Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90151573-4eec-3e58-bfa1-4f75506853df.roa
File:                     90151573-4eec-3e58-bfa1-4f75506853df.roa (raw, json)
Hash identifier:          khogxAKT7hUDf9KqWJbdAinctkT58C/MWkxdqbVaSZI=
Subject key identifier:   BD:C6:72:A2:70:EF:78:CA:38:2F:56:F6:3A:AF:64:25:E0:20:B1:70
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AE8913B653862831117C692A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90151573-4eec-3e58-bfa1-4f75506853df.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     20940
IP address blocks:        104.77.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:3b:65:38:62:83:11:17:c6:92:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=e26012a6-b48f-4c10-9be3-8aa311e1fcda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a2:50:f9:28:43:ab:36:4c:84:43:d4:98:de:
                    6c:c8:cc:c5:ce:fb:77:53:f7:48:c1:94:6b:0e:c5:
                    0c:41:83:b8:32:19:8a:e9:72:15:a6:17:2b:1b:a9:
                    ee:cc:11:8c:bb:d8:08:86:03:73:d6:79:c4:cc:34:
                    9d:75:42:60:16:cb:97:6a:e7:1d:ae:8d:43:04:8d:
                    83:cb:73:76:9d:f7:49:e2:0a:cd:6b:4f:0b:42:c8:
                    bb:c3:85:2c:9e:28:7a:6e:ed:cd:ad:ec:e9:b8:09:
                    6b:14:73:72:fc:80:7c:ab:5b:2d:4e:f2:ab:5e:a2:
                    85:a6:52:07:0d:00:5c:17:38:ac:4f:52:6f:2e:d1:
                    e3:9a:c2:92:8c:fe:28:41:49:cc:e6:ce:00:c5:d7:
                    4c:a6:62:5e:b6:8d:4b:4e:6c:a1:42:6a:79:2b:34:
                    78:fd:39:c8:a4:95:21:6b:b7:32:5f:90:85:68:d8:
                    16:b5:21:62:46:8a:4f:e8:1e:0e:a1:38:db:e1:41:
                    df:3a:02:f2:da:93:ec:73:94:5c:f9:ca:17:04:43:
                    f3:dc:da:d0:bf:64:e3:50:e4:f2:c5:bf:ff:0d:2f:
                    e3:4f:a6:bc:f1:39:dc:73:2f:01:4b:d1:3e:27:1d:
                    28:f0:78:07:a4:bc:a6:01:5a:f4:2c:18:3a:17:61:
                    66:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C6:72:A2:70:EF:78:CA:38:2F:56:F6:3A:AF:64:25:E0:20:B1:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90151573-4eec-3e58-bfa1-4f75506853df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.77.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:07:33:f5:a4:cf:37:cd:db:33:77:51:5f:42:50:95:18:f9:
         22:df:30:86:c1:a4:da:ed:ab:23:8b:38:47:dd:99:22:60:b8:
         7a:5c:bc:a1:41:46:64:09:45:73:a1:f3:13:2f:5c:15:39:f9:
         48:80:29:39:d8:36:a7:17:41:19:0b:c5:f4:30:c2:a9:cd:47:
         f8:53:20:84:a5:00:78:e0:97:90:8e:3c:3c:62:58:89:38:3f:
         1e:1e:96:ab:df:e8:85:57:06:97:74:6a:15:97:8d:c4:47:25:
         67:2b:f8:75:37:37:35:00:59:08:74:c6:be:54:ef:85:d8:72:
         a7:2a:d1:5a:29:2a:28:76:c3:02:1e:16:59:0a:e2:98:3e:b0:
         e0:fc:3e:13:c5:15:ad:be:77:7e:c8:e2:05:ab:80:82:99:a6:
         b8:2a:b1:0d:87:f7:87:9f:2a:07:63:95:50:5f:a4:08:a2:69:
         d3:7f:93:b7:c0:53:3f:5d:42:71:fd:c3:b1:3b:86:b9:78:f5:
         92:d9:20:05:45:29:b9:cf:17:6d:ed:02:e0:c8:d6:3e:dc:59:
         b6:22:cd:19:2d:22:35:9e:22:f7:8d:33:11:e1:a0:35:2e:78:
         49:98:ea:55:27:1f:ba:8b:e1:77:cd:5f:51:08:fb:ad:a5:7f:
         38:33:00:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:09:50 2025 by rpki-client