Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/024212bf-e740-3a36-bfc3-8118d6f1c589.roa
File:                     024212bf-e740-3a36-bfc3-8118d6f1c589.roa (raw, json)
Hash identifier:          bquTxYazggV79a2oO+5VsepGGAdyfJBtPHFTgTvDiZ4=
Subject key identifier:   BF:FC:2B:5A:83:2E:14:99:7E:16:BD:7D:46:38:E6:DD:DD:BF:07:97
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584E0005EF9B781822BEAE3F9680
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/024212bf-e740-3a36-bfc3-8118d6f1c589.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     15169
IP address blocks:        104.134.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:ef:9b:78:18:22:be:ae:3f:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=6d53d682-02bc-40b9-ab81-f6f029ec203e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e3:b5:a9:52:56:94:f0:70:84:8f:ed:f0:f9:
                    b0:9e:30:cb:45:d5:f6:9b:7d:02:b4:a6:86:01:ef:
                    71:2f:d3:6d:58:25:d8:c1:af:7b:4b:23:37:6c:82:
                    83:2b:b5:34:2d:cb:4c:65:42:b5:3b:3f:4c:5a:6d:
                    03:76:3a:fd:65:4a:e9:f0:83:31:98:39:da:26:0d:
                    0e:06:e4:d4:b0:11:63:de:2b:53:36:8a:52:57:64:
                    70:36:8e:0b:03:79:81:88:c0:0e:54:4c:ac:51:6e:
                    94:d3:ff:dc:4f:73:1a:1a:39:ec:6a:7c:02:8a:1e:
                    b5:8f:77:1c:9a:26:61:89:6f:2c:33:e8:a4:d3:c7:
                    bf:5a:e1:d6:ff:98:66:f4:c8:cc:e1:8e:ba:84:f5:
                    a8:89:a0:44:16:a1:b3:e0:86:68:20:cb:cc:eb:f9:
                    d1:4a:67:f5:03:3c:0f:b1:cd:77:e2:08:17:32:c0:
                    0a:cb:6b:a6:06:ed:65:31:43:51:e7:64:cd:55:f5:
                    a5:80:06:51:8c:6e:c8:df:60:0b:92:27:ae:69:34:
                    fe:ec:ea:28:31:50:5c:bd:ac:30:80:b9:8e:ac:aa:
                    76:97:42:fd:c8:f9:29:15:c4:b2:b9:61:3e:12:f2:
                    3a:02:9d:76:ff:fd:af:8b:fb:17:de:12:0d:43:b9:
                    bd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:FC:2B:5A:83:2E:14:99:7E:16:BD:7D:46:38:E6:DD:DD:BF:07:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/024212bf-e740-3a36-bfc3-8118d6f1c589.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:5b:d5:6f:8e:36:a4:6b:96:1d:c4:7a:a9:b2:61:f5:0e:14:
         ed:19:19:e6:24:aa:ba:9c:88:c4:fc:be:5a:45:26:dc:06:84:
         c5:c6:36:73:05:7a:23:ee:be:2d:6f:8c:df:37:9c:55:b1:31:
         1e:6b:46:5f:f2:0b:50:c0:30:a6:1e:b6:fd:cc:54:0e:80:38:
         46:89:21:2a:1c:74:e5:25:c3:f2:c0:fa:76:d5:25:11:9e:fb:
         01:88:bb:21:d9:2b:2b:91:2c:43:0a:43:33:0f:a1:8e:24:af:
         00:d8:9e:8c:24:01:80:da:ed:fe:09:15:4f:91:e2:80:5c:11:
         27:d9:ec:a1:89:a2:1c:b3:3b:58:96:9f:5c:e9:fe:a8:92:76:
         3b:8c:98:e0:a2:da:bf:15:d6:02:64:62:b0:0e:b2:58:7a:95:
         7f:66:57:7f:f0:9c:9d:23:cf:95:d8:ba:1a:fb:10:1e:24:c3:
         39:3a:af:02:c9:4a:7b:45:65:ea:74:fd:4c:05:a2:6d:04:5b:
         33:dc:ec:c0:53:22:01:69:aa:8c:02:c4:f7:68:3c:23:34:a8:
         28:72:b9:5b:27:ac:83:d6:62:99:48:f7:d1:14:95:ad:a4:a9:
         8b:f7:85:17:9d:39:4d:cb:3f:1c:d1:08:d5:69:32:ea:d3:81:
         cd:3a:98:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:32:27 2026 by rpki-client