Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5e2c2e6e-6764-3a3a-ad7d-e654e20646c8.roa
File:                     5e2c2e6e-6764-3a3a-ad7d-e654e20646c8.roa (raw, json)
Hash identifier:          NbntL6mU1gUVCQP1gFb5dtoz5K0eEc2ZjwxPVM13wjQ=
Subject key identifier:   DE:E9:1C:B2:F9:38:6C:0C:1A:38:6C:46:05:9D:9E:F0:91:9B:EA:B4
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B5F376763A29EF8ADF8A83CE6
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5e2c2e6e-6764-3a3a-ad7d-e654e20646c8.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     15169
IP address blocks:        104.134.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:67:63:a2:9e:f8:ad:f8:a8:3c:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=ba614ff2-43f8-435e-a5a3-e55adb14d18b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5b:1e:2f:39:dc:9e:a9:d5:a7:1a:fd:3f:a8:
                    14:48:e4:df:41:a3:d1:ec:29:89:45:73:ae:84:bf:
                    44:ce:57:36:df:2f:54:8c:59:f8:0e:ce:32:0a:94:
                    22:8a:d4:4b:4b:03:b4:8f:a4:22:d6:55:7c:1b:21:
                    e2:5d:db:ea:f4:40:6f:3b:03:3f:9b:42:cb:89:51:
                    d5:a3:f5:db:a2:b6:da:24:da:a7:08:d1:14:2d:ac:
                    a4:d1:b1:7d:ae:e4:c4:44:28:f2:e0:60:a5:e4:cd:
                    e1:54:96:bf:8f:84:41:e6:38:2f:a8:06:9a:48:fd:
                    d8:5b:1b:b8:8a:79:d8:1d:65:9b:9e:aa:70:3f:e6:
                    c6:71:76:46:c9:f7:3c:e7:fc:ac:21:cd:68:40:0c:
                    ef:7c:4b:2f:70:df:ff:17:3c:0c:c9:80:9d:d2:f5:
                    93:0e:06:59:eb:d7:00:06:8a:b2:3c:8b:ce:86:4a:
                    ad:1b:d6:08:d4:0a:e2:09:c6:9f:64:af:d9:d3:05:
                    98:8b:48:78:1b:a4:f1:c4:3b:8c:dd:30:c9:ab:ed:
                    ce:48:07:b1:f2:7f:41:2b:d0:05:bb:00:48:af:9d:
                    50:3c:fe:f9:a5:9b:bb:3c:89:34:51:1e:f6:b6:19:
                    3a:18:c0:94:18:3d:f4:66:a5:5f:06:af:1a:cf:45:
                    f5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E9:1C:B2:F9:38:6C:0C:1A:38:6C:46:05:9D:9E:F0:91:9B:EA:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5e2c2e6e-6764-3a3a-ad7d-e654e20646c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:84:ff:07:e5:81:12:1c:45:70:30:86:f7:00:31:03:24:48:
         7a:54:f2:ef:30:14:67:48:b4:59:7e:a2:05:1b:82:0a:50:49:
         f4:07:00:ce:0f:1e:2c:5a:e7:94:00:be:9f:19:5b:32:31:b2:
         7e:5a:a4:67:58:93:df:cf:23:29:3d:b6:d7:b5:09:db:f2:41:
         ad:8a:92:ae:e6:6e:82:6d:34:e8:ad:4a:7f:8c:58:60:50:96:
         5f:55:84:c4:f7:e9:d6:c9:e8:2f:9c:99:8a:71:bc:73:df:81:
         1b:3d:4a:2a:09:c9:52:c4:75:e0:28:e2:30:25:21:04:35:9c:
         03:99:dc:4d:69:7d:a9:55:67:2d:3a:ff:63:ba:d2:6f:f7:fc:
         9f:9e:00:8d:bb:02:75:aa:52:cc:2f:3a:36:03:20:81:37:ca:
         7a:ac:e3:6f:cb:86:af:09:be:8a:fd:77:34:3f:70:d9:64:b9:
         41:6d:cf:18:02:0e:a9:95:1e:92:dc:c7:29:a7:38:ac:62:5b:
         59:bd:fb:9a:3c:0b:4a:01:49:36:7f:9a:3c:f3:1c:0d:9b:80:
         0e:b9:56:60:b9:2e:00:75:d9:1e:52:92:8a:35:c0:95:3c:87:
         79:e3:7e:31:9b:6d:fb:f9:78:6b:b0:3e:e8:c0:f1:29:c0:85:
         ae:06:64:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:57:25 2025 by rpki-client