Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/206c5536-aa76-365f-a694-4c5fed552099.roa
File:                     206c5536-aa76-365f-a694-4c5fed552099.roa (raw, json)
Hash identifier:          FgWzfx3ODWk5J1fRKO5yf1IljqsN3xtjYNlg/4siSis=
Subject key identifier:   B6:04:AA:F5:7C:8B:A6:25:CB:4F:9F:4F:EE:9F:61:7C:67:DD:0F:F4
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584E000616CFE590A268AE5AA884
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/206c5536-aa76-365f-a694-4c5fed552099.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     15169
IP address blocks:        104.134.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:16:cf:e5:90:a2:68:ae:5a:a8:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=f0c61b08-762f-4099-a6cd-51bb45e3b7cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4b:a2:a3:42:f3:fd:a8:be:21:4f:73:0f:a9:
                    12:6e:57:1f:9e:4e:69:09:8a:57:1a:b4:94:9e:13:
                    da:83:77:64:50:8c:e3:d0:71:2d:3d:5f:58:42:3e:
                    a4:dc:de:fb:3d:64:32:89:1e:35:bf:6c:30:a6:76:
                    2e:04:3d:77:d5:f3:52:a7:37:e7:a2:06:58:a8:22:
                    8d:0e:e3:be:75:98:4f:53:af:36:32:1b:a2:a9:78:
                    af:f5:ad:63:1d:cf:06:3c:5a:99:45:20:36:4c:c3:
                    3d:04:02:ec:62:aa:ce:c0:e3:e7:3c:73:16:5b:26:
                    31:5e:96:db:b4:59:2f:31:a1:dd:50:d1:07:bb:f6:
                    65:dd:49:6c:80:6e:0c:c0:64:fb:ed:b6:98:01:ca:
                    56:0e:72:81:1f:8c:5b:00:32:d0:5c:56:90:c3:77:
                    bb:2b:90:19:ff:54:f6:24:15:dd:e7:8e:eb:f6:c0:
                    c8:d7:c7:e1:66:47:13:4a:bb:a6:b1:80:25:b7:34:
                    5c:26:45:6c:ae:ee:3b:3b:34:15:11:b0:9b:3b:7c:
                    d6:fc:d2:cd:8c:0e:a5:a3:e0:5f:8b:65:6b:ed:d3:
                    61:9e:3c:2f:d5:06:4e:65:2d:22:d2:a2:d4:5d:91:
                    75:c8:1a:10:04:79:3b:ce:0d:32:54:5f:ae:26:a6:
                    c9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:04:AA:F5:7C:8B:A6:25:CB:4F:9F:4F:EE:9F:61:7C:67:DD:0F:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/206c5536-aa76-365f-a694-4c5fed552099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:df:97:04:e5:e9:d5:b2:2e:4b:f5:94:13:90:54:85:1b:e7:
         0d:7d:f1:a5:4d:9c:cb:87:c4:3a:2b:63:64:8e:c5:90:e8:26:
         f8:a2:b8:b2:e6:1c:39:ef:74:ef:bd:f3:0a:05:d4:8d:b6:24:
         81:29:71:f5:9c:3d:e9:d4:22:61:57:4f:7a:fb:e4:f6:fb:7a:
         5c:40:78:78:65:92:bf:b6:26:bf:2f:45:29:d6:5a:e4:1f:c3:
         60:cd:a6:8d:3b:e3:67:09:38:b9:2b:89:65:a6:fe:39:06:d3:
         d7:97:0d:06:37:fc:9f:58:04:6f:54:e3:b5:32:90:61:bc:cd:
         ad:d6:6d:6a:5e:84:17:eb:15:da:3d:8a:d2:4d:85:1c:e2:24:
         34:22:63:d4:70:8d:00:3b:13:e4:bc:55:41:96:3e:cb:3a:a2:
         8a:fe:f5:b5:cb:e2:0f:77:1e:ef:db:15:7b:d0:b1:49:7b:d4:
         73:0a:48:18:44:b7:b6:bf:5a:13:a6:ad:50:ea:0a:c3:76:a3:
         b0:bb:be:7a:87:ba:30:76:e7:22:08:41:5a:e4:9b:28:dc:59:
         b3:42:4f:3b:2a:4e:c6:38:ef:cd:88:b3:ef:6d:fb:7a:71:fa:
         8a:e8:57:ec:31:29:be:e6:e1:4e:ed:71:60:fd:c9:6b:2b:03:
         83:35:0f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:34:11 2026 by rpki-client