Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c000fb37-c157-3af1-b021-68e2624008f6.roa
File:                     c000fb37-c157-3af1-b021-68e2624008f6.roa (raw, json)
Hash identifier:          1TvCwscXSO30TBI8TNcgKYO01WKwxLhG6AFgg+C3MbA=
Subject key identifier:   77:C6:D5:0A:E1:26:5C:18:DC:F4:C5:E2:81:0B:84:91:B5:E3:DD:F7
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B776BD451FD56A6A154288700
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c000fb37-c157-3af1-b021-68e2624008f6.roa
Signing time:             Thu 09 Oct 2025 17:06:09 +0000
ROA not before:           Thu 09 Oct 2025 17:06:09 +0000
ROA not after:            Wed 07 Jan 2026 18:06:09 +0000
asID:                     19115
IP address blocks:        104.138.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:77:6b:d4:51:fd:56:a6:a1:54:28:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  9 17:06:09 2025 GMT
            Not After : Jan  7 18:06:09 2026 GMT
        Subject: CN=4d288edc-b910-47b2-82bc-984f86c60a9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d0:52:42:09:53:59:c2:1b:ed:17:48:77:92:
                    c9:04:16:7a:8a:e7:01:d4:cd:74:59:78:e3:9d:cd:
                    ee:35:f2:a8:c8:09:44:29:41:2d:27:db:b9:a8:64:
                    3e:be:8b:bc:f2:6f:bd:44:36:80:09:3c:97:cd:87:
                    73:a4:c5:3c:99:12:96:a4:03:33:1a:77:a1:a1:63:
                    d4:5e:19:83:7d:5c:bf:fe:ef:63:17:05:5d:fb:95:
                    72:b6:be:b8:0b:6a:3e:46:71:f0:d7:a9:0c:96:85:
                    bf:9e:7a:0b:a0:bb:20:ab:d5:80:68:d7:ef:8c:46:
                    16:57:81:4c:c9:c6:b2:93:66:55:a7:b2:bb:e5:9d:
                    57:9f:57:f0:9d:62:35:07:49:28:ef:94:e9:b7:55:
                    1e:26:8d:21:5f:8e:15:87:b0:9f:7d:65:ae:8a:94:
                    fd:e4:99:52:ee:81:fe:02:24:e4:04:c3:f4:35:d2:
                    85:16:7b:87:66:1b:27:0c:5b:58:89:0f:f6:0c:95:
                    74:d8:3d:4b:5c:16:3e:0e:4f:f5:86:18:26:56:a1:
                    3c:6b:17:e0:68:e5:0b:3b:b7:b0:75:93:0e:d7:b0:
                    13:37:40:c3:28:42:bf:16:a4:8a:fb:f9:35:13:ac:
                    24:19:b9:0b:e2:d0:a4:d0:54:98:47:32:df:a3:06:
                    70:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C6:D5:0A:E1:26:5C:18:DC:F4:C5:E2:81:0B:84:91:B5:E3:DD:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c000fb37-c157-3af1-b021-68e2624008f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.138.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:05:bd:b9:82:1c:90:37:85:0c:1e:a6:8a:05:0d:3f:14:84:
         e3:dc:21:03:54:2f:fa:23:d3:2b:7a:f6:6d:59:5e:d1:29:5b:
         1a:e3:73:79:6d:79:3a:94:4b:ea:ce:05:3d:ae:f4:7b:59:e0:
         d6:73:f9:b3:b7:17:d4:b4:47:23:33:44:a7:f0:90:0c:15:ef:
         dd:07:d2:d4:32:0d:70:1c:06:31:3c:b9:42:03:c3:d2:68:07:
         d5:07:4e:ad:c3:30:68:37:fd:6f:61:38:a3:18:00:a2:78:f9:
         c2:e6:17:b2:89:b3:72:e2:43:1d:b0:6f:77:7e:f0:af:f1:a5:
         b6:89:ac:f2:ec:2c:ed:b1:b4:63:b4:f1:44:53:ce:31:e7:e8:
         3c:a5:d6:b2:f7:f9:c1:8d:b8:4a:e4:fe:46:75:9c:ce:4a:57:
         18:81:d9:4a:c4:1a:07:76:75:51:96:d1:a8:74:6d:57:ef:0e:
         c6:d2:04:76:fe:27:7f:43:12:44:11:d1:e1:1b:6f:09:14:b9:
         3f:d7:c4:2a:00:c5:c9:96:4f:dc:d8:f1:24:0e:3a:11:5a:d7:
         e5:99:86:4e:0d:a6:62:f1:42:58:cb:fa:88:18:f2:94:e3:73:
         2b:89:03:0d:d4:da:03:0c:76:70:6a:9e:02:be:4d:64:fe:96:
         ec:a3:59:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:50:03 2025 by rpki-client