Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/35cb6aac-c91b-3de7-aed3-3eb478fcc0ba.roa
File:                     35cb6aac-c91b-3de7-aed3-3eb478fcc0ba.roa (raw, json)
Hash identifier:          nZy6Z5BmnoT1/iSxWYwUj/KefpBN311XPCGpekqfWik=
Subject key identifier:   1E:E3:33:39:80:65:36:21:CA:0B:15:46:DB:45:38:39:C8:EF:DB:F5
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350B54051B262EFBAE45380
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/35cb6aac-c91b-3de7-aed3-3eb478fcc0ba.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        104.134.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:b5:40:51:b2:62:ef:ba:e4:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=c55fd861-9e74-407e-85db-d9f17d84a7e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8f:27:48:c2:14:02:b9:be:01:41:b3:f5:71:
                    02:cb:84:1c:3f:0d:23:84:bb:1d:33:e8:e9:65:e5:
                    26:7f:c3:00:d1:0a:a6:99:1e:24:18:d0:90:ad:05:
                    ab:60:74:31:f4:08:ea:19:7a:ca:ab:9f:7e:b0:d9:
                    53:11:a8:76:44:bb:89:4c:3c:f0:c3:ea:17:75:22:
                    17:11:cd:19:d4:a4:1f:db:e8:00:62:92:43:df:b5:
                    a6:9a:38:fe:a5:88:13:43:f5:ba:e9:e8:b8:67:12:
                    37:ba:1a:36:0f:85:3e:6b:cd:c2:83:bc:65:59:1b:
                    9c:73:fc:a5:37:37:6f:03:58:a5:1b:27:a9:ba:82:
                    83:07:62:56:d1:35:32:02:67:13:30:2f:76:2a:f0:
                    77:d1:0e:78:0c:0b:fa:22:48:00:3a:84:15:ac:49:
                    c7:21:2e:0e:8a:88:7c:92:82:d3:69:8a:af:be:41:
                    c3:e4:ba:52:02:02:1c:82:78:7c:df:a4:e2:6f:b2:
                    1c:48:e4:f1:fa:f4:90:c9:d7:cc:6b:1e:e8:27:0b:
                    d7:22:4d:39:a6:ed:3f:d3:48:b2:94:0f:45:33:d3:
                    7c:39:a8:66:eb:a6:46:09:ea:0a:a5:a2:4e:30:e3:
                    df:1d:37:81:9b:88:10:98:64:83:78:fc:80:8c:14:
                    02:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E3:33:39:80:65:36:21:CA:0B:15:46:DB:45:38:39:C8:EF:DB:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/35cb6aac-c91b-3de7-aed3-3eb478fcc0ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:a1:72:13:83:3a:e5:db:54:2e:5d:b2:8d:00:36:fc:44:76:
         1e:e0:46:4a:6d:0a:15:c9:19:c5:71:4b:b2:85:22:c2:ed:cf:
         85:39:28:10:82:5d:19:16:8b:dd:00:46:76:14:ff:39:94:2f:
         ef:02:10:cb:75:f2:1e:b7:1c:44:08:ba:56:16:87:ff:16:16:
         9b:da:bf:b0:d8:24:56:c1:50:7d:03:35:05:31:ff:c6:35:4e:
         d9:e5:38:e8:28:c7:28:ec:8e:f1:f6:0a:72:9b:c6:d6:1a:45:
         75:08:c0:27:01:b4:0c:ab:ba:c5:7a:70:fb:d6:9d:9e:c8:d4:
         92:31:a4:6d:6e:f7:55:f2:07:9f:c3:a3:87:ce:d8:65:95:db:
         06:f6:49:ae:ac:df:5f:48:fb:15:90:e9:74:71:bf:a6:dd:af:
         44:fd:08:4c:c1:90:b3:42:41:27:85:a2:0f:5f:b7:4c:58:c2:
         d0:46:23:b2:eb:43:77:d1:00:57:73:83:05:91:ad:b6:15:c5:
         e9:83:0b:f6:bc:ed:48:90:f3:94:a7:55:55:18:78:cc:e9:97:
         ea:3c:5b:18:93:14:d7:aa:5e:92:b1:de:cf:0b:05:f2:b5:85:
         56:d2:97:72:78:6b:05:21:44:a2:e8:03:c9:1e:99:0d:92:af:
         fb:6e:db:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 02:13:02 2025 by rpki-client