Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/104cbd4a-65d7-35eb-bfe2-dde4a24d3160.roa
File:                     104cbd4a-65d7-35eb-bfe2-dde4a24d3160.roa (raw, json)
Hash identifier:          LifDug1RZ+p9rs8TRsuLFilLre1I3wp6jC+mW2MU4DA=
Subject key identifier:   F2:97:8A:93:4A:05:C2:CC:C3:E1:F8:D6:7E:33:66:9F:8D:CD:9B:3E
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A6DBB55562D38CDE66B1AEE00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/104cbd4a-65d7-35eb-bfe2-dde4a24d3160.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     41264
IP address blocks:        104.132.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:55:56:2d:38:cd:e6:6b:1a:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=c19d7c88-37a7-4044-86c1-f9c5a69248db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7c:48:a5:fd:41:f5:c6:39:39:57:6d:e7:06:
                    f3:00:bb:db:c3:b6:a1:5c:a5:ab:f1:e6:0e:ec:58:
                    c4:60:0e:68:85:c9:32:c0:d4:a2:4e:b2:18:90:54:
                    3c:19:d6:22:7c:4d:a3:7b:7e:bc:a7:62:0a:61:69:
                    f6:1c:2b:17:4d:3f:c4:2d:53:d7:81:f2:87:df:87:
                    4a:ee:7e:93:42:a8:ce:c1:f5:16:1e:64:95:82:0e:
                    63:a4:b5:d3:58:79:f0:02:81:d6:d4:b1:ed:ee:73:
                    c4:5b:db:ed:d5:7c:79:b5:e6:a7:c8:cd:13:fe:ec:
                    b1:e2:f5:28:8a:88:eb:5d:b2:5c:0e:8b:9a:44:8e:
                    94:50:7f:30:b7:c7:a8:d4:6e:c4:9d:7e:27:92:df:
                    72:f2:b8:8a:26:5b:18:65:ad:c1:59:0a:00:6b:a5:
                    b0:1a:d8:e1:b3:04:53:c8:0b:1d:c4:c1:45:99:d1:
                    f1:88:74:44:d7:01:d3:e3:a3:a7:b2:4e:9d:c4:19:
                    97:9f:e6:4a:8f:d4:4a:35:1b:de:8d:bf:ad:66:3b:
                    8b:bd:30:4a:f7:80:97:ae:aa:e6:3d:e7:d6:ce:b4:
                    46:aa:15:69:28:b0:54:a5:07:40:23:ea:9f:8d:ac:
                    e9:9d:c9:94:d4:63:6f:b7:b0:75:50:cf:25:82:0d:
                    3c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:97:8A:93:4A:05:C2:CC:C3:E1:F8:D6:7E:33:66:9F:8D:CD:9B:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/104cbd4a-65d7-35eb-bfe2-dde4a24d3160.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:8a:9d:cd:7a:9f:b1:6e:d2:20:81:34:4d:9d:e7:da:1f:69:
         02:9f:71:4f:31:9e:00:85:1f:c1:ae:e5:99:8f:eb:ee:d5:9e:
         a7:ea:7b:5f:a9:b1:ea:9a:6b:c1:c5:3e:b8:dc:96:5f:7f:7b:
         fc:11:2a:63:57:b2:3a:2d:35:f3:85:05:43:0e:65:15:6d:7a:
         e2:a2:f2:2c:6e:1f:2c:58:0e:de:87:99:b2:d8:ab:ea:97:9a:
         bf:30:4d:8b:c8:3e:62:4e:1d:72:6d:e5:95:92:95:16:3e:0b:
         dc:5a:c3:72:3b:af:c8:4c:9d:a7:b3:3f:d2:2e:be:b5:99:c5:
         c4:d1:41:a4:f3:a1:13:08:6e:97:9d:e4:e2:34:ad:6f:01:82:
         6d:4a:4e:e9:91:2d:e2:4b:d5:0a:52:61:de:5f:cd:02:33:8a:
         38:0e:fa:57:d0:5c:e1:f5:70:6f:ae:ad:7f:46:3a:4b:0d:bd:
         bf:b1:43:1a:8e:c6:c6:94:d4:31:2a:98:66:4e:de:ba:e3:31:
         55:aa:fe:1f:fa:5d:17:0b:0c:6b:ed:13:c5:5d:60:61:ed:6b:
         e0:67:68:ad:89:6c:3d:3e:04:50:64:7d:49:6f:91:3b:e7:6c:
         e1:dc:67:c4:54:d1:cf:21:ae:e6:8d:bd:61:d4:a2:65:f2:91:
         28:20:aa:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 02:56:13 2025 by rpki-client