Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0bcdca05-3bb3-356a-8673-1da025c8b0f7.roa
File:                     0bcdca05-3bb3-356a-8673-1da025c8b0f7.roa (raw, json)
Hash identifier:          HlWIY9El4I1oOqqrhv189L3ntThSJX9NdWcJibszgMk=
Subject key identifier:   1A:3F:71:1D:15:56:F5:56:F1:50:B4:58:C4:D8:C1:C0:03:61:15:78
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350C28407047C8C9C36F980
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0bcdca05-3bb3-356a-8673-1da025c8b0f7.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        104.134.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:c2:84:07:04:7c:8c:9c:36:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=8e06dfd9-5527-454c-8031-3fdb1886dd52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2a:ce:60:9a:bd:59:98:8c:ba:4b:2d:3d:be:
                    0b:6b:cc:5a:e1:0c:6b:41:44:89:7e:ed:f3:78:c5:
                    1c:26:51:f3:8d:4b:20:02:60:7f:ae:5b:ad:c7:26:
                    bd:cf:9f:13:34:11:0f:60:a3:cd:b5:b9:07:d2:ef:
                    b8:17:38:d5:e2:a0:30:39:39:b8:15:58:38:f7:8b:
                    ad:1b:27:cd:28:e3:63:60:8e:1e:68:34:85:51:5e:
                    de:e3:89:8d:c0:f6:1b:ae:e1:e1:b7:d4:78:26:6a:
                    33:27:a0:de:22:1d:26:9f:05:be:a3:c7:1f:ec:c5:
                    bb:b4:a7:4a:8f:5c:2a:2b:54:44:cf:4c:13:16:de:
                    d9:2b:71:f0:7a:3f:d6:0b:ec:ec:25:d0:ba:f2:43:
                    6c:7d:e9:9e:7e:31:db:20:97:dc:8a:bf:e1:79:fc:
                    e1:18:d9:ac:49:9d:42:0a:92:ad:af:5c:02:02:7b:
                    22:6c:70:96:1f:81:f8:9c:bf:e8:fe:bf:fe:73:24:
                    a2:99:e6:49:6b:df:1d:e0:6d:03:89:1f:d5:7b:37:
                    cb:00:80:28:3e:3e:30:ac:e2:79:5d:b0:fd:32:0c:
                    60:c1:fd:dd:f5:bc:06:ef:9e:d4:11:2e:a8:3e:57:
                    6b:61:25:7a:e6:2a:52:ea:1a:7b:fd:fe:aa:da:29:
                    f7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:3F:71:1D:15:56:F5:56:F1:50:B4:58:C4:D8:C1:C0:03:61:15:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0bcdca05-3bb3-356a-8673-1da025c8b0f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:ad:e3:c4:6b:2d:0f:60:12:0b:00:46:75:00:49:dc:bc:7a:
         fb:de:a6:ad:34:14:66:f7:d6:ad:85:50:72:1e:25:68:ef:16:
         a5:33:00:d4:fe:e2:33:d9:f9:6a:9c:39:70:c0:f1:04:e9:4a:
         37:22:df:ce:5e:60:63:4c:10:51:3a:75:c8:bf:e5:ed:37:0c:
         53:f6:66:af:17:aa:5f:ef:49:92:e1:93:4a:c6:93:34:15:db:
         a9:c0:ac:d2:70:50:7b:4a:e0:91:56:49:be:cf:b6:a2:66:b0:
         56:6d:b2:59:a1:25:94:95:fd:2b:c4:a4:02:80:30:49:40:12:
         96:77:ba:f6:f3:38:84:71:3f:3a:c1:58:e2:76:5e:02:2e:25:
         92:74:cb:10:16:4d:df:e4:6d:2d:93:24:e6:21:4e:65:77:63:
         69:d3:86:37:13:8e:08:76:58:70:b0:93:53:21:09:b0:4b:b6:
         91:5a:6a:e6:61:27:89:db:06:9b:cd:2f:1c:12:d9:96:3d:2c:
         3e:25:82:33:07:9e:10:59:03:bf:58:94:e2:f5:5a:0a:7d:2f:
         a1:ac:63:c6:15:14:93:37:89:00:b8:65:66:5c:99:f2:70:6c:
         94:5e:1d:0d:bc:4e:31:55:2b:10:4c:41:95:63:1b:dc:fa:d1:
         1e:8f:d0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 02:07:25 2025 by rpki-client