:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/377c67cf-0a40-3a13-a0cd-4c33512de5cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:e4:9c:3c:dd:4d:13:de:88:e6:d8:5b:e5:20:cc:74:b7:d7:
         6a:a7:f7:88:a5:f5:dd:44:0c:16:d8:d9:53:56:bc:f5:38:84:
         2f:04:5e:8e:cf:85:a8:a9:51:f6:8f:b0:d5:f8:52:d3:b8:d9:
         e6:12:f1:d8:41:93:99:74:1f:c2:7c:59:49:02:f9:19:dc:86:
         2d:7c:2b:8a:1d:ab:2c:ce:0e:2c:a5:75:0f:24:aa:19:2b:ed:
         a8:5e:eb:7b:1a:cc:5e:76:e3:c6:72:73:e5:c6:58:59:e2:7d:
         ae:5d:4f:0a:50:15:7e:70:51:73:f2:de:59:d0:1e:07:7f:6b:
         d0:90:4e:31:ad:c0:c3:f0:e8:a9:82:67:be:bb:70:f2:d9:64:
         57:dd:81:96:28:53:d4:6a:f4:eb:dc:9b:d8:c0:92:2a:83:14:
         7c:4e:e3:c6:ed:5a:b1:82:56:d3:24:26:95:0d:85:97:3d:78:
         c4:1f:fa:bb:cc:3e:f6:75:df:b5:57:4d:73:69:4f:8a:0b:3a:
         7b:3e:ea:79:0b:1c:26:c6:0c:99:3e:34:f8:c3:3f:67:e6:0a:
         3b:84:25:16:10:43:da:36:ac:6b:0c:2f:11:91:00:d9:d5:01:
         8f:91:da:41:5f:56:39:1b:1e:1d:ba:87:3c:41:0f:cb:52:61:
         e4:26:e0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:25:55 2025 by rpki-client