Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/47b622a2-d750-3c73-819d-f6bcdc12c0d8.roa
File:                     47b622a2-d750-3c73-819d-f6bcdc12c0d8.roa (raw, json)
Hash identifier:          OnhLdnY1AXz6TlFU4PKZMWU2dRfND1yF59+OVZfrg2o=
Subject key identifier:   3F:F3:EB:D0:47:F2:76:C9:DD:6C:F4:C8:BF:E6:B2:7B:32:D5:C3:A8
Certificate issuer:       /CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef
Certificate serial:       010D0C9F4328584BA9326BB5AC68D7D60883DF80
Authority key identifier: 04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/47b622a2-d750-3c73-819d-f6bcdc12c0d8.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     14397
IP address blocks:        104.251.115.0/24 maxlen: 24
                          104.251.116.0/24 maxlen: 24
                          104.251.117.0/24 maxlen: 24
                          104.251.118.0/24 maxlen: 24
                          104.251.121.0/24 maxlen: 24
                          104.251.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:6b:b5:ac:68:d7:d6:08:83:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=9eda2088-274e-4899-889a-4b8a33d2854b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0f:60:4b:f7:18:69:ff:8b:15:18:c3:03:68:
                    29:9b:97:1a:4f:33:85:a2:3a:77:8a:43:9a:9e:5d:
                    8e:e7:fb:f1:dc:6b:7f:6b:5b:a7:c6:74:90:f1:1a:
                    f7:e6:19:e8:55:04:ef:e7:97:34:90:f2:4e:d5:e9:
                    de:92:0a:9a:fb:22:7f:d9:14:fb:b8:4e:30:76:f6:
                    c7:09:c9:38:f9:b3:d6:3a:5f:de:bc:4a:ff:1b:b0:
                    3f:51:61:0d:e6:1d:c3:e6:95:1e:a3:6a:82:d7:82:
                    2c:76:62:ca:af:38:5f:0b:77:c7:1e:97:28:e5:80:
                    7d:52:a2:6d:6f:d3:6b:97:5c:a0:f8:ac:da:a6:85:
                    3b:9b:d2:36:f4:56:e6:23:32:e3:00:09:42:78:21:
                    56:4e:8b:81:92:1d:2e:3f:43:eb:2f:5c:8b:4f:cf:
                    d2:7e:2c:77:1a:b7:94:f7:73:27:51:2a:b2:58:73:
                    6e:07:44:43:de:df:d3:f2:7d:48:b6:c3:ec:ae:be:
                    29:99:74:49:f3:d4:19:18:77:e4:a0:d9:2b:54:1a:
                    29:0f:cd:1f:fe:f1:b9:8c:48:f1:55:eb:c8:b3:7b:
                    d3:fa:cf:25:f4:2a:3e:3c:4a:ab:a4:c0:8e:94:09:
                    16:d6:56:05:5c:5f:5b:ea:a7:d5:eb:d8:e2:22:21:
                    23:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F3:EB:D0:47:F2:76:C9:DD:6C:F4:C8:BF:E6:B2:7B:32:D5:C3:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/47b622a2-d750-3c73-819d-f6bcdc12c0d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.crl

            X509v3 Authority Key Identifier:
                keyid:04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.115.0-104.251.118.255
                  104.251.121.0/24
                  104.251.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:38:6d:58:d4:f1:26:df:fe:af:d9:ed:f4:f4:78:74:3a:14:
         d7:d6:67:31:e4:1d:fd:2d:a2:21:ac:f4:bb:f1:d7:d0:52:e8:
         b5:cb:30:dd:1e:d1:90:e7:94:20:bf:02:49:eb:cc:91:29:d7:
         76:dc:81:a3:b1:9c:15:68:d5:34:a2:be:8f:cb:25:fc:ba:10:
         fe:69:18:81:6a:02:30:1e:8c:c5:e2:42:ad:4d:9c:48:3c:d8:
         b0:6d:df:0a:cf:c1:db:7f:5e:85:ec:cf:79:f2:3d:a3:0e:0d:
         77:13:b9:2b:8d:6e:02:06:30:d9:b5:18:55:6a:ed:40:05:3f:
         b9:89:8a:57:e5:fc:76:6b:d7:3a:1b:92:4f:da:e7:3a:ea:0a:
         2a:af:24:bd:78:4f:60:75:d0:ca:18:2c:b9:22:63:31:44:8e:
         75:07:31:f8:b4:52:0f:d9:d6:07:cb:de:fc:5f:d7:4f:89:5a:
         ec:64:fc:60:83:46:b6:b0:a4:b9:a2:0f:c7:e6:b5:bc:c0:5a:
         65:f7:e4:f0:cc:77:a8:f6:53:07:7d:da:73:ce:ac:3f:58:49:
         8d:23:47:54:77:4b:e5:ce:f7:5e:2c:9b:7d:0f:03:3a:b1:0a:
         39:a0:80:1c:17:d0:f0:5c:a2:46:b8:f5:22:3c:60:d6:ed:92:
         fa:94:8f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:28:14 2025 by rpki-client