Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/531b562d-f33a-3d7a-8148-08656c38f3c9.roa
File:                     531b562d-f33a-3d7a-8148-08656c38f3c9.roa (raw, json)
Hash identifier:          krhw5SeWSGxKBaGGpNouFqo5tmcEibPXtMjoUhMxhnc=
Subject key identifier:   B7:BA:75:A1:C0:A6:3A:3E:EF:32:86:21:28:3E:12:14:D9:26:BC:FD
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B5141D79311916D529B7C9700
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/531b562d-f33a-3d7a-8148-08656c38f3c9.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     41264
IP address blocks:        104.132.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:d7:93:11:91:6d:52:9b:7c:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=a002206c-87b5-46bc-a14d-a06b2b7cef99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:10:5e:bf:a5:92:5e:2b:7a:4f:f9:83:bd:4f:
                    a4:c4:f9:de:9e:3c:e6:0d:f4:c0:f1:c2:e0:fb:10:
                    fb:ff:59:7e:38:f6:96:dd:b2:7c:ad:bc:73:5f:a5:
                    5a:31:5a:0f:b4:a8:6c:47:78:d8:01:b5:aa:b1:72:
                    2a:98:47:b3:69:c8:1c:29:91:38:fe:6c:cb:5c:38:
                    b2:3f:18:b9:08:ed:2d:0d:72:dc:20:f2:41:e9:0d:
                    8c:07:b2:ce:7c:6f:16:f2:93:af:0c:1a:b6:2b:24:
                    d0:18:5e:39:58:bb:10:87:89:cb:6a:9d:e7:6a:07:
                    13:15:2a:d1:28:f7:be:61:81:5c:6f:5b:1f:d8:6a:
                    a8:06:9f:31:cb:3a:bc:2b:7b:8b:a0:b3:59:79:57:
                    b5:98:08:fe:ef:13:ff:36:47:f2:1a:ee:5b:13:a9:
                    ca:3c:e5:e4:27:a0:4d:e9:25:61:92:3a:d2:48:66:
                    d1:61:6e:87:f9:a8:84:62:52:78:62:a1:09:2d:2a:
                    f9:7c:72:f7:88:45:09:71:8a:36:a6:78:2e:08:fa:
                    8f:f6:ff:6f:7b:dc:7f:2f:07:f8:18:79:d5:e4:46:
                    49:1c:57:39:5d:f2:74:5c:a3:7a:92:76:49:f0:0c:
                    e7:45:61:f5:0a:a8:6f:e9:6f:af:fa:ef:8e:6d:05:
                    22:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:BA:75:A1:C0:A6:3A:3E:EF:32:86:21:28:3E:12:14:D9:26:BC:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/531b562d-f33a-3d7a-8148-08656c38f3c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:6e:db:50:a4:d8:f1:00:b1:2e:68:ed:df:d4:95:f3:d1:c0:
         d8:1c:25:1f:31:e9:f0:24:f2:4e:5e:1a:28:b5:cc:24:60:db:
         9e:3d:bb:f6:f8:0f:5a:66:ed:5c:cf:e3:fe:f1:c9:03:5c:1c:
         34:23:42:49:ba:67:89:8d:d4:74:84:01:00:fa:81:e8:09:9a:
         0e:f8:a4:75:7f:d6:ad:12:a1:b1:aa:7e:37:8a:61:45:81:fe:
         a5:42:09:48:4f:f1:c8:2b:ca:fc:7b:f1:a2:0a:20:3a:3b:28:
         03:96:26:60:f7:77:74:19:f2:75:47:7d:37:5f:59:b3:9e:7c:
         2a:0e:74:c7:11:d0:74:36:b9:7f:01:6c:8a:3c:ea:46:27:d1:
         a5:17:9e:04:05:72:77:40:61:ce:2b:e9:b7:83:9e:27:db:31:
         c5:b7:86:da:44:d3:05:c6:6f:e8:06:57:4c:5f:16:ca:69:a8:
         e8:f3:20:1b:21:e4:4f:08:aa:34:9f:fd:a7:04:da:1b:8c:37:
         9e:b8:c4:24:27:f8:29:df:b6:2d:f1:20:7a:f0:c3:11:29:fc:
         af:0b:85:17:8e:a0:6d:1f:54:ab:d4:ec:c5:1b:2c:2d:af:67:
         a7:6f:a1:a8:9a:5d:f9:76:4f:d9:d0:9b:d1:6b:da:e6:9f:b1:
         96:3c:08:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:06:03 2025 by rpki-client