Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/15fe3821-4993-32e6-9196-2242493ebd83.roa
File:                     15fe3821-4993-32e6-9196-2242493ebd83.roa (raw, json)
Hash identifier:          ywdTVyxD41mZr4PDxl6n4dL33O91aNYpdSr56D5oNjQ=
Subject key identifier:   82:DB:C7:39:64:B1:BE:24:EC:70:F1:BE:83:AF:D5:84:F6:CD:A9:D1
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B5141DEADD0901F8340A5AA80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/15fe3821-4993-32e6-9196-2242493ebd83.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     41264
IP address blocks:        104.132.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:de:ad:d0:90:1f:83:40:a5:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=9a0e955e-ee48-40ea-b7ad-abf94903f7ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:24:d0:17:52:54:3e:92:71:3d:19:e6:d5:d6:
                    cf:9a:32:e4:10:99:d3:bb:ad:f2:0a:3d:da:f9:5e:
                    1e:aa:2c:9f:92:ac:2a:63:6c:93:df:6f:40:b3:43:
                    58:0d:98:84:37:53:99:f1:97:54:3a:52:39:6b:6b:
                    f3:8b:54:39:e0:0b:fe:80:be:9d:7c:da:da:84:3f:
                    50:ae:ed:7c:1a:ec:5b:e7:d5:26:81:51:f7:0a:4b:
                    35:78:39:3a:1d:bf:f6:c7:cb:8f:f5:6b:a2:04:bf:
                    52:f3:c9:00:7a:98:49:01:de:a7:9e:21:ec:31:d6:
                    31:2a:75:0c:b0:74:34:00:61:bf:e5:d0:74:dc:38:
                    77:20:6c:80:f8:9d:96:26:97:7a:09:4e:25:77:a8:
                    7b:af:4e:b1:4b:13:1f:1d:91:30:c5:cd:d8:c7:02:
                    09:17:e1:37:42:08:ae:e0:7a:76:27:12:b5:56:2f:
                    9e:21:2d:08:80:6c:86:c2:e6:37:7d:56:32:e5:80:
                    03:eb:e6:29:24:dd:e5:36:d9:59:74:48:64:c6:85:
                    dd:cd:9a:ec:98:52:46:41:7a:1b:75:93:fb:20:83:
                    92:c9:39:c0:e2:11:28:4d:55:05:76:31:4c:a1:2a:
                    8f:45:8d:29:6f:80:4b:d0:9f:5e:1a:7b:39:e9:82:
                    cc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DB:C7:39:64:B1:BE:24:EC:70:F1:BE:83:AF:D5:84:F6:CD:A9:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/15fe3821-4993-32e6-9196-2242493ebd83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:f1:0c:ab:92:9e:11:87:be:84:f7:92:46:dc:a4:30:e9:ca:
         cc:9a:3b:59:de:99:20:2a:10:d8:f3:37:e7:0f:23:e5:cd:fe:
         85:6e:bc:39:97:81:02:ce:dd:fa:bc:d6:2c:55:05:ac:c3:c5:
         5c:76:51:98:16:d8:a9:ef:bc:9a:fd:ce:7c:90:b7:50:a9:84:
         16:c6:67:12:ea:8b:82:79:db:1e:cb:2c:f0:bf:25:b2:31:d4:
         1a:ec:07:eb:ef:c9:1d:84:8a:a4:9f:b9:44:91:87:53:41:57:
         1e:3f:6d:13:8b:42:2f:d9:23:64:6d:85:08:e2:75:52:13:40:
         4a:37:e3:7f:bf:db:e5:90:09:43:33:13:9c:d7:92:c1:04:dd:
         97:55:6b:db:61:f4:98:60:78:72:4f:47:69:e5:0c:85:83:67:
         12:57:35:13:37:bf:a1:c8:6b:09:4e:07:c1:20:db:2b:a5:68:
         29:6c:4b:fd:1e:5e:5c:22:c8:46:6a:cd:9e:fb:e2:d3:24:b5:
         91:32:9e:07:f6:89:dd:48:9e:f6:81:04:a1:c5:fe:64:0c:1f:
         82:f5:86:fd:b5:ee:09:f4:bc:e0:51:e9:3f:23:d5:e4:e4:db:
         3b:30:bb:d2:1d:c7:38:f5:e0:29:08:90:fb:87:f3:8a:f3:51:
         8e:2d:b8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:01:07 2025 by rpki-client