Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/366add4e-4606-37ef-ab68-41519dad2292.roa
File:                     366add4e-4606-37ef-ab68-41519dad2292.roa (raw, json)
Hash identifier:          w3ASiiPwP11/91ICq5zb7nP3Yh5obziNnFkP5cpZoLs=
Subject key identifier:   9F:4D:29:52:30:48:C5:CF:D0:B7:F8:42:59:6F:DF:CF:14:39:0F:A2
Certificate issuer:       /CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
Certificate serial:       010D0C9F4328584B80B7679C9D2D03429EF5C490
Authority key identifier: 10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/366add4e-4606-37ef-ab68-41519dad2292.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     133530
IP address blocks:        104.192.136.0/21 maxlen: 24
                          2620:136:6000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:67:9c:9d:2d:03:42:9e:f5:c4:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=4a778004-100a-4fb4-abab-2045723f6a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5f:a1:cc:6c:29:76:f2:0f:64:ab:c3:5f:71:
                    fc:24:ae:50:58:1a:c3:e3:15:34:f3:3e:ed:11:04:
                    93:f3:b9:89:0c:66:fd:70:b4:b9:57:a8:ab:18:7d:
                    16:27:73:19:b9:70:52:ca:94:93:bf:3f:8a:a9:90:
                    cb:37:65:9b:8e:7d:dd:ca:9b:6b:c5:91:4c:3f:a2:
                    84:c7:26:1c:8a:41:fe:24:e8:84:30:4e:e9:3f:02:
                    6b:94:1a:43:92:c1:ce:78:0e:a6:eb:c6:6e:d7:2a:
                    03:86:d4:eb:ed:82:35:20:b9:ca:f5:08:ae:3d:84:
                    65:c5:e9:8b:10:08:41:0d:6d:4a:c0:ac:a2:bc:d3:
                    e9:22:d0:57:d8:17:9f:8d:88:97:7a:c6:17:9c:d9:
                    70:82:6e:c5:07:c5:1e:6a:e5:8b:6c:75:6b:07:ff:
                    09:60:02:48:52:49:5d:24:15:b1:0a:3c:56:5a:f6:
                    ac:39:84:70:b6:f2:f4:75:af:b2:31:7a:14:06:00:
                    46:57:cc:83:6a:d4:89:9d:22:66:f8:30:1e:0c:df:
                    32:48:ba:c4:a5:40:e2:ab:ab:40:a5:a1:0a:b7:08:
                    92:11:cc:a5:58:7f:31:3a:a9:e2:cb:b6:c7:a7:a5:
                    61:08:64:40:a2:b4:6e:bc:fa:69:7e:b8:54:a4:f1:
                    ef:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:4D:29:52:30:48:C5:CF:D0:B7:F8:42:59:6F:DF:CF:14:39:0F:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/366add4e-4606-37ef-ab68-41519dad2292.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl

            X509v3 Authority Key Identifier:
                keyid:10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.136.0/21
                IPv6:
                  2620:136:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:51:79:78:b2:7b:27:61:eb:f2:86:58:ad:cd:60:1e:2d:9d:
         48:48:45:26:ae:b5:35:33:c8:46:2c:d6:5c:77:19:78:fe:a5:
         7f:3b:b0:02:55:4e:41:fa:64:e1:4a:db:0b:49:d3:e1:82:8b:
         90:6a:20:32:b7:41:07:dc:61:2f:9f:3a:d9:71:6e:48:2f:2f:
         3a:b0:7f:ed:35:be:24:e7:8c:f5:ed:02:d5:f1:03:a1:fa:5c:
         f7:2e:15:4c:16:b9:22:d8:ed:35:4e:8b:4f:44:e4:a0:7d:0d:
         de:36:9f:97:ed:3a:8f:d9:c2:17:b1:9b:47:f0:e8:9e:65:aa:
         ea:b6:6f:a3:de:41:f9:72:e0:2c:10:06:4f:a0:7f:25:1c:f4:
         7f:65:f3:2f:35:8c:f8:6a:2e:63:08:45:92:15:d3:72:c0:03:
         44:c2:b0:15:04:65:65:73:4e:6c:4a:7f:5e:16:d0:d8:0b:89:
         29:24:a9:81:42:a0:36:82:45:65:c8:35:dc:5e:1c:65:a9:22:
         aa:1a:70:c4:d0:86:92:a4:89:a8:d2:7b:09:4b:41:61:49:2a:
         23:d4:0c:55:0a:92:0a:61:52:aa:84:3a:4a:f8:f9:de:27:7e:
         86:1b:48:42:77:0f:e2:bf:85:74:6d:6e:e4:52:4e:63:e0:1d:
         95:18:43:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:34:27 2025 by rpki-client