Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/17449584-df2a-388c-bbab-cf97b03f4609.roa
File:                     17449584-df2a-388c-bbab-cf97b03f4609.roa (raw, json)
Hash identifier:          SA2XUcnveRoFoyGjPzvRQGzW9NNWA1KmMSIj+JqhHUs=
Subject key identifier:   BE:22:3A:D4:81:5C:1C:80:3D:E6:7B:8C:79:E5:8D:E3:D1:EE:F5:68
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B540C8D5348E21DFEEE12E8F0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/17449584-df2a-388c-bbab-cf97b03f4609.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     15169
IP address blocks:        104.134.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:8d:53:48:e2:1d:fe:ee:12:e8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=f431950f-146d-43a8-96de-93a529721961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:64:3b:18:ab:28:79:c0:f5:24:29:ee:f0:88:
                    65:e9:fa:ab:5f:f6:02:53:2d:12:2d:09:7b:fc:46:
                    1b:1e:94:bb:e3:45:8a:35:0c:15:e1:f1:7e:a7:4f:
                    f0:c9:46:75:12:e6:cd:1a:9c:9f:34:c2:06:86:08:
                    d3:46:a8:9e:aa:56:72:c0:5e:c8:13:27:86:ae:0c:
                    6a:e9:5a:9a:c7:48:91:23:01:10:6f:76:55:69:70:
                    08:4c:f9:8c:28:0e:ed:67:c5:29:af:6b:54:b9:c3:
                    23:72:c2:16:2c:70:87:ab:7c:ab:41:da:ca:8f:17:
                    54:82:22:ec:3e:4d:e9:45:8b:88:2f:ac:72:91:52:
                    2f:97:1d:f2:b7:28:2f:ed:0e:03:d5:ad:d9:50:86:
                    fa:9b:be:8d:2b:6b:b9:ef:87:14:5c:c3:2c:ad:c8:
                    4f:2f:a2:5c:19:c1:5a:ea:6c:02:3a:37:ed:65:0f:
                    f8:14:49:37:45:7f:ee:a5:ad:ba:47:a6:30:f9:37:
                    fc:7a:ee:f5:4d:ac:f9:c0:74:b6:39:c2:44:33:3b:
                    56:47:59:b7:9e:35:35:54:d7:30:37:17:21:d6:c6:
                    3b:7a:4c:1c:e2:83:a4:3d:59:4a:c5:a4:0e:1f:62:
                    1d:69:99:26:f2:de:4c:fc:03:c1:ce:61:df:e7:41:
                    4d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:22:3A:D4:81:5C:1C:80:3D:E6:7B:8C:79:E5:8D:E3:D1:EE:F5:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/17449584-df2a-388c-bbab-cf97b03f4609.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:ec:c6:94:dc:4e:3d:c8:cb:14:15:0c:81:f5:6f:f4:eb:65:
         e0:9e:04:23:02:0b:c4:29:80:e4:35:47:15:fb:4f:b2:81:79:
         f3:6d:bf:fb:ee:26:6c:30:72:0f:87:c4:f7:17:0b:34:c0:4f:
         5a:66:f8:f4:11:71:64:ab:23:e8:2b:74:f7:df:08:44:c4:6b:
         3f:e0:64:6e:1c:ab:78:91:1e:34:99:b2:fc:f2:5e:ca:bf:e4:
         8b:55:4e:cf:75:bc:6e:28:22:66:a8:d7:a6:26:24:0f:48:60:
         c6:59:b6:c5:d7:e2:1f:a2:56:c3:2e:26:63:0d:df:2a:7c:b6:
         23:67:c2:aa:a9:57:cf:54:64:91:47:50:1b:b1:68:ac:0a:f9:
         83:e0:3a:93:a3:09:2a:c0:ab:8c:e4:f3:dd:91:fc:3d:e3:89:
         28:ed:18:42:f7:bd:17:72:08:f7:61:8d:ee:f6:08:09:a1:73:
         b8:46:b1:3c:bc:81:89:90:79:11:07:d6:e6:2c:33:99:e9:e5:
         2d:96:9b:a9:b8:18:c1:2d:42:94:1b:01:be:39:a2:53:bb:34:
         36:46:28:d5:c1:d2:13:cb:46:10:0a:f6:87:82:4a:71:12:2b:
         79:e2:27:4e:a2:6b:5b:b4:eb:a9:d3:12:88:09:11:2f:bb:b4:
         7f:20:25:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:57:10 2025 by rpki-client