Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c6874779-c454-3fa5-b252-5c5ccfc0add1.roa
File:                     c6874779-c454-3fa5-b252-5c5ccfc0add1.roa (raw, json)
Hash identifier:          48etvy9ill83q7GHNNegtcLyyzH7KiscvFrc1JsB5hM=
Subject key identifier:   E2:7A:65:EA:AF:8A:A0:72:C0:5F:4E:73:39:32:C3:80:80:15:E0:A4
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B5F3773644A55A14D3772FFC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c6874779-c454-3fa5-b252-5c5ccfc0add1.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     15169
IP address blocks:        104.134.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:73:64:4a:55:a1:4d:37:72:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=964a70e9-73b5-4c34-8b54-2bc41d4f1379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:28:db:0d:ca:be:81:24:ea:5c:58:04:d8:fc:
                    f4:65:91:5c:70:83:ba:23:d5:ef:5e:ab:f3:ee:7f:
                    15:f3:2b:be:d6:06:81:00:6d:31:91:99:bb:2e:7f:
                    dd:6e:ae:6b:f8:74:cf:45:2a:e6:ba:f3:11:de:29:
                    43:c6:99:e6:0a:42:65:c2:1f:d8:f5:fa:e6:70:38:
                    34:0e:c3:86:9c:f3:54:4c:a7:3c:64:bf:59:a7:31:
                    59:60:df:21:89:69:76:cd:22:be:69:dd:fd:6b:48:
                    bb:95:96:ff:0d:0d:af:49:fb:ab:87:dd:18:78:e4:
                    39:be:19:6f:1b:8a:b4:8d:d5:d2:d2:9b:8a:cd:62:
                    8a:1c:90:37:fd:0c:11:6d:91:77:ad:b0:64:56:fb:
                    30:b5:28:1e:fd:cf:24:e8:bd:ae:d7:0b:4c:05:a9:
                    e8:2d:b7:13:ac:1e:9f:cc:f8:4c:8a:c9:dd:93:6a:
                    12:60:13:0e:ca:e5:fc:ec:77:4b:11:88:49:2b:9e:
                    65:06:8b:0d:96:f2:5d:11:5b:08:62:aa:5a:94:21:
                    9f:fd:71:b6:13:21:db:69:c2:de:b0:a1:a1:b8:bb:
                    ce:f8:1b:db:4e:a1:ed:e9:45:94:c7:ce:47:a4:ac:
                    30:69:e0:ce:24:8e:84:2a:92:76:8b:81:9d:8f:28:
                    e2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:7A:65:EA:AF:8A:A0:72:C0:5F:4E:73:39:32:C3:80:80:15:E0:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c6874779-c454-3fa5-b252-5c5ccfc0add1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:e7:28:5b:c3:10:70:df:2a:da:eb:d7:3b:40:fc:a0:3a:8d:
         39:d9:7e:73:3f:c3:96:a3:a3:a7:e3:e5:cc:54:a7:44:95:80:
         9f:bc:f5:21:c0:0f:74:37:cc:43:19:7a:7f:5a:b1:06:9a:1a:
         94:0e:ce:d8:53:e5:22:7c:1b:bb:72:70:5d:2c:8f:f7:19:61:
         7f:ac:c9:ee:a6:06:1a:d4:ba:4d:6c:81:80:a4:20:26:25:75:
         96:34:90:94:07:86:f8:41:9e:be:48:b9:09:86:b5:50:c0:ae:
         03:6d:d0:c2:e9:43:c8:fb:8e:88:82:e1:a1:21:e2:c8:b1:7b:
         d5:bc:b4:85:84:ff:ad:28:27:8f:aa:81:77:e0:47:fb:1b:a7:
         a9:29:96:5f:27:f5:3f:fe:d1:2a:ae:19:ff:2d:63:95:b1:4c:
         34:61:cd:8c:57:e7:0d:07:ae:62:53:0a:07:fd:32:3b:8a:cd:
         94:1a:03:8f:f7:ed:81:b7:44:2c:1e:47:3f:08:dc:b8:c2:41:
         12:91:cb:44:52:00:58:16:45:59:bf:ab:b5:a3:c8:a1:fd:2b:
         3a:59:4d:99:8b:8c:6b:89:73:3f:15:76:e6:4e:f8:99:6c:14:
         5d:ca:78:02:6b:53:f6:20:66:b2:c5:89:5b:2a:5a:8e:29:77:
         49:a8:75:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:57:20 2025 by rpki-client