Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7b86073e-60e9-394e-a5c1-f33d1985047a.roa
File:                     7b86073e-60e9-394e-a5c1-f33d1985047a.roa (raw, json)
Hash identifier:          dazL8iHsV3p1k8ZXlB2pv2DuBVQroC6+C4WWYwNaKp0=
Subject key identifier:   65:4B:0E:31:61:F1:09:07:7D:AE:CF:83:A2:E4:72:2A:29:EA:88:7C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B76F246E3CA26D7FBB74DC580
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7b86073e-60e9-394e-a5c1-f33d1985047a.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     36411
IP address blocks:        104.135.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:46:e3:ca:26:d7:fb:b7:4d:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=dd10c6b5-3c32-4690-8c61-968fd1f6a4fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0d:64:36:2a:d3:7e:7e:17:74:db:d9:80:dc:
                    92:03:80:69:9f:50:db:a1:48:25:0a:67:65:2b:67:
                    da:30:ee:c5:30:d6:69:21:b5:6c:92:73:7a:0a:69:
                    b9:9a:4e:2f:f3:13:6c:49:ca:3d:ed:e0:3a:1b:7c:
                    ca:3c:a8:31:15:6e:f7:f5:3e:f4:31:ea:e6:56:3a:
                    8c:e7:4d:e4:1c:36:69:93:e1:9d:9a:03:4e:0f:e2:
                    9b:c4:1c:c9:e6:b1:43:04:4f:30:c2:9e:9f:87:35:
                    8e:96:84:66:ef:6e:71:2b:10:42:29:92:ea:02:e3:
                    fb:72:f7:07:a7:8e:39:3c:12:5e:56:1a:a1:ec:9d:
                    95:aa:d6:0e:d0:20:7a:b9:a9:c1:3e:24:34:9f:16:
                    ee:a3:00:ac:17:de:c7:17:a4:db:56:37:ca:8c:43:
                    ea:c5:27:10:cf:27:0b:a9:9e:07:8a:01:86:97:14:
                    a9:b3:b7:07:c3:ae:7b:bd:2e:e8:6c:27:87:c3:e5:
                    0d:e6:9e:b4:5a:c3:29:ae:6a:64:79:00:0f:e7:cd:
                    20:2a:0d:61:6f:4f:fe:41:75:7a:6b:7f:e4:7a:be:
                    58:8c:f1:7e:84:3c:ec:1e:e9:13:99:35:f0:cc:29:
                    55:59:bc:ce:3c:0d:b3:83:a0:7f:e7:0e:f3:d0:05:
                    ef:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:4B:0E:31:61:F1:09:07:7D:AE:CF:83:A2:E4:72:2A:29:EA:88:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7b86073e-60e9-394e-a5c1-f33d1985047a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.135.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:1f:10:0c:db:34:ab:1e:b6:cf:a9:09:3c:30:67:d7:24:96:
         0b:ea:2d:4b:cf:32:94:43:8b:25:18:da:b2:12:59:c0:60:83:
         f6:c4:00:82:1e:b7:29:f3:5e:d5:bc:6c:57:41:b9:b5:2b:e5:
         79:bc:d2:a3:f9:98:55:2d:cc:fe:f3:1b:cf:d5:94:4d:cf:33:
         92:b2:3d:96:42:bf:17:3a:a4:92:92:47:a3:5f:fa:9a:4b:3b:
         a7:60:de:c0:d5:5d:77:7a:61:74:c5:05:c0:ac:73:51:8e:2b:
         66:25:2c:d8:c0:fe:b3:ae:7c:0b:6e:60:f3:a2:37:eb:08:65:
         fa:47:90:a7:3e:66:29:6b:6a:f9:17:25:bb:68:56:b3:e7:1a:
         6e:7e:db:a9:85:2f:91:35:82:ca:3e:52:7c:90:2c:e8:ca:90:
         93:b7:83:7b:f8:81:7b:11:b3:db:61:2f:c9:3b:81:58:2c:32:
         ce:10:2b:bc:0d:ae:3c:aa:22:14:7a:c5:95:c2:be:9b:7f:81:
         50:48:2f:8d:a5:a4:ea:b1:9f:25:45:cd:05:32:8f:51:b1:e1:
         75:54:d5:e6:19:e6:f2:41:ec:f4:8a:f3:61:03:ee:7b:e0:34:
         09:a9:94:99:8c:9b:8e:1d:c4:c6:84:10:b5:6b:3f:fc:6a:00:
         2a:cf:3c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:57:28 2025 by rpki-client