Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f534c7fa-4778-3907-81bb-3549d4841e74.roa
File:                     f534c7fa-4778-3907-81bb-3549d4841e74.roa (raw, json)
Hash identifier:          5uH6WfHrP+JdOU2nLLewSjF5wGdjp26DKSsxELLypw8=
Subject key identifier:   E9:7C:AE:B4:93:8C:AD:F3:CF:FA:60:AD:12:0D:76:D8:FD:5B:7F:42
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B540C9738914A56CA7EF06700
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f534c7fa-4778-3907-81bb-3549d4841e74.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     41264
IP address blocks:        104.133.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:97:38:91:4a:56:ca:7e:f0:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=36a5b083-25d3-49dc-b9d1-2408b5a19279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:21:3a:8b:7f:5b:26:a9:be:a4:7f:64:f8:e6:
                    96:ca:5c:43:53:31:0d:8b:a7:ad:40:d6:83:2e:fe:
                    2e:20:10:37:79:16:92:4a:13:c5:b5:5a:e8:61:2e:
                    ce:b8:66:87:91:4a:48:ea:00:67:a3:5c:0d:ba:6a:
                    9a:eb:1c:d9:d6:63:ed:1a:58:3f:b4:28:59:58:37:
                    02:d1:9e:d9:21:8d:f4:b9:d7:3f:c6:45:af:e4:fa:
                    88:55:65:f5:57:9c:87:94:45:fa:5a:43:48:61:47:
                    76:c9:c2:ec:f9:b8:03:7d:ca:b2:51:e5:f9:36:1c:
                    4f:54:81:7e:bd:20:c6:e4:2c:06:e9:b1:bb:93:6d:
                    bf:d2:cc:49:97:bc:68:b0:38:74:16:64:25:e4:32:
                    81:7d:6f:e9:41:c9:82:2f:9f:e3:2c:45:44:42:e0:
                    99:cd:5f:84:9d:17:ff:75:ce:b9:4b:53:29:fb:40:
                    31:65:2a:1b:b9:3b:fa:46:07:79:89:ca:5a:f1:a0:
                    27:93:99:88:60:ab:fb:b8:bb:11:f8:4f:d7:2a:ab:
                    f0:6f:db:65:36:e2:45:dc:e1:42:d3:95:3b:22:7c:
                    a8:30:73:c2:40:08:88:57:4c:41:a3:15:82:ed:f6:
                    29:94:c7:ae:40:3b:c9:52:8a:31:f0:bd:65:64:d9:
                    6f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:7C:AE:B4:93:8C:AD:F3:CF:FA:60:AD:12:0D:76:D8:FD:5B:7F:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f534c7fa-4778-3907-81bb-3549d4841e74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:ec:9d:d0:ec:06:ff:d6:c1:22:6c:42:30:e6:37:12:fe:ef:
         e2:95:4f:8b:0a:39:19:63:d3:03:c6:83:55:b2:c5:86:09:8f:
         86:e4:30:f0:23:b1:e4:f9:bd:79:c0:36:cb:02:66:b4:4f:05:
         98:04:9c:ef:75:c7:09:45:d0:7a:63:04:69:2c:d4:52:b0:19:
         95:bf:41:80:e8:05:2c:16:b7:f7:93:2e:8b:7f:0f:db:b0:54:
         1c:d1:de:ec:7f:d1:1c:d9:6d:7b:87:a9:b9:e1:a4:1e:e8:9e:
         c0:f6:20:9e:c4:ce:df:b5:21:94:b6:d0:61:dd:c8:e6:56:18:
         2d:83:3e:d7:24:ef:a0:1c:bd:d9:31:17:91:e8:23:f1:8c:17:
         7c:d7:97:7a:fa:d6:22:a8:c2:a1:b1:f7:b9:a5:f4:6d:2d:0d:
         1e:00:7f:6e:81:88:a2:43:c3:0e:88:b7:39:f0:12:4e:dd:fa:
         bb:6c:17:47:f0:dd:ed:f5:ca:3a:91:0c:42:d8:f8:01:3d:a5:
         f5:e8:b6:a0:8b:25:a9:8c:2f:67:46:6e:e9:f0:a2:e9:5e:19:
         13:f7:ca:d9:ae:e7:46:e5:70:09:96:1a:b1:05:57:1d:52:7d:
         fc:56:d1:2a:aa:d9:c1:9f:2b:07:05:4c:a4:6a:58:98:04:75:
         9f:8f:27:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:03:03 2025 by rpki-client