Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/90f07048-d07f-3ba8-aa11-409ee5710b01.roa
File:                     90f07048-d07f-3ba8-aa11-409ee5710b01.roa (raw, json)
Hash identifier:          kdiavk1OQsro/JASBUU0T0F1+PmLtvHfTKxdj2aIi2g=
Subject key identifier:   54:8E:A2:79:78:99:29:83:A9:B5:31:4C:41:86:A9:C0:BA:21:19:48
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A374AE402A471A921F7BEFA80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/90f07048-d07f-3ba8-aa11-409ee5710b01.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     395973
IP address blocks:        104.134.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:e4:02:a4:71:a9:21:f7:be:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=36d839c2-e12e-4ce4-9aec-3914c2b4ca4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3a:c6:3b:f3:0f:d5:66:f3:db:c9:64:be:48:
                    c4:f5:c7:e0:17:3f:8a:53:b3:bb:39:4f:b6:54:27:
                    12:75:c4:b2:c6:66:8e:09:ab:6e:cf:48:6c:de:96:
                    42:af:0d:3e:9d:e2:61:d0:18:b4:79:a3:20:ef:66:
                    bf:e5:84:a9:2e:1c:cf:9f:f6:2d:1d:94:dd:ca:d0:
                    0c:b5:ae:0a:90:8d:95:d9:4c:22:56:d1:be:9c:d0:
                    06:13:9d:d7:9c:7f:96:f8:80:18:bf:d0:54:97:c9:
                    40:b7:61:c0:57:13:50:54:fe:56:c8:17:f0:91:d6:
                    33:31:a8:ff:94:d8:7d:32:55:69:28:73:43:d4:d6:
                    18:d8:4f:14:31:62:28:df:89:43:33:74:2c:86:69:
                    ed:6d:7b:76:27:f9:3e:e7:61:a2:f9:97:1b:29:d7:
                    6b:5f:cf:e2:26:97:4c:6b:3d:48:11:89:44:cf:66:
                    bb:4d:01:a4:17:b0:b7:cf:c3:c3:99:05:5f:76:f0:
                    bb:d5:73:d6:67:05:98:db:fb:1f:9b:45:a8:7f:c5:
                    f8:85:f4:a4:42:2b:7d:a6:d5:45:7d:63:09:4f:c2:
                    a2:79:ac:b7:a6:49:9c:84:ea:d6:d3:66:8e:35:d5:
                    fb:66:4a:0a:8e:05:cf:d6:85:5e:09:bc:4e:39:18:
                    f4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8E:A2:79:78:99:29:83:A9:B5:31:4C:41:86:A9:C0:BA:21:19:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/90f07048-d07f-3ba8-aa11-409ee5710b01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:47:80:43:f4:04:84:4c:91:de:31:e8:fb:e5:5c:0a:c9:61:
         52:11:47:42:79:d6:66:85:39:82:e0:96:13:6b:da:c9:90:e6:
         87:6b:3e:7d:a7:95:25:2d:3d:a9:91:dd:d7:be:d6:66:df:d3:
         38:fd:ad:6f:f6:a7:25:e9:9b:fa:a7:48:3d:2d:7b:e5:60:32:
         4a:9a:08:da:db:0a:7a:34:69:f9:42:b6:d7:0a:2c:21:22:a9:
         da:05:7d:7a:5b:c5:6c:c5:81:37:4d:a4:dd:93:84:38:59:11:
         ca:23:5e:5f:91:36:08:36:ae:60:57:bd:04:62:e8:a6:54:81:
         81:4f:81:86:f7:ad:96:8d:7d:89:c1:84:55:97:4a:8f:86:7c:
         e7:c3:b2:4a:a4:30:8e:81:0b:35:ff:50:48:2f:76:fe:4b:32:
         7c:ca:ed:63:62:fb:60:36:ef:e1:e6:2b:7e:a5:28:ba:46:52:
         f1:71:52:dc:4c:b4:c4:6e:dd:7d:55:e2:4e:7d:bd:67:c7:d9:
         bf:16:d5:05:b0:b1:d4:de:b7:2e:1e:4e:15:9e:6f:62:84:7b:
         f3:05:b0:ce:86:de:35:c0:5c:5e:4f:0b:de:9b:58:ce:9e:e5:
         e5:86:8a:1e:fd:a9:e6:6f:a4:b0:fb:e9:23:76:dc:36:ad:bf:
         b0:53:ea:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:23:29 2025 by rpki-client