Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/91ba5134-5774-3bd4-b43a-cf708d717e51.roa
File:                     91ba5134-5774-3bd4-b43a-cf708d717e51.roa (raw, json)
Hash identifier:          YsYt9S9Ob8gzHbeN89fkO7x2/0RYXM9Bd2yj3AAc1i0=
Subject key identifier:   59:85:0A:4E:8E:9C:7D:79:88:58:8B:78:44:03:B7:53:6C:55:66:6E
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7E7B7A5AF2EAF89D4D8A6800
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/91ba5134-5774-3bd4-b43a-cf708d717e51.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        104.134.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:7a:5a:f2:ea:f8:9d:4d:8a:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=6ad382c2-8452-4e52-9c3e-fb2eeac71ca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9d:7d:b9:17:04:e2:37:3e:90:7d:e6:26:1d:
                    1b:0c:63:76:dc:49:7a:27:45:91:21:be:de:e4:42:
                    4a:40:7a:9d:15:22:f2:ec:a6:cc:24:09:0b:c7:42:
                    1f:0e:4a:65:48:29:9a:01:8e:ce:c4:f5:a0:f8:c0:
                    cf:a8:e3:76:d0:81:d0:27:3e:4a:ca:fe:48:a6:fe:
                    08:97:8e:57:e8:5a:8f:7d:ab:a1:ce:a2:46:87:c3:
                    d0:03:62:15:ee:00:22:fb:bd:6e:c6:a0:51:dc:a1:
                    2b:ed:26:59:36:a9:83:e5:f0:9e:b6:dc:99:1a:df:
                    fa:a4:e0:10:64:6e:e7:ea:dc:64:91:f9:83:61:b5:
                    b7:42:0a:f4:b7:32:f4:af:a7:af:50:c4:d2:f2:fa:
                    11:51:71:94:fd:58:9c:a7:ac:d6:ac:0b:1b:87:49:
                    5e:3a:87:f6:0b:07:b5:7e:7c:7c:f7:3c:bf:68:30:
                    57:61:46:25:f5:5c:54:72:23:8c:77:a7:89:b5:ed:
                    63:53:d0:b0:15:db:63:70:9c:3b:1c:78:ff:9c:2b:
                    fa:64:f9:a7:b1:bd:12:f7:49:00:8d:1b:cc:04:1d:
                    fd:bf:35:99:7c:ed:b4:bd:0e:37:48:c6:75:0d:61:
                    7f:dc:c8:1d:87:1c:2f:cb:ab:5c:b6:8f:3b:09:1d:
                    e7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:85:0A:4E:8E:9C:7D:79:88:58:8B:78:44:03:B7:53:6C:55:66:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/91ba5134-5774-3bd4-b43a-cf708d717e51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:3c:48:68:b7:53:b2:2c:00:2c:a9:0f:15:5e:60:7e:4b:64:
         df:13:49:27:55:eb:0b:e3:b7:71:ae:38:1d:53:60:70:65:a0:
         7a:0c:2f:95:76:7a:ed:bf:8f:8e:5a:b9:7b:13:a0:83:55:86:
         21:fe:dc:f4:eb:fb:ad:97:4c:8f:36:6f:29:a1:50:59:c3:64:
         43:74:b6:8f:d3:bd:6e:2e:dc:ec:84:4a:9a:75:33:48:d7:eb:
         cb:b5:00:aa:b4:f2:26:33:b8:0d:14:50:1c:88:29:bb:98:8b:
         4e:5c:ae:80:22:12:84:64:45:29:3e:be:58:96:c4:a0:66:56:
         cd:2f:a0:ab:db:a2:06:8e:30:ad:29:05:36:1a:e1:c2:7b:42:
         3c:4c:00:fe:63:13:c2:96:87:a3:a4:92:89:c4:cb:09:3c:93:
         47:02:23:5b:a3:84:38:9f:40:37:2a:e7:dc:43:07:b7:e8:e4:
         56:a3:8a:52:1f:c1:d0:b9:23:5a:b2:67:9a:3b:46:40:a7:58:
         96:65:fe:97:22:82:ee:36:dd:1e:e2:83:c0:60:bb:94:56:88:
         f4:c1:62:93:0b:fc:ee:88:94:4f:39:20:f5:67:67:54:f6:e6:
         ef:9b:e5:75:f5:7e:da:2f:e3:c3:4e:eb:b7:4c:ec:b8:d2:13:
         96:86:53:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:52:13 2025 by rpki-client