Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/79bde90e-377c-3fd8-9173-8b73b176fc69.roa
File:                     79bde90e-377c-3fd8-9173-8b73b176fc69.roa (raw, json)
Hash identifier:          ovDjhPdbuGcssg2N2y9sGFLW6QpWuF+nY3bxmUQFcoo=
Subject key identifier:   FA:B8:6B:60:62:2C:B2:33:E9:86:0C:E6:8F:1D:00:E8:84:FF:D1:5B
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B540C79BABA55F5A1C1B0CE00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/79bde90e-377c-3fd8-9173-8b73b176fc69.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     41264
IP address blocks:        104.133.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:79:ba:ba:55:f5:a1:c1:b0:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=bdc75ef4-e5f1-4730-859b-9b3c3c224806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:06:ed:50:85:ee:ed:fb:f5:81:84:04:b5:54:
                    00:d0:4a:0e:31:5d:68:94:67:1d:41:26:e2:dc:07:
                    41:ec:76:c3:e5:b8:f0:59:f1:af:2f:87:ec:f9:1c:
                    42:02:db:7b:1c:2c:8e:40:56:85:c5:7a:65:ee:d6:
                    c6:72:7c:21:90:05:c9:d4:42:52:ee:32:a7:89:6e:
                    ae:60:13:68:25:ce:75:f4:ac:43:69:02:a1:9d:60:
                    bb:1f:c9:fd:44:b3:c4:ee:8b:c7:6c:ac:57:90:c9:
                    49:23:fa:2b:b4:6f:1f:d4:64:db:1e:5c:81:ca:85:
                    5a:55:43:36:98:84:d6:39:65:44:54:77:c4:7d:c6:
                    fa:ca:b6:ef:28:0d:f4:0e:00:84:a2:e2:0f:47:42:
                    5f:49:c8:c2:fe:ba:71:79:79:b5:40:3c:65:13:db:
                    1a:c8:83:2c:a1:ac:49:4e:e9:78:6c:0c:fa:11:a1:
                    9b:09:f5:92:29:9d:a8:c4:69:8c:0e:89:5b:f3:d8:
                    52:4f:d1:f5:99:a7:bb:9f:95:72:e8:3a:38:79:47:
                    38:99:8c:2c:2d:ba:db:92:8e:0f:45:87:3f:c4:c0:
                    38:bf:a0:1a:69:f7:3a:ff:7d:6f:26:ff:cd:16:ad:
                    c8:22:a7:be:54:e7:ea:95:f8:6c:ba:42:9b:ce:d4:
                    a7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B8:6B:60:62:2C:B2:33:E9:86:0C:E6:8F:1D:00:E8:84:FF:D1:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/79bde90e-377c-3fd8-9173-8b73b176fc69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:d3:7a:b8:e0:e8:2f:ec:d9:36:5d:96:bd:04:93:78:0f:5c:
         b9:f3:fc:e3:fb:07:5f:3a:c2:2a:ce:c3:bd:0c:e5:f6:5e:ae:
         93:0d:39:f7:00:4d:3e:2f:ea:4b:d6:02:1d:8f:8d:ac:0d:a8:
         5e:b6:de:e5:a6:70:e6:79:a1:e6:88:77:3c:f5:ee:4a:21:25:
         b8:84:85:64:a4:af:eb:2f:c0:b5:1b:b8:d1:50:a9:ea:ce:b3:
         94:73:13:14:2c:4b:6a:54:82:c8:7b:b5:a5:56:6e:4a:08:6a:
         a1:d4:2b:db:b3:5c:b3:44:13:f2:eb:dc:9b:0e:6a:68:c6:b9:
         62:e3:77:d8:fc:0e:57:36:d7:32:42:56:30:2b:8f:d3:f0:fb:
         34:07:db:99:58:26:34:bc:71:c1:f9:21:cc:ba:dc:de:c5:0f:
         b0:f9:a8:08:03:54:4f:8a:c9:b5:c0:c1:a1:12:91:f7:8b:5b:
         57:13:7d:ba:54:26:33:24:78:88:65:5f:fd:f1:9e:e6:93:38:
         8e:fc:4d:1f:7d:31:e4:29:bf:71:33:97:aa:16:0d:a7:22:7f:
         1c:ef:14:1e:f3:62:d6:ea:7a:06:ca:b5:1c:79:c7:b3:80:c5:
         55:93:14:16:5b:39:96:c9:d8:b7:d2:99:d5:af:21:ee:f6:2d:
         ec:fc:14:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:06:21 2025 by rpki-client