Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f937f948-f1ef-3189-aeca-0050e84a549a.roa
File:                     f937f948-f1ef-3189-aeca-0050e84a549a.roa (raw, json)
Hash identifier:          X7zo/Ies5/rWNZPXaY0ZqldL3g2O1dqajkb7jWLb/lI=
Subject key identifier:   56:A5:AD:37:28:6B:09:CD:C4:75:84:DF:DE:D1:3B:CE:D3:FD:5F:2F
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B540C7689BC886DE6EA6BD200
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f937f948-f1ef-3189-aeca-0050e84a549a.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     41264
IP address blocks:        104.133.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:76:89:bc:88:6d:e6:ea:6b:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=abf472d3-50d3-4309-bd2c-cd178778d496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:37:73:f2:76:26:64:08:97:6c:82:6d:14:96:
                    82:af:0a:a3:7a:92:7a:af:06:75:f4:13:3a:56:2c:
                    5e:7c:65:be:cc:51:ac:70:dc:f0:fd:a5:52:11:aa:
                    64:82:49:9f:e1:37:60:16:85:59:90:2f:40:cd:f1:
                    62:92:13:35:ee:1a:ca:c0:1a:09:3f:fe:bb:ff:e6:
                    5e:19:1b:9a:97:74:21:0f:3c:b1:ab:f0:8c:33:70:
                    3b:07:78:49:83:6c:5a:8d:cf:23:c4:d9:56:5e:b4:
                    8b:3c:4c:59:34:4b:17:4f:60:a0:33:64:99:38:b2:
                    17:c5:b3:01:ec:45:dc:d3:8a:8a:12:92:e7:de:0a:
                    71:dc:78:06:ad:50:4c:d3:81:e2:c7:f5:61:49:85:
                    fe:f4:c8:78:96:11:7b:79:67:62:a2:86:57:33:a1:
                    42:33:89:72:85:67:25:ec:f1:8a:3a:e2:30:5e:0f:
                    cf:db:a4:95:1d:78:ae:54:ae:f6:95:56:d3:dc:c6:
                    34:03:32:5d:c3:2f:c7:3e:fe:e7:6c:c1:79:03:f6:
                    b7:1c:2d:d4:5b:64:b5:8a:79:a2:19:fb:54:ae:72:
                    f4:c6:6f:89:e5:26:11:c3:0b:f8:9c:8c:73:f0:6d:
                    d4:c7:2c:fe:70:43:c8:50:d3:4b:4a:13:c2:c6:10:
                    d0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A5:AD:37:28:6B:09:CD:C4:75:84:DF:DE:D1:3B:CE:D3:FD:5F:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f937f948-f1ef-3189-aeca-0050e84a549a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:5b:38:78:4c:0c:af:30:e5:6c:91:45:42:df:f7:48:e7:14:
         e6:70:90:57:a9:7c:33:d7:23:d0:be:5d:be:b3:64:e2:b1:61:
         34:69:27:98:fb:4f:90:a6:8f:db:3e:15:43:48:d5:ff:f3:7e:
         75:a5:a1:ee:eb:15:02:e9:3f:ef:53:cd:37:5a:a0:60:e7:99:
         f5:d8:3f:6c:71:1c:4c:0c:01:7b:92:5a:70:94:8a:28:f5:d1:
         cf:9a:22:c1:b5:9f:7b:ec:c3:e7:22:69:6e:ed:b5:62:6b:b1:
         e9:59:14:48:8b:3a:7f:88:f5:8a:4a:33:8e:98:c8:45:98:f8:
         f3:15:9d:1b:83:d4:04:fb:72:dc:94:ea:eb:fa:07:86:9b:e8:
         fd:73:a9:0f:f0:2a:1f:12:ff:3d:4b:14:67:5b:81:64:26:ec:
         83:87:5b:bb:41:98:f5:69:b8:d2:23:dd:a1:bd:63:c2:64:9e:
         fb:19:14:be:d2:a9:61:be:24:01:c4:1f:bd:d0:7a:47:bb:b8:
         31:99:87:cd:a3:9f:1e:d6:e2:69:f8:fa:dd:1f:d0:55:54:f2:
         fc:77:27:66:75:e6:c0:aa:0b:4a:13:ee:a2:79:40:31:1e:33:
         d2:4e:e1:c9:80:b7:8f:86:80:0c:d2:6f:b3:52:da:eb:b1:d2:
         81:0e:ee:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:56:57 2025 by rpki-client