Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1e4ed431-4b9a-3971-bd1e-4b20d5b3408e.roa
File:                     1e4ed431-4b9a-3971-bd1e-4b20d5b3408e.roa (raw, json)
Hash identifier:          TH0Nk/WAuHUa4NDWM1C5Je2FYhEXyHf+isIx1aWX1SY=
Subject key identifier:   D0:78:44:55:54:F7:49:89:D3:DC:C4:36:57:00:2C:FA:C7:CA:36:F8
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B540C8071B0F1E900E6237EE0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1e4ed431-4b9a-3971-bd1e-4b20d5b3408e.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     41264
IP address blocks:        104.133.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:80:71:b0:f1:e9:00:e6:23:7e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=40ae528a-125e-4176-8f70-6cde49ced41a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:19:98:7d:88:50:bc:db:34:9a:5a:5c:be:99:
                    0d:12:2a:96:0c:4f:90:4d:1d:6a:5b:1f:09:d0:a8:
                    ab:d9:68:37:63:83:f9:9b:21:04:a6:7e:0a:01:53:
                    63:36:2c:cb:bd:f0:4d:34:15:7b:70:c2:b4:cb:e7:
                    80:b6:f4:92:b9:5c:5e:f4:56:94:f2:8c:18:03:0a:
                    d8:08:bb:8b:5c:10:6d:b1:6c:aa:1c:98:18:de:26:
                    53:f9:d6:04:95:78:71:80:8f:6f:d3:30:db:b5:f6:
                    c2:6d:e7:7b:5c:6e:4c:6b:16:e4:22:5b:42:84:23:
                    1b:80:24:1f:f9:dd:76:52:f0:f3:5c:ac:0e:82:aa:
                    d3:3a:94:13:8d:ba:92:84:3c:8f:9e:f1:b7:17:79:
                    4d:fd:b0:14:8f:8c:2f:d9:aa:f0:92:6d:f3:7b:b9:
                    4d:9a:78:ed:6c:5e:28:cb:e0:44:32:b0:15:4d:49:
                    d2:bb:05:8e:75:4c:56:9a:0e:50:90:fe:2d:5f:ca:
                    fa:e8:82:71:ed:ee:09:62:f6:48:47:f1:21:d6:71:
                    24:cd:61:8a:41:cb:d1:2e:43:88:cd:5a:0b:9f:94:
                    a1:4e:1c:05:6b:ce:be:52:90:6f:f4:be:16:19:ca:
                    3b:c4:fd:7f:7e:37:13:c1:2b:bc:20:ca:c6:ac:3b:
                    5a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:78:44:55:54:F7:49:89:D3:DC:C4:36:57:00:2C:FA:C7:CA:36:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1e4ed431-4b9a-3971-bd1e-4b20d5b3408e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:59:cc:3e:e2:0d:5a:35:1d:7d:2a:c7:f8:20:b0:5b:55:74:
         e8:7f:60:f9:08:19:a9:c5:56:6a:53:d5:89:eb:42:f6:eb:35:
         77:35:70:ce:c3:ee:f3:33:94:1b:c9:69:e2:fa:64:11:62:67:
         f9:99:ed:a0:f7:3c:26:da:fa:c5:52:51:c7:6f:59:26:f1:70:
         48:72:63:fb:4c:f8:ea:12:ef:9c:6b:d1:d9:a0:cc:81:23:95:
         5a:ee:43:df:4a:08:9f:90:40:49:96:bf:41:cd:cc:90:15:7d:
         63:7a:c9:b2:be:e4:ed:44:78:60:e4:d9:80:35:9a:dc:07:54:
         95:6b:d1:73:5b:a6:f0:93:8a:12:33:b1:84:b6:8a:db:97:96:
         ca:fe:0d:af:c3:78:8d:d1:10:b1:2e:6c:46:5a:74:32:8a:a1:
         9b:5e:11:be:fb:83:28:8e:48:24:d4:bb:82:97:f0:f7:0a:bf:
         47:b9:94:48:8e:a7:b4:97:42:75:b8:72:8a:b2:4e:d1:7f:c6:
         a2:2b:31:8c:ba:44:bf:17:7a:87:94:66:48:70:9c:25:92:e3:
         46:b9:ae:08:b9:d5:06:ef:d0:d1:a7:d0:e5:ab:73:d3:4f:80:
         2c:62:b6:fe:cf:bc:6a:88:41:19:a6:06:e2:b8:da:2a:8b:bc:
         d9:0e:93:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:57:27 2025 by rpki-client