Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/923427c8-783a-31c6-ade4-2bbbb6759d6a.roa
File:                     923427c8-783a-31c6-ade4-2bbbb6759d6a.roa (raw, json)
Hash identifier:          Z4DzYOtxwqC5WsnqGp1noloHo71XSJI8f6vXNqP7cro=
Subject key identifier:   01:E1:67:B2:86:D4:6C:5A:EE:4D:A8:BF:DC:3F:1A:7C:87:96:E1:70
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7E7B680821F75D43995760C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/923427c8-783a-31c6-ade4-2bbbb6759d6a.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        104.134.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:68:08:21:f7:5d:43:99:57:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=1b28939c-f493-473e-a538-de384b0b3679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9f:f6:0a:95:dc:62:ff:f3:6f:e3:f1:ad:4f:
                    0a:1d:b2:87:fe:f0:64:76:45:9f:01:42:bd:9d:b7:
                    89:60:25:0a:8c:07:09:93:16:8b:3a:ba:f1:8e:24:
                    64:59:2a:a4:27:92:d0:e7:ed:dd:69:ad:c2:9f:57:
                    8d:91:28:37:c8:ae:cd:39:26:71:fe:a5:e1:70:b1:
                    c5:a8:32:8a:07:2a:16:28:d5:49:3e:28:5e:9c:ca:
                    e8:c0:44:4b:37:fc:95:df:fa:25:94:21:74:d2:71:
                    e9:b6:f6:a2:27:0a:4b:e2:aa:f3:8a:23:53:bd:bc:
                    ff:aa:1d:86:c3:3d:18:d4:99:cf:3f:a8:f0:0d:2f:
                    2a:82:dc:32:eb:cf:04:25:a7:f2:a0:e6:a3:b8:f1:
                    8b:03:51:21:33:d2:4a:10:24:df:80:14:e7:0a:83:
                    bc:99:96:7e:04:69:7d:30:80:66:e4:ea:5d:22:6e:
                    f7:06:46:ab:7e:55:b2:5a:ee:01:d6:35:69:fa:4a:
                    75:96:c7:a5:af:64:56:32:4e:ef:2d:79:64:6e:ac:
                    5b:9d:5b:07:04:ff:c5:8a:8b:e6:83:ed:33:be:51:
                    30:0f:3c:41:16:cc:c7:3d:6d:52:96:1f:01:40:72:
                    c3:7d:70:69:0a:b1:fb:ef:3c:c9:7e:1b:56:ac:00:
                    3c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E1:67:B2:86:D4:6C:5A:EE:4D:A8:BF:DC:3F:1A:7C:87:96:E1:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/923427c8-783a-31c6-ade4-2bbbb6759d6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:ed:38:af:ec:e9:69:01:86:2b:9b:e3:29:ae:18:ea:45:1a:
         a7:e4:ec:d5:42:9f:66:e6:80:91:d9:e2:5e:e6:b0:fe:0c:87:
         d7:7e:53:fc:71:71:1d:35:11:c6:b1:67:76:cc:48:1f:af:60:
         45:2a:c1:89:c5:b2:00:92:45:5c:45:6a:80:ae:e0:51:d5:29:
         0b:43:aa:f8:e4:99:53:30:3b:e8:bd:b3:58:09:83:e3:49:dd:
         88:81:3f:33:c3:53:4b:92:9f:59:f5:83:cb:d0:70:43:74:d9:
         6f:ff:98:5a:a0:91:67:8e:0e:f2:5c:f5:68:e7:f8:09:20:cd:
         9d:69:5b:71:95:73:46:d1:c5:85:24:ae:04:a0:08:9b:fe:93:
         de:46:16:7c:05:e4:a8:26:1f:ff:a5:61:25:ec:5b:5b:3f:d8:
         67:6b:3f:5e:06:8f:82:f0:27:c1:42:09:44:7c:ea:69:d3:10:
         00:d1:c3:5c:9b:c0:ae:15:94:18:b7:f5:29:b2:6a:6c:b6:43:
         70:38:39:7a:ec:a2:04:08:39:1d:c3:aa:26:bd:e9:39:d3:fa:
         c0:ca:fd:27:3c:93:11:01:ea:a4:1e:3d:53:9e:67:8d:fa:81:
         09:12:e1:0a:88:a0:60:49:b5:ae:59:8b:bd:87:2e:38:ac:b3:
         91:10:ed:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:22:57 2025 by rpki-client