Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7891b2df-185a-3462-825e-ae609edda099.roa
File:                     7891b2df-185a-3462-825e-ae609edda099.roa (raw, json)
Hash identifier:          AergEe7s+27JgVO2yxNPu6rIRxnQjNJ/oI27RtHwq3s=
Subject key identifier:   6D:33:89:3F:AF:04:F9:43:D8:61:45:F2:2E:81:82:5F:57:FD:30:45
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B540C7C7833FEF5A843258300
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7891b2df-185a-3462-825e-ae609edda099.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     15169
IP address blocks:        104.134.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:7c:78:33:fe:f5:a8:43:25:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=0328fc24-ac94-4351-b90a-9e3df096d5a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5b:da:e2:ff:bf:1e:e1:05:ea:98:6c:a4:42:
                    d2:7c:34:b1:cf:4f:bc:33:a1:49:47:0d:cf:b0:6b:
                    d5:66:a2:1e:c3:88:f6:72:e8:32:b6:39:e7:25:d6:
                    c5:04:3f:b3:63:8e:03:15:59:c3:69:d5:2b:de:77:
                    e1:b9:0a:c0:eb:ac:31:d9:cb:b3:47:ea:70:ff:da:
                    cb:9c:9b:f7:cb:c9:2a:f4:8c:0c:41:de:87:65:c7:
                    3e:d7:4f:9a:fb:21:64:b2:89:96:ba:2c:31:7c:6b:
                    dc:b5:33:53:3f:2e:b8:6f:5b:19:27:0d:34:f6:79:
                    a7:d6:d8:47:76:18:7e:5c:32:70:cf:7c:96:66:57:
                    7d:f9:c6:08:04:76:f2:00:45:7d:8d:b2:bb:a2:71:
                    60:99:9f:2c:59:a9:90:8f:03:f2:60:cf:71:7a:1c:
                    31:96:3e:4b:0e:02:c4:62:ed:88:b6:a9:09:aa:6a:
                    c0:8f:0a:bf:2d:d1:f3:a9:69:13:fb:55:f3:6d:d0:
                    28:98:0d:1a:d1:f3:b5:34:32:7a:fd:4b:35:2c:ab:
                    03:78:71:21:3f:d8:f3:52:2a:b1:40:c0:49:39:4d:
                    9e:5b:6e:c1:59:4d:ce:45:a3:0e:c9:d0:0f:72:c6:
                    9f:0d:69:c3:2d:0c:42:11:a0:a2:90:2e:1c:7b:25:
                    35:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:33:89:3F:AF:04:F9:43:D8:61:45:F2:2E:81:82:5F:57:FD:30:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7891b2df-185a-3462-825e-ae609edda099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:bc:1a:15:83:86:f4:78:34:5f:a0:4b:33:c7:d8:84:b2:b2:
         96:81:69:dc:d3:7e:24:7e:0f:96:34:dc:57:5f:b3:b2:4b:09:
         e8:5d:c3:18:32:d5:9a:b6:bf:a3:5f:ca:01:fb:d5:7d:18:3b:
         0c:9e:90:00:ca:c4:57:65:c3:9e:1a:bd:66:82:38:56:7d:a2:
         2c:8b:f7:68:c6:bd:f0:07:c8:1b:64:4a:6c:52:51:af:36:84:
         fd:e7:7f:5d:a8:ad:8e:e7:45:ba:36:f2:c4:2c:16:b2:15:49:
         a4:2c:ac:05:5f:ac:48:fd:d9:fe:5d:6a:94:7a:0c:90:88:39:
         27:8b:e0:c6:4f:c8:5f:05:17:81:09:7c:41:e9:5a:f0:1f:69:
         70:35:7a:55:e3:cb:02:61:9c:78:43:0f:5a:60:b9:9e:a7:55:
         74:29:b3:0f:2a:d6:86:4b:01:5a:48:9b:fe:d1:fa:c5:0d:03:
         7c:17:69:0b:9d:8d:9c:35:11:51:f4:8a:bf:5c:a0:f4:b2:8f:
         c4:27:a9:1b:d9:33:8b:db:12:77:5b:de:9e:14:21:8f:5e:4b:
         ea:98:72:ec:bc:d8:a4:17:47:37:b8:85:ee:72:a5:2a:7c:54:
         bf:2a:59:1c:91:9d:31:57:a7:90:d6:3e:21:e4:20:46:4b:95:
         19:0f:ef:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:59:42 2025 by rpki-client