Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f81423fc-2fe1-3a00-8c04-903436fb49bd.roa
File:                     f81423fc-2fe1-3a00-8c04-903436fb49bd.roa (raw, json)
Hash identifier:          5xT2kwRb6PEGsvb0ihxHY3Xe21p+N6ZBfdthJwXBC2I=
Subject key identifier:   30:01:A4:BD:F9:9C:5A:1D:44:B9:19:94:D6:20:4F:96:44:C5:DD:52
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A70861A9FD7C381DCF602FF00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f81423fc-2fe1-3a00-8c04-903436fb49bd.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     41264
IP address blocks:        104.133.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:86:1a:9f:d7:c3:81:dc:f6:02:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=37b5aac3-7fb4-422b-b482-fbd08982983a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e1:10:aa:1c:f5:a0:44:a2:63:8a:b7:35:a8:
                    fe:3b:f6:b7:82:c8:f8:03:86:5a:cb:d9:ee:ec:14:
                    65:65:85:30:6a:f4:9f:9b:9d:b4:62:4a:5c:12:6a:
                    7a:50:19:86:00:91:c0:4d:00:f5:b8:7c:e0:6d:63:
                    8f:d9:48:39:4c:b2:5a:b8:1f:af:81:4e:ef:3b:35:
                    8b:26:bb:e2:a8:a3:03:52:5d:06:66:99:97:8e:bf:
                    bc:08:59:fa:db:87:f0:a1:8c:d6:a7:83:14:1e:14:
                    db:16:a4:a2:43:44:31:15:8a:a7:f1:c4:20:8d:69:
                    df:e4:50:0a:ec:24:38:54:69:01:66:8f:64:8b:79:
                    cf:a8:00:2e:ea:d6:49:e4:59:bc:56:37:d9:a7:c2:
                    eb:d6:54:7e:0a:41:0e:02:1c:78:f7:27:88:d4:7c:
                    fd:04:a9:96:bd:39:27:a6:88:94:d5:79:ea:59:29:
                    98:db:bc:7c:2d:31:6c:24:70:db:31:13:0f:a4:db:
                    18:02:86:de:4e:10:a8:0e:68:73:4b:59:c7:0d:a7:
                    15:7b:33:d4:b2:28:d2:65:15:93:8b:62:a6:45:96:
                    f3:e9:de:14:00:3a:17:c4:d5:34:78:1c:ea:6d:51:
                    8a:63:22:4c:9d:03:66:e5:24:17:0e:83:f7:c1:6a:
                    67:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:01:A4:BD:F9:9C:5A:1D:44:B9:19:94:D6:20:4F:96:44:C5:DD:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f81423fc-2fe1-3a00-8c04-903436fb49bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:99:10:08:72:2f:76:10:1c:e7:4f:8e:91:8b:b7:a0:2b:65:
         c4:82:24:f5:b7:a6:06:b5:37:d3:4a:b5:70:d9:ee:c7:30:ec:
         c0:4a:c6:f5:be:b9:d5:9d:b7:8d:b1:5b:45:9e:9e:8c:dc:7e:
         51:38:dc:d0:21:c7:c1:3e:aa:bc:8b:7d:80:4f:7f:a6:be:2a:
         44:ba:e9:0a:15:03:02:9f:4b:ae:aa:5a:f7:69:35:1d:4a:69:
         3e:d2:1d:d3:e6:43:75:82:27:36:ee:47:7e:4f:b4:69:f3:50:
         0b:80:60:ec:07:a4:3f:69:da:f3:20:b8:13:95:3d:bd:bb:00:
         a6:3c:9e:75:b5:c6:3b:a5:f2:82:38:7e:29:5d:09:ab:c2:9a:
         de:dc:f8:5d:4d:8f:d5:bb:35:4f:73:15:9c:e4:6a:ae:fc:f4:
         83:2e:fd:c5:3e:3d:83:f5:c5:84:c5:4f:09:db:08:c6:5a:1b:
         95:1b:47:39:ce:24:81:97:96:f1:7a:e4:5d:0f:6b:69:c9:e1:
         ca:3d:fa:95:24:8d:9b:23:34:93:3d:4c:71:13:35:60:1b:ce:
         de:af:00:91:56:43:a5:22:2b:c1:72:9c:d8:90:0a:89:73:1c:
         dc:e1:bf:f6:c3:70:77:c2:8a:31:80:bc:43:46:36:b9:c5:90:
         32:85:7c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 02:30:03 2025 by rpki-client