Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/47cc97f2-3c67-35da-93c6-4033da29eec6.roa
File:                     47cc97f2-3c67-35da-93c6-4033da29eec6.roa (raw, json)
Hash identifier:          SzIsR5X4WnKiIi2K6uLP14lz40J/hcG0SVWcUGNFPRQ=
Subject key identifier:   69:F8:9F:30:EE:32:C2:BF:47:1A:31:9A:17:66:FC:9B:D6:F1:90:C4
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B5F376DC7B77E4527946E5F40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/47cc97f2-3c67-35da-93c6-4033da29eec6.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     15169
IP address blocks:        104.134.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:6d:c7:b7:7e:45:27:94:6e:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=f8c04c84-5db1-404a-bf61-5d3da1ae78ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e3:c1:9c:91:a5:12:9c:c8:cf:8d:6a:81:bb:
                    29:09:8d:44:b1:1b:aa:1a:f2:a6:6c:67:6b:fc:82:
                    3a:cc:02:4a:91:9b:a1:a1:0f:4d:04:09:c0:66:55:
                    ad:56:9e:78:a1:95:53:8a:21:3e:7c:cb:a4:0b:4d:
                    da:57:c5:44:7b:ba:a3:7d:f5:72:d2:8a:88:d3:30:
                    a3:6d:26:76:2e:2f:47:15:86:af:3c:c2:6c:62:af:
                    ef:ef:3a:95:c4:5f:47:39:45:18:20:27:ab:c6:84:
                    38:15:0d:23:5b:d4:82:7c:30:de:d6:72:7a:99:4b:
                    af:66:da:3f:72:3d:92:b2:a9:f0:23:76:28:86:2b:
                    af:8a:4a:e3:97:f0:8e:d5:73:32:b6:96:f2:7e:56:
                    bb:7c:46:a8:ac:03:51:e6:28:3a:95:52:9d:bc:8a:
                    ab:89:01:0f:c6:f7:7b:b0:7c:8e:31:21:42:4f:12:
                    e2:79:7b:2b:0a:fa:24:40:c1:69:08:af:dd:b8:49:
                    f9:f5:10:95:55:d3:f8:d1:c4:4a:4f:a6:92:8b:67:
                    5c:29:70:29:8b:14:3f:78:12:c9:2a:ac:81:3f:d8:
                    13:e0:69:67:43:69:d6:83:97:e6:a3:dc:ad:6d:f4:
                    8c:91:28:d4:fc:02:87:e1:ff:e7:fb:38:db:66:23:
                    1f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F8:9F:30:EE:32:C2:BF:47:1A:31:9A:17:66:FC:9B:D6:F1:90:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/47cc97f2-3c67-35da-93c6-4033da29eec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:6e:48:3d:0d:ba:b1:10:8c:d3:51:1a:d8:b1:b0:07:d8:01:
         35:cb:f1:38:66:9d:c5:07:25:74:87:0b:a2:46:18:ac:6d:04:
         3c:5f:c4:33:f3:2a:1f:a3:90:eb:f6:ed:50:0f:10:0b:41:66:
         76:d2:e3:81:c9:29:9c:1a:e0:7f:c3:ab:0e:84:a5:ac:ed:0d:
         27:8c:ef:89:40:14:91:aa:1f:29:8c:6f:97:68:4b:7f:8d:f0:
         69:26:36:6b:49:da:9c:73:9c:e0:b2:40:bb:9b:74:1e:bb:0b:
         fc:5b:43:51:db:49:77:b9:f9:36:15:02:04:bd:e8:8c:c8:32:
         9f:90:98:84:85:ff:83:5a:81:03:97:65:31:98:ed:72:9a:28:
         f5:dd:31:f0:a6:f6:cf:ac:ed:78:c7:b7:c0:df:de:d0:23:8a:
         e4:37:87:06:4b:ef:41:5a:86:fa:79:16:c0:28:84:cf:73:35:
         67:60:73:13:30:88:d1:2c:b2:40:5c:c3:fa:1b:b9:58:4a:b5:
         ab:bb:b2:81:36:21:d6:ce:72:67:a8:68:b0:01:08:0c:bc:aa:
         d1:5b:56:44:2e:57:89:62:1c:79:b9:55:cb:00:d4:25:16:65:
         44:35:14:e3:63:6d:d9:f0:23:1f:c1:9b:fa:9d:aa:ea:41:5a:
         0e:08:27:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:57:11 2025 by rpki-client