Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/170886d5-062a-4c5d-a01f-02088ff038ce/175be9fb-183f-35ce-9616-0b9802cbde2c.roa
File:                     175be9fb-183f-35ce-9616-0b9802cbde2c.roa (raw, json)
Hash identifier:          m1Ynvk+A4/oGmJw8I+5zNg0lD5pVMqi4CyEhKWn5cDs=
Subject key identifier:   F9:F6:5C:49:B0:6B:D6:DB:C5:F7:D0:6B:AC:79:E7:4E:6A:81:77:65
Certificate issuer:       /CN=170886d5-062a-4c5d-a01f-02088ff038ce
Certificate serial:       010D0C9F4328584B4081AEA14103425D63E09B00
Authority key identifier: 83:31:23:A3:70:72:ED:85:53:E3:94:29:45:80:11:D6:76:97:26:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/170886d5-062a-4c5d-a01f-02088ff038ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/170886d5-062a-4c5d-a01f-02088ff038ce/175be9fb-183f-35ce-9616-0b9802cbde2c.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     271
IP address blocks:        104.128.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/170886d5-062a-4c5d-a01f-02088ff038ce/170886d5-062a-4c5d-a01f-02088ff038ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/170886d5-062a-4c5d-a01f-02088ff038ce/170886d5-062a-4c5d-a01f-02088ff038ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/170886d5-062a-4c5d-a01f-02088ff038ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:ae:a1:41:03:42:5d:63:e0:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=170886d5-062a-4c5d-a01f-02088ff038ce
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=5b8bddb0-cbb3-4423-a719-b8c621ed5ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b8:5e:eb:8c:91:80:53:d9:f6:ae:73:0d:c8:
                    51:5f:df:fc:a9:18:05:cb:e3:c1:7e:73:eb:96:c0:
                    8a:f4:73:ae:85:e5:3b:f6:e7:39:6d:58:aa:7d:83:
                    88:ee:9a:29:11:46:91:42:96:3e:8b:07:2b:0b:a9:
                    2f:25:a2:96:97:07:9d:75:65:0e:ee:25:d4:5f:e8:
                    53:4b:24:23:25:5f:be:5d:47:17:18:1c:c0:df:e3:
                    5b:8d:bd:f4:ec:8a:f0:b3:8a:ab:18:cd:92:b2:dd:
                    8f:4f:fc:b4:04:e3:66:91:f1:bf:c0:00:0a:36:a9:
                    d2:de:5a:a5:70:50:88:a7:3d:4e:4e:fb:8a:a3:fe:
                    27:08:e4:5e:62:c7:c3:1f:e2:25:c1:e1:2b:ff:38:
                    5a:95:46:bc:07:54:f8:d3:b2:7f:6a:ba:f6:8f:8f:
                    a1:fa:c7:9a:7f:29:30:89:a0:a7:e1:a9:55:c4:56:
                    73:91:56:48:e9:8c:0b:e4:42:47:69:d3:13:c5:33:
                    99:cf:08:d1:ab:3f:1a:63:c1:06:e5:1f:3a:94:07:
                    f4:32:24:2b:66:d7:9a:ab:c0:61:f5:26:d0:43:ab:
                    7f:e4:ef:5d:22:b6:75:21:37:80:f0:c9:bb:8e:96:
                    6e:a7:49:fd:77:57:4d:0f:20:c9:c8:3d:49:6e:24:
                    98:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F6:5C:49:B0:6B:D6:DB:C5:F7:D0:6B:AC:79:E7:4E:6A:81:77:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/170886d5-062a-4c5d-a01f-02088ff038ce/175be9fb-183f-35ce-9616-0b9802cbde2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/170886d5-062a-4c5d-a01f-02088ff038ce/170886d5-062a-4c5d-a01f-02088ff038ce.crl

            X509v3 Authority Key Identifier:
                keyid:83:31:23:A3:70:72:ED:85:53:E3:94:29:45:80:11:D6:76:97:26:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/170886d5-062a-4c5d-a01f-02088ff038ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.128.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:70:38:16:fd:22:26:14:1c:b4:3b:e9:2f:6a:d1:b5:f3:64:
         ea:09:4f:27:3f:7b:9a:25:47:c6:c1:49:e4:ef:14:da:02:df:
         19:ab:0b:b5:e4:c6:6c:7b:8a:d0:04:d9:3e:93:7e:7e:4b:90:
         d8:c9:00:66:81:dd:67:9a:fd:e4:cc:2b:bc:e2:b8:10:5b:14:
         92:aa:12:d7:78:24:a2:a5:db:6f:63:1e:92:4f:38:15:b0:c7:
         62:a8:00:fe:c4:c4:95:39:9c:8c:f4:4d:b5:33:1e:42:85:67:
         e0:ab:fc:2f:32:90:8e:d0:fe:7e:7e:4a:30:60:b5:38:c2:33:
         9f:4a:bb:77:ac:6d:24:7f:ee:af:10:d9:78:48:b0:c5:e5:32:
         b4:0b:92:57:6e:fa:1b:d5:f5:06:55:18:68:61:8b:70:3b:4b:
         55:95:55:df:8a:66:6d:64:93:e4:e3:80:8d:f6:f0:7e:10:19:
         8e:63:2a:05:54:7a:0c:2b:6e:58:77:7c:33:3a:ad:be:bd:a2:
         a9:f2:7c:fd:2e:91:44:50:5f:64:0e:da:ef:e8:9b:9e:0d:3c:
         43:61:e3:91:66:af:dc:d8:33:a2:a0:f5:46:9d:b3:87:ed:13:
         f9:3e:70:1c:4c:72:97:80:b1:33:34:c3:d1:b1:e6:b3:04:a2:
         27:5b:89:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:42:45 2025 by rpki-client