Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/206860e2-e972-3b6c-a4c3-e144604e1ae9.roa
File:                     206860e2-e972-3b6c-a4c3-e144604e1ae9.roa (raw, json)
Hash identifier:          061uOU9bCk2+dIibCJR0imyRNUJKu5c9vjgJqVQiC7g=
Subject key identifier:   3A:71:84:EF:63:C3:11:2D:E7:87:90:C9:BB:07:A2:70:7D:58:CF:FD
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584E00061187F1B6C0CED15CFD80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/206860e2-e972-3b6c-a4c3-e144604e1ae9.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     395973
IP address blocks:        104.134.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:11:87:f1:b6:c0:ce:d1:5c:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=de436bbb-a33c-4b4a-a301-e1030e89cdb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f9:1d:f1:22:98:84:b0:ce:7c:ab:ad:cd:d6:
                    e7:5c:d3:f5:76:6c:73:ca:ef:c4:b7:c3:fb:ea:3f:
                    47:c8:96:4a:39:b3:0a:eb:0c:28:e5:78:1d:f1:c5:
                    b6:36:d9:19:d8:6a:1e:6e:af:32:ea:fb:df:06:3e:
                    bc:83:71:a0:43:50:e6:50:a0:64:fd:e6:4c:f9:34:
                    f3:c1:e9:f0:bc:77:2a:14:6c:45:08:cd:64:5d:dc:
                    48:ae:b8:bd:7d:f2:1e:c1:ad:4e:3c:40:ff:4d:a4:
                    6b:43:09:67:fd:0a:dd:a7:92:05:a6:c1:ec:25:cf:
                    9b:03:85:d8:a8:09:a4:ca:2a:92:64:0d:25:83:ab:
                    24:91:74:60:2a:c0:7f:9f:26:3c:16:80:d5:44:e7:
                    5d:f7:fe:9e:c2:ba:56:19:3e:e1:44:9c:32:32:98:
                    ae:d7:30:c7:37:d4:2e:29:1b:d2:25:1f:c7:fe:43:
                    f5:3b:fa:76:f4:04:ce:c9:a0:71:fc:ee:1f:53:96:
                    e1:f9:51:34:dd:d7:72:42:11:90:7e:27:3d:9f:32:
                    a2:24:54:bb:a7:aa:9a:6a:b4:30:e3:33:04:1a:73:
                    86:f2:9e:32:3e:25:94:58:4b:61:ce:99:e9:5f:3b:
                    82:93:ec:bd:8e:a5:de:47:22:ca:3f:40:ca:63:23:
                    d3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:71:84:EF:63:C3:11:2D:E7:87:90:C9:BB:07:A2:70:7D:58:CF:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/206860e2-e972-3b6c-a4c3-e144604e1ae9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:6b:26:a1:07:3e:42:a8:93:4b:0b:89:d3:e6:d6:a2:a2:fb:
         ea:89:bf:1f:6e:30:7b:46:68:bd:8f:cf:a0:f8:ed:46:a7:52:
         3b:78:3d:b7:ee:f5:fc:e6:0c:43:f5:b4:e1:90:44:14:7d:d4:
         f8:37:29:db:0a:19:91:53:7a:4c:70:5f:e9:09:9d:4f:a6:a0:
         65:c6:70:16:d1:2c:07:0b:d5:74:55:33:69:bf:ea:2b:35:3c:
         b4:79:32:04:ae:fd:58:17:ac:95:6d:27:61:7d:d8:55:78:a5:
         40:ca:72:d3:f2:da:c4:d5:5b:69:0d:d6:64:05:8a:32:df:d4:
         91:1e:6c:3d:ad:5f:e2:ff:ec:e6:3c:ee:17:9e:aa:0f:6d:0e:
         46:ae:ce:e2:c6:b8:8c:6f:84:d5:6c:e5:18:e2:32:43:2c:6a:
         4e:7a:f4:d0:bd:8f:15:8d:5f:0d:b3:6d:91:9b:7d:78:6b:9e:
         82:12:3a:53:26:d8:27:70:fb:b6:a9:1f:d8:72:70:69:b2:de:
         39:e1:51:47:95:b0:1c:1a:b4:23:bf:7e:f6:73:16:d6:95:13:
         90:71:64:4e:e1:21:2d:ec:85:be:5a:ec:cc:63:52:b4:e4:a9:
         a7:80:3b:68:ef:8e:3a:ad:02:fd:a9:a8:c5:21:05:b2:a3:f0:
         56:0d:6b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:29:13 2026 by rpki-client