Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a6b69d7c-c724-37c0-bf85-2a11784d4662.roa
File:                     a6b69d7c-c724-37c0-bf85-2a11784d4662.roa (raw, json)
Hash identifier:          +wOla4IMYjP4XNs3U1jlYq48NjSkKbkx+p6CdZ+NGHc=
Subject key identifier:   72:C8:5D:5C:97:A4:5A:5A:31:86:45:9E:B8:F4:45:FB:23:30:18:FD
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B5141D6C0316A477BE4EE4D80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a6b69d7c-c724-37c0-bf85-2a11784d4662.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     41264
IP address blocks:        104.132.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:d6:c0:31:6a:47:7b:e4:ee:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=f051f8e3-4936-4d6b-b5ef-954388e0158c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fc:dc:68:80:c7:2b:d0:66:92:fd:c3:43:a9:
                    14:94:4a:22:bb:28:9a:c7:ff:df:ed:91:43:1d:d7:
                    9d:22:84:de:fa:0b:30:06:8b:01:f1:e9:ac:af:6f:
                    f2:cf:b4:79:d8:2e:d8:52:13:10:79:70:7f:16:d4:
                    0a:82:60:50:7c:81:27:f8:29:db:96:2f:59:8c:e2:
                    f8:bd:37:ec:e5:7b:c4:7b:06:e3:62:18:e4:16:c1:
                    8f:43:e6:25:85:13:da:b6:35:c9:3d:b3:db:57:4c:
                    83:68:bd:64:2c:c3:02:67:f7:69:3c:14:19:a0:e8:
                    ce:82:da:80:60:07:11:a2:4c:42:4c:eb:81:65:a1:
                    2e:bf:e8:6e:58:11:b8:fb:30:cd:21:2c:65:4c:0e:
                    8a:5f:55:da:71:cd:b5:af:6f:42:23:1c:c3:dc:ca:
                    50:80:e4:6a:a8:b0:2c:8a:7e:56:78:e1:48:34:b3:
                    f1:d6:53:32:3f:c4:0f:43:af:bb:b2:ff:ce:9f:a3:
                    83:4e:f9:86:be:00:41:f9:31:cb:be:71:b6:7d:29:
                    2e:bc:9a:78:e7:a5:11:62:0d:46:9c:0b:27:4f:95:
                    9b:e2:c8:15:bc:08:db:20:e3:48:bc:60:89:2d:2b:
                    a0:52:b7:9e:a4:ca:0f:dc:e7:68:3f:aa:ae:ea:a2:
                    27:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C8:5D:5C:97:A4:5A:5A:31:86:45:9E:B8:F4:45:FB:23:30:18:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a6b69d7c-c724-37c0-bf85-2a11784d4662.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:b2:97:87:18:88:fe:44:7a:cb:f9:09:18:8f:02:35:e9:a5:
         5f:75:99:c6:88:f4:fe:f6:b2:69:b9:e9:a2:10:66:2d:ca:d5:
         9d:3a:13:eb:ec:23:1f:06:96:04:23:59:d0:eb:4b:91:7a:1f:
         8e:a3:ea:d5:e1:c6:c5:af:49:2f:3e:47:84:09:44:03:b0:dd:
         6d:43:52:aa:01:fe:55:00:0a:9e:c4:ef:db:b9:12:81:ba:fa:
         06:d4:2f:66:54:cb:45:60:90:dc:0a:23:67:2e:b1:33:7d:e1:
         b2:8b:97:27:10:d8:7d:ea:0c:52:64:2c:19:f3:75:7f:3b:14:
         0c:8a:ad:ed:20:aa:63:95:bc:46:81:23:8f:66:33:85:78:9c:
         97:8f:70:b3:2e:ff:de:20:11:cd:83:9a:ba:d9:ce:a5:05:03:
         dc:3e:d9:fd:2a:47:ad:62:80:ab:19:75:a4:4c:f0:72:2d:38:
         c8:e0:11:32:53:92:e4:04:14:f9:87:4e:89:88:9b:7c:7c:0f:
         a3:32:7b:a6:11:68:b7:c6:bb:d5:16:78:1e:51:d2:3a:e8:e3:
         52:e5:af:42:fd:93:5b:04:27:e1:34:59:4b:2d:28:04:4f:6d:
         1f:1e:74:7c:56:93:49:fa:c6:20:18:49:36:63:7e:cd:66:a4:
         88:15:fc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:05:31 2025 by rpki-client