Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e9cdedfa-37cd-3c62-a9d6-a59dea6d29a5.roa
File:                     e9cdedfa-37cd-3c62-a9d6-a59dea6d29a5.roa (raw, json)
Hash identifier:          oTLQz8KMcz/apcmQ0mBp0p7Vp52k4SnJJyDReRYCDms=
Subject key identifier:   3F:DE:42:6E:92:C4:26:00:E5:3C:44:6D:C3:5D:FE:A3:63:32:8C:16
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B5141D64A852CC875E80B1530
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e9cdedfa-37cd-3c62-a9d6-a59dea6d29a5.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     41264
IP address blocks:        104.133.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:d6:4a:85:2c:c8:75:e8:0b:15:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=a59767f4-e51d-4c2a-a360-f0f100c2bf64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5a:1a:b7:3d:11:9f:d6:e7:8e:06:2b:40:8f:
                    05:26:0a:d6:f1:d9:07:86:3a:bf:91:45:6f:f4:77:
                    9f:f2:65:be:a3:45:47:aa:d9:8a:3b:f5:2c:52:be:
                    0a:bc:00:56:98:6a:0d:e9:46:ec:ef:77:18:75:74:
                    eb:1e:e7:bd:67:ea:22:28:60:41:88:ca:e8:ae:08:
                    3a:11:c2:90:9c:29:74:f2:e1:e5:45:54:c7:dd:62:
                    15:93:b1:c5:17:e3:a1:2f:08:e9:f2:37:f5:c1:8f:
                    0f:e6:89:f0:80:d0:53:88:eb:73:b8:97:3b:79:aa:
                    10:fa:be:c8:4e:9d:15:42:90:97:c4:c2:83:48:12:
                    84:b9:5d:b7:87:ff:a5:46:f0:c4:54:4a:14:0d:b5:
                    5f:0d:63:71:46:37:d8:aa:6b:26:a8:59:64:22:4d:
                    1e:1e:c3:34:90:a8:7f:99:73:37:74:3e:f4:ee:97:
                    18:09:a2:55:42:17:3e:3e:e7:b6:ed:01:67:18:95:
                    d1:48:13:63:a7:58:2a:1d:87:30:24:b4:5a:e9:f2:
                    bf:77:9e:a7:59:48:70:9b:e4:1e:30:b1:ef:8f:db:
                    20:e5:e1:d0:fa:ec:f3:ed:1c:b4:df:c5:6a:ce:33:
                    f8:8c:e7:6c:4a:d8:c6:32:10:4d:ec:d2:e5:61:e3:
                    7d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:DE:42:6E:92:C4:26:00:E5:3C:44:6D:C3:5D:FE:A3:63:32:8C:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e9cdedfa-37cd-3c62-a9d6-a59dea6d29a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:b1:2b:43:2e:01:97:34:8a:85:55:ed:54:1b:57:a8:f9:3e:
         ff:7c:3a:28:04:ba:5b:c9:4c:58:b7:5b:27:c4:e1:01:4a:73:
         ba:a9:8f:3c:00:cd:f0:d8:70:56:45:0e:d9:38:5a:56:37:5c:
         d0:bc:df:07:fc:84:cb:c8:69:21:fe:f2:41:3f:4b:62:dd:b8:
         a2:5b:80:ef:b8:6a:a1:3b:5b:9c:17:da:87:33:d6:45:f0:6c:
         90:a5:94:df:1d:b3:53:d6:88:a7:84:e2:59:56:f2:3a:ae:a0:
         1b:14:04:06:3a:fe:90:1a:4f:02:5a:93:8e:59:2a:3b:65:ee:
         31:9a:d8:88:cb:73:38:7c:31:56:e0:e6:fb:78:e5:9a:79:71:
         ea:dc:99:da:04:6a:ae:d9:aa:57:3b:4a:3f:87:d9:80:68:e7:
         ee:ab:77:b1:04:5f:99:b9:d1:5e:29:7d:5e:91:ec:2b:fc:06:
         e4:c0:f3:81:d9:b3:e6:d3:e3:61:d8:bb:5a:7e:8b:57:2c:fd:
         db:ee:58:eb:5f:31:da:83:30:da:62:7e:ff:1f:b1:b7:8d:09:
         54:7c:78:b7:b2:50:16:89:da:ec:12:26:59:a9:2b:1c:4b:1a:
         8e:e7:ef:d3:5d:f0:bf:e9:9b:f5:7d:6d:50:f4:3c:ae:a3:3b:
         3b:a3:5a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 21:40:42 2025 by rpki-client