Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a45a2ce5-4a66-3163-9b69-ebf870ca4bc7.roa
File:                     a45a2ce5-4a66-3163-9b69-ebf870ca4bc7.roa (raw, json)
Hash identifier:          itezApdUTIhWazGusttobqEoopvFaax6TaF14Fdvebc=
Subject key identifier:   26:F4:B8:60:03:2F:D1:EE:89:2B:48:A8:33:2D:7C:48:87:92:A0:60
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350AF3749EEF18A92EDAF8C
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a45a2ce5-4a66-3163-9b69-ebf870ca4bc7.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     41264
IP address blocks:        104.133.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:af:37:49:ee:f1:8a:92:ed:af:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=be42902f-82e7-44e1-b18e-3a10e73c78bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4e:a1:c0:49:90:4d:93:93:1f:11:98:4f:5a:
                    ad:64:62:54:22:9b:12:41:4b:15:22:ca:96:05:6e:
                    89:15:e9:66:e1:b4:eb:b2:32:e2:f2:a6:13:cd:2d:
                    61:d9:32:42:e6:22:ee:fd:84:1f:14:d3:d6:64:40:
                    40:14:c8:d1:16:45:8c:75:12:51:2d:fa:cb:59:59:
                    36:ea:d8:6f:e1:a1:e5:a6:ed:fa:4d:ee:6a:79:a1:
                    e8:a1:ad:5a:3f:79:6e:26:ef:ed:96:e6:71:d6:48:
                    81:c4:84:2a:cd:90:66:3f:73:99:f2:fd:e0:82:41:
                    ef:06:64:51:7e:12:d4:3c:ec:31:1f:39:0c:06:86:
                    9f:00:53:a8:3d:13:54:6f:e4:cc:2b:2b:9f:29:f0:
                    c3:e8:67:ea:74:82:d9:32:81:fe:50:41:5b:5d:f7:
                    a1:82:85:62:b4:08:5f:33:31:2f:bf:f9:f1:76:b3:
                    09:2c:cc:73:fa:4c:c6:3c:5d:2c:d9:7d:45:fa:80:
                    e4:f1:fe:e9:98:76:11:c4:5b:39:ad:b0:b5:07:c1:
                    59:9c:14:bd:9f:d3:99:4c:b6:e0:b0:30:df:3b:98:
                    5a:e4:b4:a0:01:05:0a:90:6c:92:43:65:2d:bf:a9:
                    02:d8:1c:42:fa:58:2d:f7:89:5d:65:52:7b:07:72:
                    18:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F4:B8:60:03:2F:D1:EE:89:2B:48:A8:33:2D:7C:48:87:92:A0:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a45a2ce5-4a66-3163-9b69-ebf870ca4bc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:4a:fc:f3:47:43:db:e6:e8:a1:40:0c:3e:b2:ca:19:09:8f:
         88:70:48:da:49:0a:bc:9e:47:44:2e:fb:d7:38:69:b3:20:7a:
         3e:19:59:cd:27:01:71:01:ac:bb:ab:5d:f2:4b:f8:72:a5:cd:
         c4:18:67:2b:ab:cc:1f:1b:96:cd:fa:68:d6:70:58:75:ed:54:
         d8:8d:ae:58:37:9d:9b:7c:13:24:ac:6a:4f:78:57:57:ec:60:
         70:f9:96:d6:6c:cd:6e:c9:eb:13:e9:87:b8:e9:4c:46:70:18:
         35:17:c1:f5:8b:58:98:fc:2b:62:76:dd:f6:0d:0f:29:73:a2:
         54:e1:40:1f:56:d5:18:7a:38:9d:ec:64:f4:46:4a:dc:3e:9b:
         3d:93:36:f9:a3:56:08:fc:9e:5b:6a:5b:df:5c:14:9f:f6:d1:
         7e:79:e9:28:9b:0d:41:29:9c:ef:8a:04:5f:36:5e:e8:ff:50:
         5c:9f:82:b1:f4:5b:61:78:6f:d1:4d:26:54:08:5d:15:76:bc:
         1f:0d:e6:8d:8d:72:bf:34:ec:6d:fd:92:15:db:43:f1:79:94:
         0b:9d:cf:15:3e:f7:b0:28:37:6b:1d:fe:31:10:4d:eb:f9:7a:
         38:dd:92:d6:da:05:07:eb:ba:f5:4d:b4:21:b5:ed:ce:b1:40:
         d3:ff:48:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 03:07:21 2025 by rpki-client