Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/00d97cef-25bd-3235-ad1f-176e6008c2f5.roa
File:                     00d97cef-25bd-3235-ad1f-176e6008c2f5.roa (raw, json)
Hash identifier:          IrJalDr+mMdECXbRrw9oqb0wes0cJMmhbV19naVew0w=
Subject key identifier:   F6:39:C8:B1:80:E4:BA:3C:F2:5E:DB:77:6D:55:1D:29:F8:7F:3A:65
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584E00060FB6D0CE18C207E48300
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/00d97cef-25bd-3235-ad1f-176e6008c2f5.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     36411
IP address blocks:        104.135.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:0f:b6:d0:ce:18:c2:07:e4:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=b8a80d49-84fe-442d-9c5e-9d3f62e34120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fb:33:e4:b7:eb:83:59:91:2f:e0:99:ff:05:
                    c1:95:46:a0:68:d8:06:3f:16:7a:a9:d2:1a:33:61:
                    61:f4:50:6e:ac:53:43:65:66:38:3a:5e:47:97:b8:
                    85:5a:62:d2:c1:92:2f:84:cf:8b:a7:27:f3:35:ff:
                    89:e6:8d:57:0c:d3:df:4f:04:4a:4b:99:7c:27:5d:
                    73:93:d6:68:ac:d5:76:7e:f7:a6:d8:b2:ca:1d:b7:
                    5f:73:7e:2e:18:b3:fb:62:c4:95:1d:ec:c9:01:41:
                    ea:d1:57:63:3d:f2:7c:00:f7:9e:c9:2d:04:2b:cd:
                    9b:40:77:d0:95:f8:10:54:06:ff:8e:8c:b1:01:1c:
                    a4:e0:66:76:64:36:f9:a3:37:09:25:ad:fb:10:c6:
                    23:d8:fd:05:b1:7d:ff:b4:ea:3e:ed:fb:30:cb:d8:
                    dd:d1:05:2d:bc:9e:a4:c8:f4:e9:81:f0:98:c8:c8:
                    56:59:dc:24:17:c4:8f:6c:de:fe:e3:35:a9:44:2b:
                    e7:97:77:15:40:1e:eb:de:da:30:a0:76:63:35:e8:
                    90:ca:8e:28:c7:00:e3:e4:f1:36:12:ac:8b:91:a3:
                    af:54:a6:d5:1d:a8:6c:79:7a:ec:10:4d:c6:17:cc:
                    b0:80:cc:79:69:1a:4e:47:b5:a3:5f:a3:5e:84:9c:
                    b3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:39:C8:B1:80:E4:BA:3C:F2:5E:DB:77:6D:55:1D:29:F8:7F:3A:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/00d97cef-25bd-3235-ad1f-176e6008c2f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.135.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:90:64:e5:8d:5c:65:0c:e5:57:8a:b3:2d:73:59:81:19:2f:
         f0:c8:9b:12:c7:65:a9:9d:49:10:7a:4b:3f:a6:16:03:e7:86:
         1c:81:bf:f5:dd:6a:b1:8f:1c:e2:d2:13:e3:40:5c:8d:11:fb:
         69:33:18:80:39:a7:fd:27:51:15:36:8f:59:44:8c:ab:97:fc:
         17:a3:ca:1b:00:54:05:8e:75:42:5a:9d:57:23:18:dc:e9:e8:
         fe:08:19:3e:42:00:05:de:bf:2e:4e:71:85:81:8d:86:7e:ef:
         87:59:c6:47:0a:33:f3:1d:f2:80:dc:ef:15:b0:37:0c:6e:15:
         4c:d2:be:dc:6e:4c:68:91:ee:5e:7e:84:9d:7b:f4:9c:df:08:
         94:a2:1f:1b:83:f8:5f:bc:63:88:59:b2:26:9f:6a:c2:f2:82:
         ec:28:34:06:ce:ef:36:5b:1e:81:6e:9d:f2:1d:0f:49:b8:30:
         fa:be:62:85:7a:42:94:b7:39:9a:e1:9d:d0:20:e4:97:f6:9e:
         20:9a:ab:52:b3:79:49:88:54:c8:4e:61:24:d8:b7:25:63:83:
         9b:a2:8d:96:be:36:58:f1:64:9a:67:da:08:1a:f3:4a:7d:ce:
         ed:45:ee:07:11:74:54:fe:93:14:20:03:43:c5:82:dd:bf:42:
         4e:5d:cc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:33:50 2026 by rpki-client