Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d7872f30-6f1a-3942-87ee-105bb81ee2e8.roa
File:                     d7872f30-6f1a-3942-87ee-105bb81ee2e8.roa (raw, json)
Hash identifier:          ny14zmKWLLWObnI+LGP7VZLhSfT9ZcQ9Kbt4sgYRi5I=
Subject key identifier:   33:3C:38:FC:1D:F4:F8:38:00:54:0A:A5:82:E4:F0:7C:14:12:6E:68
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B973C1AD8ED9BE62EA3B78DC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d7872f30-6f1a-3942-87ee-105bb81ee2e8.roa
Signing time:             Tue 21 Oct 2025 02:35:52 +0000
ROA not before:           Tue 21 Oct 2025 02:35:52 +0000
ROA not after:            Mon 19 Jan 2026 03:35:52 +0000
asID:                     15169
IP address blocks:        104.134.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:3c:1a:d8:ed:9b:e6:2e:a3:b7:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Oct 21 02:35:52 2025 GMT
            Not After : Jan 19 03:35:52 2026 GMT
        Subject: CN=2ad54158-2884-4569-9789-b47c26ec7400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b1:0d:74:88:ca:b2:4d:f9:ac:eb:68:0e:b9:
                    6c:ef:bd:7d:39:61:b8:52:ce:8c:48:80:a5:6d:ea:
                    92:c1:25:60:23:3f:fe:bd:61:78:2d:83:79:d4:f4:
                    43:41:37:af:bb:73:c4:a1:35:86:e8:62:1d:21:6b:
                    ff:c6:28:35:88:4b:dc:81:2c:fe:2b:da:d1:ca:d1:
                    88:75:6f:52:95:a3:cd:f6:43:a8:b7:94:f9:e4:8e:
                    a8:6e:47:ed:21:10:bc:41:6e:54:f6:13:5a:be:4e:
                    47:21:5a:be:ed:32:e0:52:7d:85:6a:3d:1c:47:a6:
                    da:10:0d:c0:b7:84:e1:3d:8a:f0:e8:88:e0:ac:26:
                    b6:9a:13:ef:c7:53:46:e9:2f:5a:f5:0c:c7:d4:08:
                    f2:82:2b:e5:b4:35:e2:df:69:03:ea:0d:12:40:b8:
                    64:37:18:bb:83:b9:3a:75:71:54:49:01:d5:1e:1c:
                    bc:ae:8e:b1:a2:65:ec:fe:96:fa:e7:0e:ee:c2:8e:
                    99:ca:d3:e8:4d:32:0d:9c:af:ce:9d:b8:17:33:cd:
                    37:5c:fc:1e:3b:fe:d5:74:c7:51:f6:2e:ef:d9:ac:
                    8c:ac:58:53:65:b3:a9:6f:a9:9d:1c:08:ba:a8:64:
                    49:9c:45:e1:2a:e6:ff:c1:ac:0a:9f:97:93:1c:9f:
                    49:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:3C:38:FC:1D:F4:F8:38:00:54:0A:A5:82:E4:F0:7C:14:12:6E:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d7872f30-6f1a-3942-87ee-105bb81ee2e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:aa:dc:d1:dd:ef:f5:6b:c2:f3:f5:d9:7d:88:9a:a2:b3:c1:
         a9:77:78:10:9a:b3:e4:81:f0:39:11:69:a5:32:bd:63:1b:ce:
         65:2a:f5:74:3a:97:8b:13:f6:89:60:2a:c4:1e:93:96:cd:54:
         7b:fe:8e:8a:58:93:4f:4f:d8:9a:fa:fc:4a:5e:b9:db:5a:bb:
         94:15:f1:55:87:0f:7c:ea:e3:4f:d8:7a:cd:71:f9:70:dd:8b:
         da:4b:a0:c7:eb:b2:af:d9:d9:2e:e0:df:98:0f:29:fc:23:9b:
         54:77:a2:89:02:93:6d:79:9f:13:fa:bf:96:4c:1a:e8:ad:f6:
         20:aa:0c:52:be:24:b6:07:2d:21:19:19:1e:6e:27:d4:8a:51:
         45:5a:af:78:c5:58:22:0b:bc:1c:62:7c:a6:c3:59:1d:07:5d:
         e7:3e:49:33:c9:d1:b9:07:ee:d4:9f:25:65:b5:08:76:00:71:
         ac:3a:e3:ed:b2:32:28:7d:fb:e8:d0:b6:52:aa:5c:2a:62:35:
         c0:4f:b8:17:3c:21:a5:22:05:40:0b:e2:ee:79:10:ce:48:0a:
         50:df:9b:99:e8:34:65:f9:d5:b0:71:cc:f4:34:35:88:c4:5e:
         df:78:7e:7a:cb:d0:8b:e0:be:70:81:41:51:17:fe:85:05:91:
         2d:57:ad:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:12:23 2025 by rpki-client