Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/529312e5-1edf-3c98-ace4-e52543a5adf3.roa
File:                     529312e5-1edf-3c98-ace4-e52543a5adf3.roa (raw, json)
Hash identifier:          q+XuXf4cTxsF3E3+O0+ETBrHf5yOByFimTzfcockhgc=
Subject key identifier:   02:74:34:74:70:FD:9D:34:82:F3:F8:26:66:AE:99:B4:B0:57:33:B7
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B7DECBB2FC9043175C58C46C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/529312e5-1edf-3c98-ace4-e52543a5adf3.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     41264
IP address blocks:        104.132.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:bb:2f:c9:04:31:75:c5:8c:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=c44bd2cf-271a-4de2-b70b-a7777abcbf3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c0:a5:a2:79:aa:8f:8d:48:66:73:0f:91:5b:
                    c4:c5:9d:1a:71:f9:db:6f:61:22:93:35:9e:e4:c8:
                    c5:a7:ab:b7:3f:d0:e4:2c:be:24:18:e1:d3:0f:90:
                    1a:d8:88:1e:bb:43:a3:a8:f8:ed:a3:b7:dd:7e:e3:
                    df:22:14:b6:b9:0a:a9:59:f7:45:de:c8:c0:29:8e:
                    57:5f:f1:48:a9:8e:6b:7d:6d:f8:e3:7d:af:dd:f3:
                    24:b0:9c:ce:60:41:ef:f4:86:c1:ef:0f:9e:22:82:
                    ec:c8:b3:b3:73:be:f4:61:ba:1c:e4:da:6c:26:e5:
                    8e:06:1e:fa:2f:ae:23:d7:f5:2d:84:84:36:1e:fc:
                    aa:ab:94:59:eb:d2:43:af:51:91:59:7c:63:f7:f6:
                    78:6d:db:22:76:e4:84:fb:a4:f2:3c:3e:50:0f:bf:
                    3a:d1:52:3c:38:96:2d:84:ae:b2:bf:97:16:7c:37:
                    7e:82:1d:54:5d:19:1f:ce:9e:b2:f5:ce:bf:04:b1:
                    86:af:32:16:bd:9d:ba:c5:c0:26:f2:6c:09:18:c8:
                    0e:d7:19:aa:07:56:8d:59:eb:a8:7c:69:ac:d1:79:
                    6c:c9:af:de:8c:d5:ea:c3:e1:66:66:52:f3:b6:bf:
                    be:58:03:ea:67:37:c2:a1:5b:3a:9e:ea:f4:5e:9e:
                    91:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:74:34:74:70:FD:9D:34:82:F3:F8:26:66:AE:99:B4:B0:57:33:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/529312e5-1edf-3c98-ace4-e52543a5adf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:00:b6:83:e2:52:0a:55:8d:dc:37:d4:d2:12:fa:22:51:cb:
         07:a5:4c:e3:51:7d:f1:8c:c0:fc:cb:21:ca:72:f1:5a:48:fe:
         64:b2:6d:b6:e3:f8:9e:20:ee:78:b4:1e:08:55:9b:92:93:81:
         75:34:62:e9:37:3c:dc:9f:86:6d:64:4f:90:89:85:04:94:26:
         d2:d8:1c:bb:79:17:7e:89:37:d2:5a:b2:55:bf:51:ff:19:f3:
         8e:e3:23:ab:13:79:4f:04:8f:c0:85:e5:a5:45:3b:cd:53:ff:
         05:3c:2c:17:66:61:1f:9a:12:5d:60:85:ba:35:17:ad:ca:38:
         b5:82:38:22:2f:e1:33:8e:7a:8c:c6:45:91:f7:82:78:54:74:
         48:96:c9:56:78:76:18:d3:76:eb:01:b2:10:57:22:bf:9f:7b:
         ed:9a:b2:43:78:f5:dc:8a:39:06:90:06:01:a0:df:85:ef:6f:
         88:be:50:4c:0c:b1:28:30:24:c1:14:24:a0:02:28:20:4d:c0:
         d5:73:43:b3:65:9d:ee:e9:5f:d2:35:15:c7:23:d0:84:f3:aa:
         30:57:8a:af:6d:6d:19:6c:a7:db:a3:31:c0:25:b4:a3:59:0d:
         9f:93:e8:ab:c9:24:b8:70:06:13:64:89:db:e3:b0:00:08:bb:
         9f:0a:ec:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97LsvyQQxdcWMRsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk
YzQ0YmQyY2YtMjcxYS00ZGUyLWI3MGItYTc3NzdhYmNiZjNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8Clonmqj41IZnMPkVvExZ0acfnbb2EikzWe
5MjFp6u3P9DkLL4kGOHTD5Aa2Igeu0OjqPjto7fdfuPfIhS2uQqpWfdF3sjAKY5X
X/FIqY5rfW34432v3fMksJzOYEHv9IbB7w+eIoLsyLOzc770Yboc5NpsJuWOBh76
L64j1/UthIQ2Hvyqq5RZ69JDr1GRWXxj9/Z4bdsiduSE+6TyPD5QD7860VI8OJYt
hK6yv5cWfDd+gh1UXRkfzp6y9c6/BLGGrzIWvZ26xcAm8mwJGMgO1xmqB1aNWeuo
fGms0Xlsya/ejNXqw+FmZlLztr++WAPqZzfCoVs6nur0Xp6RRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAJ0NHRw/Z00gvP4JmaumbSwVzO3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNTI5MzEyZTUtMWVkZi0z
Yzk4LWFjZTQtZTUyNTQzYTVhZGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIT/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHAAtoPiUgpVjdw31NIS+iJRywelTONRffGMwPzLIcpy8VpI/mSybbbj
+J4g7ni0HghVm5KTgXU0Yuk3PNyfhm1kT5CJhQSUJtLYHLt5F36JN9JaslW/Uf8Z
847jI6sTeU8Ej8CF5aVFO81T/wU8LBdmYR+aEl1ghbo1F63KOLWCOCIv4TOOeozG
RZH3gnhUdEiWyVZ4dhjTdusBshBXIr+fe+2askN49dyKOQaQBgGg34Xvb4i+UEwM
sSgwJMEUJKACKCBNwNVzQ7Nlne7pX9I1Fccj0ITzqjBXiq9tbRlsp9ujMcAltKNZ
DZ+T6KvJJLhwBhNkidvjsAAIu58K7DM=
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:06:25 2025 by rpki-client