Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba1f3a5b-949d-32e0-9caa-442464bb6521.roa
File:                     ba1f3a5b-949d-32e0-9caa-442464bb6521.roa (raw, json)
Hash identifier:          IE94L3MRiiy+5nCJW0AGbXpk3KhJuwIJYF7IbW8Lymc=
Subject key identifier:   82:E4:53:44:22:CD:53:D0:88:36:DD:43:FF:F2:23:B6:BB:1A:AA:60
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350B02C581E53FF71EE7F40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba1f3a5b-949d-32e0-9caa-442464bb6521.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     41264
IP address blocks:        104.133.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:b0:2c:58:1e:53:ff:71:ee:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=f0334947-3dad-4e00-a796-cc40165ca5d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5c:5a:57:ba:70:e5:6f:4c:5c:06:21:0a:fb:
                    8d:b7:23:f3:c1:40:db:4d:d1:5f:9e:17:87:b8:d9:
                    3c:02:1e:f8:fe:50:2f:eb:73:2d:dc:74:dd:94:ce:
                    09:95:c5:d9:c2:b4:b7:73:ba:4d:7b:14:f8:be:1a:
                    9f:e6:c2:4b:93:96:87:cb:7b:b1:60:1f:4d:d3:b2:
                    1f:77:9c:37:4e:25:46:cb:f7:f0:1e:cc:f3:dd:3e:
                    a0:bc:be:88:52:03:71:7b:34:8a:65:8c:14:77:64:
                    92:68:c9:2c:4a:37:e9:9b:0a:2f:f1:2e:8f:97:d6:
                    74:ee:c9:a3:81:8f:b1:a7:ff:7f:db:69:d6:79:48:
                    97:2b:31:2b:47:7d:5d:15:a5:ea:73:2a:7b:00:f6:
                    ef:e4:e9:5a:16:e0:44:b6:d3:b3:c1:1c:cc:96:71:
                    24:3a:38:cc:95:e6:72:0b:d1:f7:ec:29:02:95:4a:
                    ec:a0:b1:0b:79:9b:19:03:d2:e2:0f:e5:4e:61:13:
                    03:bb:87:9d:3c:6b:e4:b9:58:65:48:32:ca:77:fa:
                    9a:bc:9c:32:76:b6:05:98:9b:af:be:60:28:d9:c3:
                    36:a6:61:82:d1:c7:69:b1:45:f4:fb:4d:06:2b:11:
                    fc:b6:28:fc:be:b5:42:8b:16:0c:79:d9:73:5a:6d:
                    e4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E4:53:44:22:CD:53:D0:88:36:DD:43:FF:F2:23:B6:BB:1A:AA:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba1f3a5b-949d-32e0-9caa-442464bb6521.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:5e:11:43:df:3e:20:6c:08:97:a9:8a:35:7c:98:17:d3:1e:
         2c:bc:f7:ae:dc:a4:95:1e:a8:8d:57:90:c8:f3:a5:46:c1:89:
         80:a2:6a:28:b8:46:e5:61:94:b7:fe:e5:00:b1:c7:2d:99:ee:
         a3:d0:a0:6a:2f:0e:ca:c7:45:10:bb:c8:65:08:ad:bf:12:47:
         eb:a3:ce:33:da:e5:62:ef:02:33:dd:50:4f:8d:41:cb:a5:3c:
         14:08:11:f7:bd:c1:65:d2:65:10:df:6d:c8:af:06:a9:1c:10:
         d4:49:30:9c:5d:a3:d8:23:a9:53:8d:fa:aa:06:ae:50:60:54:
         37:b9:34:97:9d:53:97:40:d6:6c:86:1e:ec:5e:2c:4a:07:ba:
         18:23:61:86:49:9f:93:c5:d6:c1:cd:a5:6d:1a:97:8a:d5:6a:
         32:16:ac:a4:0e:a6:db:5d:fa:1a:12:10:12:2d:90:a6:8e:c3:
         d5:e5:c9:59:41:38:53:7d:a4:5e:f7:c2:bf:bf:90:3c:83:6e:
         89:e0:b9:40:42:b0:93:d3:f3:d4:c7:58:de:8b:7d:6a:c9:28:
         5f:77:28:a0:80:a2:ee:f9:91:c0:86:bd:01:8e:d0:27:e6:40:
         59:14:56:32:92:96:63:7c:24:03:03:a9:76:cf:8f:b5:5c:6d:
         cb:7e:ca:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:47:47 2025 by rpki-client