Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e9f30e24-d7ca-317b-845f-b2ee35bd2983.roa
File:                     e9f30e24-d7ca-317b-845f-b2ee35bd2983.roa (raw, json)
Hash identifier:          HiS0FOm4Tnt6jn/z63d9HZVslppw1njIyinW6LnEegU=
Subject key identifier:   BC:76:17:D4:6D:65:FC:B4:B6:9A:A0:E0:32:B2:BA:A1:9E:14:24:D4
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E964E281F98E2F61F5F9000
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e9f30e24-d7ca-317b-845f-b2ee35bd2983.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        104.137.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:4e:28:1f:98:e2:f6:1f:5f:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=403d1f58-46a7-478f-8e5e-5d6b63957e0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f8:f9:fa:99:11:5f:30:4a:39:fe:0a:ba:e9:
                    42:96:b5:10:78:25:b1:01:c3:7e:3e:65:7c:50:51:
                    66:74:26:69:8f:73:ae:61:1b:fc:cc:d5:f4:a4:93:
                    77:8f:80:3e:87:05:2f:52:0b:69:bd:ff:1a:6f:48:
                    11:28:66:c6:70:fd:8f:fd:60:66:fe:3f:34:db:38:
                    2c:dc:7a:5e:df:3c:9b:9f:5a:c6:77:a7:a7:ef:51:
                    4f:83:cc:b3:ff:5e:2e:18:88:54:1d:30:f0:dc:ae:
                    c6:53:9a:44:b5:e2:5f:6d:e3:37:b1:57:e2:a0:15:
                    c3:1c:78:44:50:c5:19:33:39:67:05:e2:92:b1:2f:
                    8b:54:06:80:35:db:f1:fe:43:bd:f3:a8:f7:56:cc:
                    6d:6d:9c:b3:47:16:96:bb:67:d5:61:44:ac:82:53:
                    5e:00:fb:a1:43:b0:22:b7:b9:86:ee:2d:91:d5:3e:
                    d6:a4:50:66:50:fe:2d:44:90:b8:8f:4c:ce:d5:6f:
                    fc:31:e8:88:d5:f4:a4:88:11:3e:00:4d:14:fa:08:
                    69:5e:e3:bf:b2:ee:fe:60:d0:21:18:eb:90:d5:14:
                    91:34:d5:ec:2a:a4:59:28:ca:17:61:12:7a:65:7a:
                    93:ff:76:ef:81:94:1b:f5:6a:7d:e8:28:60:46:97:
                    6f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:76:17:D4:6D:65:FC:B4:B6:9A:A0:E0:32:B2:BA:A1:9E:14:24:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e9f30e24-d7ca-317b-845f-b2ee35bd2983.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.137.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:71:f9:20:6a:24:bf:4e:f3:65:8a:35:76:52:47:16:14:a3:
         b0:42:e4:77:c1:81:78:47:a7:e6:19:29:39:a1:95:db:e3:4a:
         bf:81:62:8a:34:84:ad:65:22:e3:a0:b8:dc:28:de:c7:07:78:
         46:7a:f3:8c:2e:fd:8c:15:38:cb:62:7f:89:5f:9e:6e:fc:9b:
         db:69:ab:0d:8d:73:32:61:26:b3:ac:50:4c:27:b5:11:ed:75:
         03:dd:ff:82:15:85:03:3b:cc:91:8c:1b:8f:32:75:34:8d:ad:
         b5:e2:d2:3b:fb:fd:8f:e3:77:39:08:3c:dc:33:dc:e7:e0:ff:
         07:ea:4a:d3:48:f7:fd:51:d0:70:f2:84:89:ec:46:d8:2e:e4:
         b9:d6:67:ea:dc:a4:e0:de:5d:5c:8f:e3:33:c8:0e:d9:a6:a2:
         73:4c:fb:99:77:38:37:c2:74:8e:54:dc:82:c6:4f:09:1d:26:
         4b:2d:fb:1f:81:fd:1c:23:3b:14:53:2c:36:f7:9f:9b:18:60:
         2c:cc:ca:e9:2f:1f:93:1d:3c:3b:60:26:aa:6a:12:da:cb:85:
         a3:93:be:d5:a6:50:68:df:56:65:6c:45:3d:00:cd:c6:6a:90:
         dc:5b:da:4d:60:27:09:4b:f1:42:d8:45:b6:fe:2e:6d:4e:41:
         4d:ab:d2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:04:30 2025 by rpki-client