Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/c8d15b7c-8c87-3ef4-aa66-1f83de4e04f7.roa
File:                     c8d15b7c-8c87-3ef4-aa66-1f83de4e04f7.roa (raw, json)
Hash identifier:          iybWpydSBAHWxDY5Q3OR2ewKUk3pnwmw3iDfxezmuT0=
Subject key identifier:   D9:C1:B6:98:B9:D5:1B:FF:52:87:B9:12:B1:BE:66:B1:ED:7B:DE:A3
Certificate issuer:       /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155
Certificate serial:       010D0C9F4328584A7BB0B5DB84718E2E9D9D4B00
Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/c8d15b7c-8c87-3ef4-aa66-1f83de4e04f7.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     396982
IP address blocks:        104.237.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:b5:db:84:71:8e:2e:9d:9d:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=d1452475-36f4-48cc-8c1d-a3cb17e4e927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:27:d9:0b:1a:25:1a:c7:39:ec:31:c6:c0:3f:
                    26:46:32:7a:e0:d9:60:7f:35:b7:d8:9c:09:9c:69:
                    e2:6b:9e:53:8f:5b:2d:4a:f4:d1:1a:1a:02:c7:0d:
                    5f:db:71:25:62:75:89:f6:db:22:50:3c:bc:cc:b3:
                    30:62:f0:cb:0a:05:1e:d4:fb:1c:22:56:c4:4a:64:
                    0e:cc:98:b5:bc:7a:51:d7:a1:a7:b3:64:ad:76:f4:
                    53:45:8d:4c:16:b7:d1:94:eb:d5:e8:1d:be:7a:9f:
                    1e:0d:38:dc:eb:fb:1f:a7:2f:66:7e:d0:4b:f1:9d:
                    7b:37:83:c8:3d:04:1a:4f:40:1b:29:bd:81:64:bc:
                    6d:cc:59:bf:64:94:83:66:c8:39:d3:c0:4f:c3:18:
                    95:99:a0:56:2a:95:da:87:e9:e1:40:d4:7f:ae:4b:
                    5b:48:90:f1:90:46:34:e6:b4:54:34:3c:2a:11:29:
                    99:5c:f3:18:20:f8:45:21:8e:81:a4:8d:2c:b7:07:
                    6e:8a:9b:0b:f6:1e:b6:44:5f:e9:c3:b8:a9:54:c1:
                    56:6f:4b:aa:07:24:f2:02:1a:59:e0:60:92:d7:7e:
                    f0:8b:0f:f3:72:5c:75:c3:3f:d9:12:6b:b1:4e:2b:
                    2a:6d:bc:d3:e3:e5:e8:05:35:c8:d5:03:69:89:c9:
                    c5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C1:B6:98:B9:D5:1B:FF:52:87:B9:12:B1:BE:66:B1:ED:7B:DE:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/c8d15b7c-8c87-3ef4-aa66-1f83de4e04f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl

            X509v3 Authority Key Identifier:
                keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:5d:c7:4f:eb:d1:8a:17:65:06:2f:ce:b8:00:94:b9:48:03:
         8d:5a:23:54:15:47:d3:dc:ed:18:17:8a:e4:e1:bf:42:3f:40:
         20:12:00:db:30:00:31:7a:d2:b4:37:9c:bf:7d:fc:7f:98:15:
         5f:f4:9a:72:5a:4f:5f:8d:16:9b:be:c4:b2:50:e5:83:d6:d8:
         5f:3f:4c:40:9a:1f:58:a4:f1:ee:43:14:3b:1a:44:31:01:89:
         c1:d5:98:7d:88:69:6c:a2:82:db:84:e9:2f:ff:d5:ee:42:b1:
         4f:4b:7e:fd:7b:16:8d:81:14:d5:8b:f3:87:5a:5e:ef:3e:69:
         dc:f7:fa:7b:50:4d:b6:93:d7:f3:57:16:f7:d9:0b:e9:67:ed:
         d0:d2:5b:c7:b5:52:ff:24:94:5a:a5:1b:51:22:22:28:00:26:
         3d:9c:b1:85:dc:5a:de:fb:d4:94:2a:45:55:de:0a:a4:f2:fc:
         03:56:62:75:17:f0:9e:46:9d:37:5f:7b:8a:fa:80:2b:1a:51:
         71:1a:ef:8e:c4:60:82:70:18:60:5d:e1:0c:fc:13:40:bf:00:
         fd:27:96:37:bf:77:23:eb:13:a5:fc:54:d7:17:59:80:30:67:
         4d:59:e7:4f:79:74:7f:03:f8:2e:73:95:fe:9f:9a:33:f4:b8:
         e4:cb:09:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:05:21 2025 by rpki-client