Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e3a0cfbb-e99d-333e-9381-b4f668b2aaf3.roa
File:                     e3a0cfbb-e99d-333e-9381-b4f668b2aaf3.roa (raw, json)
Hash identifier:          0Cmh/gKtCIsLUOOJTGu0cTIurvDO0JJeriU0QqDJssU=
Subject key identifier:   44:08:9F:EF:7D:2F:06:32:3E:39:F7:BD:47:AC:9A:C1:50:DF:AC:CF
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350B1E96A8ED55C5BCD1800
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e3a0cfbb-e99d-333e-9381-b4f668b2aaf3.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     395973
IP address blocks:        104.134.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:b1:e9:6a:8e:d5:5c:5b:cd:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=dbf087e0-de95-4c04-997e-9f2ecbc7d1d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1c:ac:84:0f:de:1a:6e:d3:c6:f2:e1:56:0f:
                    85:ff:e2:61:e0:00:75:b0:8d:c4:2f:4a:a9:75:dd:
                    b1:a4:a1:74:1e:d6:8b:dd:e7:aa:b2:ec:42:45:b5:
                    d7:26:42:30:43:57:73:e7:3a:48:a6:37:ad:71:61:
                    af:06:72:f1:0d:8f:2b:6a:27:12:61:99:6f:e2:6f:
                    ff:db:d2:88:b8:9d:b7:44:67:14:1e:a0:87:69:38:
                    ac:1e:ec:b4:26:a7:9f:18:d8:27:1a:98:31:6f:89:
                    c0:5d:9a:e5:e6:99:cf:f1:f6:aa:52:d5:70:a2:85:
                    9d:f2:be:70:bf:3f:ba:66:87:c8:46:97:15:f3:cc:
                    68:f3:74:f8:44:4e:ca:eb:c7:7b:62:9f:f5:33:37:
                    64:2f:38:99:85:c7:0d:06:83:c0:47:7d:a3:18:95:
                    4a:24:23:67:68:25:a9:dd:0a:49:c9:c6:de:1f:47:
                    8d:99:c6:fd:0d:9e:70:98:f2:4f:1a:e4:0a:61:f0:
                    95:ff:ca:87:64:79:0e:b3:83:1b:4b:95:3b:ca:0c:
                    52:75:3d:2e:65:32:4b:69:ea:31:02:a3:6e:b0:75:
                    a7:01:87:2e:83:96:f2:ef:4c:80:51:be:89:29:7c:
                    51:b7:8c:72:45:d3:69:43:fa:86:74:1e:a2:52:ab:
                    00:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:08:9F:EF:7D:2F:06:32:3E:39:F7:BD:47:AC:9A:C1:50:DF:AC:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e3a0cfbb-e99d-333e-9381-b4f668b2aaf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:51:0f:5b:42:99:cf:be:fa:c4:d7:4d:9e:5a:c2:23:c4:cf:
         a3:40:e3:9c:b0:85:61:b4:37:58:9a:12:89:b9:1e:bc:3a:a6:
         c3:d6:fe:96:81:61:1e:58:bb:35:ca:88:33:27:00:a7:7b:89:
         9a:84:a3:e1:d8:b7:32:85:55:a3:41:30:ee:1c:af:7d:49:98:
         11:6a:ab:b3:f0:b8:6b:9f:04:36:02:b0:09:d4:70:d6:77:fc:
         66:3e:f2:ba:96:21:d8:f2:a4:b0:54:2b:07:65:9c:52:ef:96:
         9a:d4:6b:a7:4a:73:84:60:73:a8:65:1d:63:95:c4:b8:e7:19:
         11:7b:d1:0c:f6:a2:5f:c0:b7:3e:23:6d:5a:ac:d4:c2:2b:2d:
         d6:54:bc:18:5c:98:48:c4:8e:0f:35:37:bd:40:39:3e:9f:f6:
         ab:54:de:f9:1f:96:b2:17:31:64:c1:7c:18:56:f5:f4:ec:d2:
         9d:f7:50:91:3f:7c:1f:8f:9f:bb:b5:45:d6:22:a9:7c:49:66:
         eb:dc:63:fd:7e:94:f5:78:94:c5:15:1b:1a:6e:5e:66:7d:27:
         58:42:a1:99:89:db:ef:42:65:2e:6d:27:5c:44:d6:f3:53:b4:
         8f:02:29:4f:9b:b0:8d:0c:b0:79:77:90:51:d2:b0:fa:00:a5:
         6d:de:ee:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:09:12 2025 by rpki-client