Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/15fe3821-4993-32e6-9196-2242493ebd83.roa
File:                     15fe3821-4993-32e6-9196-2242493ebd83.roa (raw, json)
Hash identifier:          C3e1Tocqqx5hpo0Rh3YFc4BixJs4R6qvj3s6J0TWTIg=
Subject key identifier:   0F:C7:86:2A:CD:32:61:AE:47:C7:ED:EF:19:6F:9A:E0:5B:C4:24:3B
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A708610A70B1C796E51E7AF78
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/15fe3821-4993-32e6-9196-2242493ebd83.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     41264
IP address blocks:        104.132.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:86:10:a7:0b:1c:79:6e:51:e7:af:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=1645a376-99c3-4a2c-8fa2-31af9d1b9acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b1:1c:d8:fa:0e:dd:9b:5c:f7:80:fb:f6:d7:
                    a6:73:8b:67:9f:de:4b:45:b3:d1:e9:b5:a6:80:85:
                    98:5f:64:b9:6c:ef:f3:5b:04:a3:ac:8f:79:f9:d4:
                    af:3e:b6:bd:c2:05:ad:0f:56:7d:bf:01:90:58:22:
                    e5:30:e1:c0:9b:40:eb:1b:18:29:68:c3:69:25:d1:
                    09:f2:dc:ec:52:0e:41:48:62:71:e0:5c:cb:e4:8f:
                    86:30:a0:af:d7:14:a9:16:35:99:24:9d:f7:3c:2d:
                    2a:9d:18:42:df:d5:b1:e0:3e:46:d9:8f:f9:7b:04:
                    ac:84:75:8e:e6:45:3a:57:6c:45:4a:3f:2d:75:97:
                    a3:34:db:61:43:38:6d:c2:4e:7d:d4:2b:ba:2c:e5:
                    e9:7d:11:d9:52:67:7c:39:8b:55:b1:af:86:5b:95:
                    8a:30:c6:0d:43:76:92:31:da:92:07:c0:a6:f6:67:
                    1d:3c:cd:c8:31:31:1e:e7:2d:1c:99:16:49:2b:af:
                    38:6d:27:83:11:f0:9f:2a:5f:d5:a8:49:49:b8:3f:
                    c6:ec:9e:82:12:d6:0e:23:62:ed:8d:4e:b2:8e:46:
                    c2:66:78:65:70:2c:06:cf:2f:d9:57:72:ed:ba:84:
                    0f:44:53:3a:0b:6a:3f:e9:bf:25:f5:c2:08:1d:5e:
                    3b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C7:86:2A:CD:32:61:AE:47:C7:ED:EF:19:6F:9A:E0:5B:C4:24:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/15fe3821-4993-32e6-9196-2242493ebd83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:a5:7c:30:30:73:9b:20:98:2b:96:87:6e:6f:b5:b7:47:c0:
         c7:34:9e:84:34:c0:dd:67:01:3a:10:16:b5:44:a2:82:22:3f:
         1e:cd:4d:47:65:06:72:97:c7:86:21:4f:75:da:84:ba:a0:5b:
         52:1c:17:58:ec:7a:9d:f6:2c:bd:bf:72:39:af:fa:63:5b:b3:
         bc:36:22:aa:f0:b0:9b:8e:d6:cc:70:72:3e:c6:91:b9:a7:c0:
         2b:6a:44:11:55:7d:6a:7d:a0:21:b5:ba:96:bd:21:90:0b:cb:
         1e:2b:c0:61:1a:5c:fa:07:b8:66:f6:19:77:7b:03:cc:d8:d2:
         cc:41:0b:7f:15:e3:3d:05:cd:bd:fa:c5:7f:c3:82:b2:c9:78:
         fe:f3:af:2a:9b:ed:dc:fa:92:49:bb:ea:f5:0d:e8:46:56:a7:
         69:86:58:aa:a1:9e:ed:cb:93:e2:a2:4d:eb:3e:d1:13:ea:10:
         f6:6d:12:70:ae:8e:ab:60:6f:43:15:aa:3c:7c:74:76:a2:6f:
         98:9d:20:6e:3d:4d:99:42:a6:2f:bf:c0:ee:88:dc:00:ba:cc:
         71:00:f8:1a:0b:7d:fc:8e:c8:4f:d0:9e:8c:1a:0b:9f:0c:d6:
         de:76:b0:a9:21:11:02:55:0c:1d:7d:6a:5d:ad:fa:d1:1b:ae:
         60:52:8b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 03:51:03 2025 by rpki-client