Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/706e07a3-924c-3ec4-8447-84c539adc350.roa
File:                     706e07a3-924c-3ec4-8447-84c539adc350.roa (raw, json)
Hash identifier:          ja+IRl/sfELCSxxosCtIKXHLjAU2depV2ui8ygK0oP8=
Subject key identifier:   C2:16:B8:2B:37:07:E0:AC:31:7E:B3:40:82:ED:AE:FC:C5:29:58:47
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350BFBE63DFBB0EAF7936E8
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/706e07a3-924c-3ec4-8447-84c539adc350.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     395973
IP address blocks:        104.134.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:bf:be:63:df:bb:0e:af:79:36:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=5c29bc68-0e6a-499d-96e7-28961cb530b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:84:d8:f1:8f:a1:69:a5:be:1d:96:11:9f:23:
                    7e:78:8e:29:c9:bf:36:ef:27:4e:4a:f4:0c:8b:68:
                    14:48:88:90:db:8e:ac:a1:46:38:7a:c0:6e:f2:69:
                    5d:51:a5:34:a0:43:7f:e7:3b:99:79:ed:06:73:6c:
                    0c:21:f1:46:e8:0e:c4:19:30:86:26:d2:99:49:41:
                    ff:2a:c7:96:03:38:e7:15:cf:54:f4:ee:45:3d:d7:
                    80:09:19:2e:e6:83:31:91:5e:bd:c0:1c:04:d0:af:
                    43:c6:a6:45:a6:26:28:2f:a2:da:46:d2:37:84:8b:
                    9e:32:2a:c4:dd:6a:5f:d0:27:e8:49:98:fd:37:d3:
                    de:ee:48:f1:27:23:68:3d:b8:ec:e6:b4:e8:5e:51:
                    5e:0f:c9:e5:04:e9:ee:be:74:43:c2:e6:a3:ea:7e:
                    94:e5:b7:76:79:80:02:c6:42:f1:05:99:31:1b:2b:
                    47:3f:90:75:fc:dd:d0:c1:5a:04:22:40:67:bc:49:
                    ff:36:fe:3d:17:9a:eb:4c:f1:1d:68:6f:05:7d:80:
                    ca:23:3b:15:bf:6c:a6:e5:05:08:df:bd:51:d7:d8:
                    9c:0f:7b:b9:cf:2d:33:9d:08:0f:e9:bf:17:a8:f1:
                    25:f2:fa:45:0b:b0:ee:52:4f:33:9f:0a:2c:43:f8:
                    68:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:16:B8:2B:37:07:E0:AC:31:7E:B3:40:82:ED:AE:FC:C5:29:58:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/706e07a3-924c-3ec4-8447-84c539adc350.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:c2:a2:32:d3:06:3d:d9:7a:e4:17:47:c4:44:ab:57:e8:ed:
         bd:85:3b:f0:6a:73:5b:75:d1:38:0c:f8:ef:84:66:2b:6f:54:
         77:c4:60:fb:c3:3c:c3:c5:a3:fb:42:7a:5c:f1:d1:43:1c:ca:
         a0:91:84:e4:26:8c:4f:92:de:4b:9a:6a:46:c9:e2:97:e8:71:
         7e:a6:63:f7:bc:4d:36:80:0f:c8:d3:30:fe:24:b0:01:a1:76:
         9d:fb:c6:a8:10:75:61:e2:ce:92:92:fb:98:3c:1b:31:50:5d:
         65:70:50:f0:09:55:1d:de:91:13:c4:5b:8e:99:18:dc:d3:21:
         c4:16:29:14:d8:bf:8b:44:c4:17:cc:e8:41:c8:70:0a:be:01:
         0d:e6:8f:09:fa:d9:5d:5d:cd:91:44:8d:09:e3:51:0b:fa:2a:
         fb:15:3c:46:9b:b4:a0:58:92:0c:99:61:b8:25:f5:fd:3d:85:
         68:03:a8:25:1f:94:ce:99:1e:b6:ec:72:ca:77:e1:de:a2:8f:
         88:98:49:15:bd:8a:c0:50:f6:b3:87:60:6d:78:46:4a:61:e3:
         ec:94:62:a3:f1:15:de:44:f9:02:5a:6d:89:3a:c0:ed:4f:99:
         58:6b:7c:22:5d:ab:58:64:c3:4e:96:3b:76:58:a3:70:96:e4:
         06:9c:de:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 08:56:22 2025 by rpki-client