Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/84343704-c93f-31bb-ae2f-4e88f3e7612a.roa
File:                     84343704-c93f-31bb-ae2f-4e88f3e7612a.roa (raw, json)
Hash identifier:          WAZQvx1RYQWKX3HAYTBg0pINPn5l3CzKmjP30xO7NZE=
Subject key identifier:   71:39:51:5B:9A:1E:90:B4:68:19:58:1A:FB:13:21:F6:8D:6E:60:C2
Certificate issuer:       /CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
Certificate serial:       010D0C9F4328584ACE0B946D9EC17CC779E10480
Authority key identifier: 10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/84343704-c93f-31bb-ae2f-4e88f3e7612a.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     16509
IP address blocks:        104.192.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:94:6d:9e:c1:7c:c7:79:e1:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=7fcc45bc-4c03-4f2d-b2cf-07463d8a3217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:84:79:da:e8:74:c1:90:c1:86:4e:a9:bc:34:
                    f5:02:db:da:cb:2f:56:7a:91:55:34:30:f2:b8:70:
                    a8:db:d7:a9:13:1f:d8:b9:fe:e6:68:66:7e:5b:1e:
                    a0:17:99:26:07:f2:3c:fe:a5:1c:62:7d:64:d1:68:
                    7e:e3:33:4a:98:e0:17:09:36:87:8f:83:90:00:a6:
                    f2:0c:2a:1b:7f:e4:3d:3b:d2:5a:16:73:ac:af:11:
                    86:9c:4a:4c:f5:b5:70:d8:29:8e:4f:88:2a:0b:69:
                    e1:76:6d:03:92:23:e6:03:6c:36:c4:7f:c5:17:16:
                    53:f3:8b:05:78:cf:84:01:39:26:1b:28:14:fc:39:
                    72:66:19:1d:04:d0:9a:ed:0a:0d:dc:1b:2c:1f:5e:
                    90:c4:b8:71:72:54:55:16:d4:33:04:17:ea:9e:f8:
                    ce:18:d0:de:2f:89:d8:b4:77:55:7b:53:3e:df:09:
                    fe:5a:27:29:23:dc:91:4f:4a:76:0e:9a:d5:68:8f:
                    57:0b:ac:a9:7a:d0:81:21:d4:7e:3f:a5:b1:70:34:
                    1a:30:9c:bd:ed:5e:d3:54:cc:f6:f0:50:36:bd:15:
                    17:12:9e:3b:07:8d:65:40:2e:bf:9a:f4:f1:c5:c2:
                    23:cf:4e:34:1b:83:cd:ac:80:f0:00:2b:4d:2b:b6:
                    1a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:39:51:5B:9A:1E:90:B4:68:19:58:1A:FB:13:21:F6:8D:6E:60:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/84343704-c93f-31bb-ae2f-4e88f3e7612a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl

            X509v3 Authority Key Identifier:
                keyid:10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:20:c5:7f:1c:90:56:e4:46:6f:55:5a:7c:0d:fe:0c:73:ee:
         7c:bc:d9:cc:91:53:cf:9b:4b:c4:0d:5c:eb:18:39:63:87:f7:
         b9:49:d1:b6:3d:8b:9d:03:d5:72:10:6c:02:3d:ba:9a:8d:d7:
         3c:e7:ed:53:a4:fc:0f:25:43:57:ab:3f:00:65:b9:97:24:90:
         36:e5:11:c1:31:49:c8:fd:7f:99:c9:ca:17:5d:d1:ec:d8:64:
         c7:58:2c:d7:21:f6:1b:cb:b2:fe:39:9b:a3:11:15:8d:ef:56:
         cb:05:be:5f:33:36:2c:a3:25:ed:ba:18:77:05:11:2f:43:85:
         5c:9d:92:68:2b:f2:9b:55:da:40:95:d1:f6:0b:18:4b:35:81:
         12:d2:9e:ba:74:ee:55:f3:5e:73:d4:6b:cb:76:4d:7d:6a:91:
         9b:da:a9:e8:64:5c:d9:0c:af:e3:25:42:c3:77:58:06:ad:f3:
         0c:6d:40:0e:76:69:4d:4b:ef:50:3b:4c:b1:3b:11:e0:e6:10:
         90:0d:0c:22:4d:53:c6:5c:ad:9b:97:ab:b1:9a:c0:7f:43:50:
         ff:74:15:bd:82:57:f8:d2:fe:8c:bf:cf:74:2c:25:50:f3:8d:
         63:8c:7e:74:21:94:cf:b3:bc:98:f1:f7:bd:c1:00:3e:d3:1a:
         ea:86:0f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:01:27 2025 by rpki-client