Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba5383e6-ea95-3586-ab25-2ba523d21d63.roa
File:                     ba5383e6-ea95-3586-ab25-2ba523d21d63.roa (raw, json)
Hash identifier:          lIzClS5RsNdkozyOMks2Uew5heP0atqsRN9Vx6B6kJw=
Subject key identifier:   74:37:77:E6:60:6B:2D:63:6F:BA:C1:29:1F:6B:73:51:16:BB:5D:1C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A70861CB5C76374501673D140
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba5383e6-ea95-3586-ab25-2ba523d21d63.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     41264
IP address blocks:        104.132.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:86:1c:b5:c7:63:74:50:16:73:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=794ca5c2-39f3-4be0-b4ac-c975ebff1767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9c:08:b4:0f:58:3a:ee:d5:96:72:b7:19:09:
                    e2:c5:08:ee:86:9a:29:88:67:d9:9b:90:42:d4:51:
                    b0:ea:c7:ee:4e:f8:71:06:e8:64:f2:03:46:18:5d:
                    0f:4b:7e:5b:ca:15:39:74:84:42:2f:76:5a:e0:71:
                    04:e2:4d:af:dd:46:69:93:92:e7:0d:bd:cc:f6:0f:
                    2c:01:ad:f4:f7:aa:ac:58:d0:12:13:0f:7b:dd:1f:
                    e2:6b:11:2f:a7:04:01:da:e8:19:5b:b3:d1:61:45:
                    a2:ce:b4:c8:0b:ab:c3:b2:c2:6b:0f:75:80:de:26:
                    6a:b7:4e:d1:30:53:17:8e:c9:cc:ef:b7:c6:49:b3:
                    32:e0:2b:90:8d:c6:1f:68:98:a2:0a:bf:7a:29:a6:
                    e2:6e:35:25:82:bc:50:20:af:ae:64:b5:21:71:f0:
                    a8:d5:f5:50:57:98:fb:15:63:da:e2:48:6f:f0:b4:
                    74:e4:9d:54:37:b0:f7:8a:cc:c0:2e:ae:00:2c:bc:
                    b3:38:a0:8c:19:ad:3a:83:78:b1:9f:2a:4f:13:70:
                    aa:64:ff:58:eb:b6:79:df:85:39:be:85:de:d9:1c:
                    d2:d6:53:5d:c5:7a:85:fa:f9:57:c3:df:56:e7:d6:
                    bf:15:ac:d0:07:f1:58:52:e5:56:4a:e7:19:f9:81:
                    af:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:37:77:E6:60:6B:2D:63:6F:BA:C1:29:1F:6B:73:51:16:BB:5D:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba5383e6-ea95-3586-ab25-2ba523d21d63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:8c:ac:de:98:43:ed:bb:19:6e:03:e0:f2:10:68:9c:27:18:
         ac:0f:53:fb:c2:8d:a2:e5:d2:63:3f:2d:0d:2f:6b:d7:fe:ac:
         a1:ca:fd:36:df:8c:8f:7b:d2:01:ab:16:b7:f2:d7:e5:f8:38:
         40:cd:f0:69:69:03:e3:4c:d2:39:d5:f3:d7:88:6c:fc:d9:3b:
         f3:d9:9e:48:78:4c:36:76:cd:22:3b:6e:09:83:77:aa:2f:1c:
         ad:c2:42:59:24:88:1a:2c:1c:11:2d:2d:c8:60:8a:45:74:dd:
         49:c6:ba:a9:c5:6e:73:f7:11:13:f0:9e:a0:f5:48:8a:f1:7f:
         65:8c:44:0c:eb:04:c1:52:49:18:1c:d4:05:2a:65:67:f6:a0:
         09:75:0d:90:ad:37:80:2f:0d:eb:ba:9d:b6:ba:73:86:bd:ce:
         cd:ae:66:1b:48:a3:1b:d1:d9:0a:eb:f1:2d:7c:9e:62:48:1a:
         a8:9a:cd:30:b5:4e:7f:32:ab:04:84:0b:b7:65:8d:ef:3f:d6:
         6e:7b:f3:43:d0:fe:cd:09:10:a7:fd:3b:d4:ce:fc:ab:e4:64:
         17:d6:c0:c0:58:32:c9:37:11:41:2a:be:05:92:38:74:c4:9a:
         92:8e:b9:49:2d:2b:df:82:ff:d7:c7:f1:01:10:78:15:5b:53:
         66:45:22:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 10:55:40 2025 by rpki-client