Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/40385064-d713-3c6c-b460-5575e111dfd1.roa
File:                     40385064-d713-3c6c-b460-5575e111dfd1.roa (raw, json)
Hash identifier:          8yU7LqNJFaBTXnaEAzV/EMhH2Wu8/hdN0+SZM62dl9g=
Subject key identifier:   03:D5:14:93:75:A4:23:1A:CD:96:31:71:AC:F6:6E:14:8C:AD:C5:AE
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B540C8FA70F097622FAD9F540
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/40385064-d713-3c6c-b460-5575e111dfd1.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     15169
IP address blocks:        104.134.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:8f:a7:0f:09:76:22:fa:d9:f5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=c9435bb6-1dad-4c0f-a587-4be1f72a3914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e5:b5:2d:1e:e0:1c:0d:e3:8b:47:85:9f:33:
                    0e:ba:76:71:6d:67:63:fa:32:b3:9f:5e:a2:a7:e4:
                    70:ee:0b:af:73:2c:f2:9b:bb:02:37:e2:9b:84:71:
                    9b:03:63:10:07:d1:e3:0c:47:91:17:36:30:07:4d:
                    2e:a0:ee:0b:e3:5c:de:17:e4:a3:d0:23:74:3b:da:
                    17:ae:e1:f8:f1:46:dc:9b:38:8d:7e:cb:50:dc:6d:
                    35:d3:4f:2f:63:96:f2:e7:e7:e2:5a:7f:8e:c1:ef:
                    23:8c:a7:fc:f0:86:84:78:91:f9:7c:90:57:0b:52:
                    b9:b1:94:5c:f6:5f:e4:4d:d2:bd:eb:03:5f:35:97:
                    e6:85:ac:3d:e3:78:07:ba:8a:d8:55:38:ff:14:69:
                    a4:f9:25:fb:94:2e:fe:ba:01:d7:52:ec:2d:13:23:
                    44:57:e2:03:7c:06:b6:c2:7c:69:aa:ce:e0:89:22:
                    4a:16:0f:cc:e6:20:80:0f:65:23:9e:6a:d8:0e:4d:
                    34:71:5f:2f:49:4e:08:2a:04:59:18:fd:22:cf:75:
                    d3:17:f2:89:66:46:4d:0c:65:5f:4d:3f:16:28:75:
                    78:dc:6f:a6:13:f8:51:d1:ae:29:ec:fa:11:22:ec:
                    78:8f:4e:d0:7d:46:e9:8b:f5:27:e9:6e:da:81:f8:
                    a3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D5:14:93:75:A4:23:1A:CD:96:31:71:AC:F6:6E:14:8C:AD:C5:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/40385064-d713-3c6c-b460-5575e111dfd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:64:9a:5b:fa:a1:a6:15:0e:db:fa:43:bd:96:b3:13:67:68:
         47:2f:7d:43:fc:e1:6b:0a:55:06:2f:39:d7:33:b8:21:2a:68:
         11:c1:e1:6f:a6:6b:61:f4:8f:9a:09:42:cf:8e:cb:22:84:6e:
         e3:f4:7c:29:d5:51:88:8f:f9:b0:c9:6c:5c:17:cc:c7:aa:3a:
         3e:01:a4:6a:f3:a9:1e:01:be:97:bc:4e:60:b0:65:d2:fa:a9:
         e9:8a:e4:57:9d:b0:cc:bf:51:59:c1:bb:1e:3b:0d:96:b3:c2:
         ed:60:d6:15:c0:c8:78:f0:58:da:25:4a:53:44:39:89:a0:75:
         cf:9f:19:ee:80:93:aa:36:18:3b:af:f9:4d:1d:99:cf:8c:c6:
         db:41:1f:fa:1d:6d:91:48:1b:a7:f6:80:b7:c8:71:83:72:d8:
         7f:0d:c7:ca:3a:42:2b:c0:b6:f2:e0:55:73:2e:57:42:41:51:
         45:bb:e3:12:b8:ae:16:18:55:cd:3d:c7:91:96:75:2d:80:dd:
         32:0f:c1:eb:b4:82:26:f9:d7:05:11:7d:e6:84:d4:4b:92:40:
         dc:b8:f0:21:e0:9a:ad:a8:96:fe:ff:dc:00:10:8d:f1:7a:39:
         24:39:8f:e6:6b:d1:ab:a1:4f:51:9f:0f:63:a3:2c:a6:df:37:
         a3:c3:c1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:59:19 2025 by rpki-client