Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5a4722f5-f67d-3f82-bc1d-ab80599d9595.roa
File:                     5a4722f5-f67d-3f82-bc1d-ab80599d9595.roa (raw, json)
Hash identifier:          o1v0UP3hGhoDB2rxvxcFm5If9zgzqfuURqJvye9PnDg=
Subject key identifier:   3A:A5:7D:85:7F:AE:11:FE:53:AF:AD:D6:67:96:F0:6E:CE:A6:BF:63
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B5F375FC1F130AF2E9B988D80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5a4722f5-f67d-3f82-bc1d-ab80599d9595.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     15169
IP address blocks:        104.134.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:5f:c1:f1:30:af:2e:9b:98:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=ac32cdeb-f866-4613-ae2f-3fb78b01ec4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:91:4e:dd:4e:9a:88:e4:fd:f3:c6:35:99:33:
                    78:0c:4b:64:6c:f0:5e:db:42:45:c6:87:59:b9:c9:
                    8b:ea:62:5b:f2:5b:ef:26:72:95:3e:cf:ab:fd:a9:
                    fd:15:7b:cb:f7:7c:07:af:13:ce:66:9c:93:52:b1:
                    55:1d:27:1e:24:80:cd:94:b7:0a:b0:16:0a:8c:a9:
                    43:d5:fc:4b:ad:a7:4b:2c:27:5c:16:a0:f9:3a:8c:
                    c0:ac:f2:04:c5:86:b1:0f:13:07:1d:d6:af:7b:c9:
                    e6:c2:76:fe:90:79:5f:e3:59:e6:cb:27:ca:de:60:
                    be:2e:83:68:16:3a:e7:ea:85:67:8a:dc:23:a7:1d:
                    9a:bd:7e:b1:af:21:13:01:34:74:53:1c:47:d4:fc:
                    c0:94:2c:82:94:c2:cc:98:5f:f4:74:90:38:01:80:
                    7d:3e:49:e2:e5:81:b8:b4:e7:ca:fc:26:6b:18:be:
                    cf:f9:bd:9a:cf:a3:7b:78:e5:ea:30:6d:ff:46:98:
                    b2:83:f1:a5:fb:b8:cf:67:61:52:95:d1:1f:df:3a:
                    27:40:dd:5d:85:7d:62:95:bb:5f:0e:01:4d:60:2d:
                    fe:e8:25:18:45:0f:1d:43:95:d7:c2:c6:65:00:94:
                    72:17:58:00:6e:82:73:76:23:89:4f:01:5d:20:82:
                    9a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A5:7D:85:7F:AE:11:FE:53:AF:AD:D6:67:96:F0:6E:CE:A6:BF:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5a4722f5-f67d-3f82-bc1d-ab80599d9595.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:fa:66:62:4a:cb:23:90:38:d8:30:6d:be:f2:fc:d7:79:b5:
         0f:be:e1:99:95:ef:7e:1c:12:4c:f4:0e:4c:f6:12:fb:05:fb:
         6c:7a:f9:01:d9:b6:ab:ee:74:3e:23:2f:2b:2e:ca:fe:30:d9:
         db:76:21:28:78:6d:01:49:1a:8b:f7:89:58:d0:2d:ef:b7:e6:
         61:e8:43:15:dc:7d:33:87:d9:67:09:e7:53:c1:7e:e2:ad:89:
         f2:3b:f3:b6:92:c1:8a:2f:fa:56:d1:cf:8b:1c:f3:11:0f:b9:
         28:f4:05:16:1d:52:8c:8c:a2:49:fc:ca:a3:99:47:4b:cb:f2:
         16:ba:52:c3:ba:33:64:93:c0:59:43:2f:80:1a:57:56:c1:0f:
         62:50:4e:59:c0:03:d3:e5:e4:54:9f:a9:6f:72:12:d8:d6:14:
         35:de:6b:7c:e4:e1:32:7f:aa:4e:43:78:28:2e:56:41:6b:54:
         e7:36:cd:f2:96:79:2b:32:8a:a5:20:d4:75:db:df:67:dc:ce:
         0e:17:3d:86:1b:cd:53:34:4a:07:55:df:5b:9f:b5:f4:9d:9f:
         8d:fe:8a:56:e0:cd:84:f8:f4:fd:3f:f6:60:54:e8:92:d3:fd:
         6e:2f:1c:a4:0b:b8:bd:d0:6c:50:2a:dc:14:a8:ec:a4:c5:88:
         67:11:c3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:06:19 2025 by rpki-client