Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/66b275d0-8075-3aac-897b-e4e1aa843cae.roa
File:                     66b275d0-8075-3aac-897b-e4e1aa843cae.roa (raw, json)
Hash identifier:          ayylph0LU38SyUv4H3POCnU7R4diginP9+igMxWDOZc=
Subject key identifier:   73:86:22:E0:88:CD:82:21:51:D8:EF:11:8E:35:F8:C3:21:B3:56:DA
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350C6B78C003E85DE499380
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/66b275d0-8075-3aac-897b-e4e1aa843cae.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     395973
IP address blocks:        104.134.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:c6:b7:8c:00:3e:85:de:49:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=2d0bbb12-cd72-4422-8de9-ed3cf0263204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:eb:05:18:89:fa:67:fe:17:f6:31:9d:07:c0:
                    06:d3:ab:40:93:60:7d:22:1e:4e:a2:e5:d7:62:03:
                    98:28:36:e3:1b:10:ea:b6:44:83:82:1e:35:d8:2a:
                    3d:35:2a:8a:b4:7d:1b:59:11:4a:f5:af:8f:07:63:
                    eb:09:f5:56:6a:63:84:ca:9c:5f:66:1f:f2:ff:b9:
                    c0:de:79:a7:3b:3d:c2:c0:d6:dc:b3:c8:e1:1f:2b:
                    f9:aa:ce:e0:fb:bb:4e:7b:e4:54:fd:2a:d3:fa:a5:
                    c5:91:2e:8b:70:5d:15:3f:10:9e:9a:be:4e:15:d6:
                    28:3c:9c:f8:7d:20:f3:c2:31:27:db:ab:ca:af:a6:
                    5f:7f:8c:97:b0:ce:41:0b:ed:66:6a:99:8f:32:19:
                    2c:22:ad:20:24:43:06:2e:a0:2d:56:2f:fa:55:39:
                    ad:c6:1c:6f:58:06:43:37:ef:8b:ff:a8:a9:8d:a5:
                    dd:96:49:61:0d:2e:2f:cb:15:5c:b4:9c:36:b2:cc:
                    89:1e:aa:2d:49:49:d0:b2:f7:c0:92:4f:65:e8:64:
                    1b:95:0a:0c:36:4e:a5:6c:ca:6c:23:f3:a5:e9:30:
                    e3:b0:a3:4a:db:a7:98:a6:e5:81:84:51:ca:53:cb:
                    ba:33:17:74:64:64:0b:47:ff:87:cd:d4:00:37:95:
                    5d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:86:22:E0:88:CD:82:21:51:D8:EF:11:8E:35:F8:C3:21:B3:56:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/66b275d0-8075-3aac-897b-e4e1aa843cae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:89:1b:71:1d:4f:59:6a:d0:d3:9d:c8:0a:d3:b2:6e:58:54:
         3a:b1:cc:45:9c:8a:63:82:fd:d4:18:32:cf:5f:d0:77:fc:ab:
         59:e3:d5:b2:9b:82:03:75:3f:05:13:4f:c9:91:88:89:fa:46:
         91:97:01:59:a4:e7:02:7d:83:00:21:94:f8:44:26:62:09:15:
         37:bb:b2:95:27:6a:33:a5:e5:ce:19:c2:b0:63:21:7b:8e:90:
         2b:91:c8:cd:99:c3:13:aa:0d:c0:35:a2:a5:cd:35:c4:56:cb:
         cf:b8:91:a1:22:98:87:8e:df:07:2d:60:58:98:15:63:7c:3e:
         ba:e7:81:33:3f:45:a7:37:14:0b:e8:9b:e4:92:a0:f4:75:d1:
         1b:c9:35:20:2b:a5:d0:23:7d:b7:82:25:8f:90:95:ee:1d:d9:
         73:7e:64:c6:3c:38:9a:0b:49:b4:51:5e:32:87:ae:fd:cf:96:
         e3:b6:3d:36:4f:15:32:8d:35:7e:c2:cd:8d:d8:f8:fb:fb:66:
         01:54:d7:0a:7c:1d:c0:fe:61:d2:52:a6:77:ea:bd:00:32:d3:
         62:b1:85:31:82:6b:3e:fe:f8:86:23:2b:9a:2e:13:69:f7:ce:
         1b:51:02:0b:57:08:ea:cc:e7:99:a1:a0:63:62:95:f7:4f:7b:
         73:52:f0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:16:20 2025 by rpki-client