Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/18761e4c-b96f-315d-9095-bd00c94195bb.roa
File:                     18761e4c-b96f-315d-9095-bd00c94195bb.roa (raw, json)
Hash identifier:          l+pjULLxN46apKq5pyEz6w/Mpwk8vvcZirmYh0zLgGI=
Subject key identifier:   35:40:7A:92:09:DC:1A:07:D9:F0:5D:5A:A4:7F:32:5E:FF:50:80:0B
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B1806E925903ABC9BCC3002C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/18761e4c-b96f-315d-9095-bd00c94195bb.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     395973
IP address blocks:        104.134.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:e9:25:90:3a:bc:9b:cc:30:02:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=c3916030-3b32-4731-bbe5-742a801b2253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b4:f2:2a:b8:66:04:ce:cc:ae:f7:e9:f5:6f:
                    ff:de:ab:b0:ce:ef:a7:7b:2c:5c:c4:83:7c:fb:e1:
                    ac:14:7d:42:03:bc:02:6b:20:ab:bd:88:12:eb:9b:
                    c5:64:0e:4d:b4:a9:a5:96:1a:7f:12:92:7b:ea:f1:
                    b1:16:a4:4c:e7:63:0b:1f:37:02:9f:1b:da:8e:82:
                    9e:6c:72:3e:28:79:ba:d0:24:1a:5f:41:76:bf:63:
                    a9:1d:95:1c:85:3c:c8:80:87:62:53:36:8c:a3:12:
                    f0:9d:9f:bd:d4:cf:5d:41:dc:9a:92:cc:18:1c:be:
                    7d:f3:5d:37:5c:db:9a:71:77:72:46:8c:58:16:85:
                    40:db:92:32:1b:2c:75:6b:fc:aa:23:ea:a0:e0:37:
                    f4:29:41:96:03:43:29:a3:3b:39:62:b9:47:5b:47:
                    b2:e9:e9:32:be:07:ad:70:da:8d:8e:e8:ad:89:60:
                    6a:45:ff:ba:7a:c2:4c:13:4d:eb:7e:98:61:e1:50:
                    bd:c0:d0:73:59:46:56:e4:27:cc:f2:27:c4:89:32:
                    1f:9c:4a:11:15:6d:ce:0f:ae:44:4c:71:36:9d:f8:
                    f5:56:31:cf:51:42:84:c8:87:d9:4e:21:8d:82:9c:
                    63:8d:13:40:a5:ec:99:8e:dc:e7:c3:9b:aa:fb:3d:
                    5f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:40:7A:92:09:DC:1A:07:D9:F0:5D:5A:A4:7F:32:5E:FF:50:80:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/18761e4c-b96f-315d-9095-bd00c94195bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:e2:0b:c5:f7:b9:b1:f4:69:5b:de:03:3b:ed:36:7c:4b:b9:
         e5:84:47:fa:1f:43:1a:37:6c:77:04:2a:4b:ed:51:c6:67:74:
         e0:69:f2:a0:fe:ab:9d:e7:79:1c:d5:ef:20:44:e1:90:66:95:
         61:aa:21:94:47:0f:08:fe:7a:6d:e2:b2:1f:f1:89:f6:4f:d7:
         20:51:82:e3:b9:28:48:21:cb:14:b3:ad:50:8d:54:c0:28:99:
         98:8c:0a:5d:04:60:73:44:f9:a3:f8:fb:e1:6b:5e:be:1a:8c:
         91:d8:2d:80:ce:0f:58:51:74:12:fe:9a:43:9c:2b:18:17:61:
         d6:9d:16:f0:22:24:7f:5c:a6:a9:a1:a3:1c:40:7a:8f:09:c8:
         99:32:19:43:c7:f6:6f:2a:fa:98:88:ce:2e:ca:5b:f0:53:39:
         cc:f4:8a:e9:e3:6c:63:03:03:22:05:9a:8c:2c:d6:0d:7a:bb:
         be:d2:00:12:3d:c7:e5:2a:9c:5e:f7:69:9e:6c:70:4d:23:51:
         f5:e0:06:2f:56:6b:af:43:77:83:55:f8:9d:22:4e:6c:c9:f9:
         62:ea:07:d6:5a:87:03:b3:e6:92:21:5a:ce:aa:65:59:9c:09:
         9f:02:cf:2d:df:83:78:1d:9f:76:c7:8e:2e:f9:54:1b:cf:6f:
         2a:3a:eb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:03:17 2025 by rpki-client