Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b03c8f82-46d4-36fd-8e11-147c44fb90fd.roa
File:                     b03c8f82-46d4-36fd-8e11-147c44fb90fd.roa (raw, json)
Hash identifier:          yQGcTupfNNpu6OLv+gYUnl3we8M4swo+qgr1ZE/16zA=
Subject key identifier:   D1:DD:9F:16:24:73:76:1A:51:B7:15:67:35:6C:33:71:B5:89:CE:C4
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6DDF84E9DAA6F1F4D9700
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b03c8f82-46d4-36fd-8e11-147c44fb90fd.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        104.156.86.64/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:dd:f8:4e:9d:aa:6f:1f:4d:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=9771d617-aefc-469c-84e7-1772809c669f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ca:b9:73:0b:a3:87:1c:be:fb:a2:5e:87:98:
                    e6:52:02:0c:74:2b:de:f8:50:14:e3:b9:f9:4b:19:
                    aa:c0:63:15:f9:bf:26:63:06:10:b1:50:b1:86:57:
                    d9:7d:d5:d9:8d:9a:bf:63:77:78:fa:06:e9:97:c4:
                    de:c7:1f:7b:82:d4:e2:bd:22:ed:b9:cc:3f:7b:ac:
                    c9:d4:4b:65:b2:eb:47:20:0f:68:71:7d:95:ce:8c:
                    50:03:bb:e6:96:73:73:d5:55:61:57:e5:87:3c:0e:
                    37:0a:ba:95:ec:55:a7:c3:3e:6c:b0:76:15:a9:db:
                    dd:36:57:89:36:38:23:13:57:c9:fa:ed:d0:d5:2a:
                    fb:e0:39:4d:06:4a:df:91:8c:e8:4e:a1:28:cf:e9:
                    93:a8:7f:5f:19:cd:09:ab:38:ce:b2:1e:30:0f:2a:
                    0f:01:bd:34:1e:d2:42:6f:92:c7:db:06:c6:09:04:
                    06:d8:0b:57:b0:98:fd:59:e1:ed:17:72:67:b5:53:
                    a5:b8:69:2d:2c:03:c3:bc:fc:1d:3f:db:56:da:58:
                    6d:d3:b7:c9:2c:92:b9:d2:37:a3:2b:b4:08:6f:39:
                    3b:75:57:78:e2:b7:96:70:47:42:c4:8e:cd:35:ce:
                    e3:ce:09:f8:3c:7e:29:aa:da:7f:0a:4e:58:5d:4b:
                    9e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DD:9F:16:24:73:76:1A:51:B7:15:67:35:6C:33:71:B5:89:CE:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b03c8f82-46d4-36fd-8e11-147c44fb90fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.86.64/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:73:0c:68:51:ec:8a:d3:35:ab:e8:00:04:c6:fb:14:69:bd:
         f0:b9:8d:18:c9:79:cd:65:ea:45:ba:ce:23:f8:72:45:7f:ca:
         af:15:15:fd:a8:a9:d7:51:bc:05:d6:c3:cc:8c:f8:b1:f5:c7:
         7c:3c:c8:d4:12:06:6a:27:a4:20:30:f0:78:05:35:b3:4d:48:
         ae:b0:1c:a8:23:04:25:7b:33:20:46:60:88:fd:8b:81:5a:d1:
         40:d7:20:e9:f5:df:42:06:46:46:67:a4:70:2c:c9:63:c9:8c:
         3b:37:da:91:14:ef:20:35:0b:03:82:bd:15:47:10:31:07:58:
         44:4c:2c:9e:70:1d:c8:0d:1e:6a:bb:fe:2c:77:0f:66:9e:e4:
         9b:27:74:ac:32:aa:b4:d3:18:f2:1e:c5:08:d9:35:5f:e1:cd:
         d1:90:30:1b:c3:f9:72:06:26:76:65:c9:ec:0e:0c:d3:f0:21:
         51:bf:bf:6b:8f:36:05:6b:b4:b3:01:56:26:5e:9f:2c:17:00:
         fa:da:74:46:40:d5:6b:60:ab:67:20:ad:07:2b:c7:95:29:74:
         6e:f8:2a:64:ed:7c:f2:d8:3a:f8:03:2a:73:c7:d3:df:cd:e3:
         62:16:0e:1b:36:56:4c:ab:03:dc:56:e2:a7:04:e9:c7:25:ba:
         23:c4:0b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:46:06 2025 by rpki-client