Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/35cb6aac-c91b-3de7-aed3-3eb478fcc0ba.roa
File:                     35cb6aac-c91b-3de7-aed3-3eb478fcc0ba.roa (raw, json)
Hash identifier:          vHoP5Aid+0wHu/E22gMbH0XZ3ANfSmj6HDtcovkHMW0=
Subject key identifier:   4F:76:8A:98:E0:A6:9A:C1:A7:66:4D:B5:6A:06:2E:69:EB:71:75:92
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF4DB70D0C4BCFB5C561D6180
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/35cb6aac-c91b-3de7-aed3-3eb478fcc0ba.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     15169
IP address blocks:        104.134.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:70:d0:c4:bc:fb:5c:56:1d:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=ebe43666-7c4d-4c86-b7c7-718e6ce84e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:31:53:a2:49:0a:d9:3f:9c:4f:a2:b1:57:3f:
                    64:3a:eb:5b:c9:36:5d:4f:51:28:76:3d:35:c6:9b:
                    9d:8a:c0:82:e3:25:47:98:72:20:0b:d1:60:56:a3:
                    e4:49:8f:d6:8e:79:d5:21:64:72:29:cd:2a:49:b4:
                    26:cd:98:11:c6:0c:bd:f4:ab:b7:87:9a:0b:c9:0e:
                    fa:bf:00:f8:a7:54:0b:58:60:b7:0c:1f:82:e7:34:
                    14:b3:18:e6:e6:1f:89:54:94:54:ec:39:69:e7:ca:
                    ca:d0:c0:2c:cf:a0:db:13:5f:4a:ba:09:14:da:b2:
                    d4:7e:67:66:d2:d8:ab:f6:27:33:f9:c7:10:68:0a:
                    5f:1c:54:76:be:cf:10:4c:58:5b:95:c6:31:69:09:
                    da:51:5a:ce:5f:23:c1:e6:12:f7:3e:15:e1:44:cf:
                    ca:17:16:35:53:e9:2c:10:fd:28:04:b8:9e:5f:78:
                    3c:13:cd:b9:b8:53:28:47:8b:26:01:1f:b3:44:7e:
                    31:43:c3:8f:47:a5:e9:ff:5e:8d:8c:87:f1:39:f5:
                    b6:a8:6d:f4:1c:a6:bb:07:43:9e:1f:5a:57:93:b6:
                    f7:81:3e:33:22:9c:80:90:34:34:fc:8b:8b:71:4a:
                    44:f9:01:e2:c3:de:5c:c1:6e:d9:68:b6:8e:c8:82:
                    a9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:76:8A:98:E0:A6:9A:C1:A7:66:4D:B5:6A:06:2E:69:EB:71:75:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/35cb6aac-c91b-3de7-aed3-3eb478fcc0ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:33:c8:dc:3e:40:a1:c7:d8:73:fa:fa:85:68:fd:b0:81:4a:
         f3:db:30:8b:39:89:51:64:a6:cf:7c:1f:c6:bd:5a:5f:fa:f8:
         f8:e0:50:be:7f:71:25:d2:95:57:df:74:cd:12:3a:84:11:38:
         f0:44:cd:bb:b2:4f:31:a1:b4:1d:4d:a4:95:2f:ca:77:84:a7:
         7b:76:78:6b:08:c0:3f:a0:c9:d8:02:5b:ee:0b:1d:f3:90:3f:
         86:af:28:d8:2b:8f:6a:41:e3:13:b5:20:79:52:26:c6:d4:35:
         b1:ca:78:7a:6b:a2:ca:b9:b0:b8:21:3d:92:4f:47:4f:45:16:
         b0:7e:a1:d0:68:b0:fc:45:62:1f:57:4d:b9:76:85:5d:96:3c:
         46:2b:f2:ae:44:01:d0:b0:a7:20:49:12:8f:4b:f2:c3:9c:ae:
         cf:ab:2d:57:81:7f:7d:8c:06:ce:ae:38:3e:09:9e:35:50:a5:
         a6:21:1c:35:43:48:45:fb:26:48:e9:a8:29:76:9e:49:fb:81:
         5b:94:68:f0:b8:84:81:14:80:9a:af:4a:6d:d0:b0:b0:0c:b0:
         0c:4e:2c:18:b6:5b:50:99:2d:a0:7c:71:55:59:5d:07:a0:76:
         9b:c9:4c:44:0a:c6:b0:21:d8:d4:58:62:94:85:c1:97:52:7e:
         b2:c8:f6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:30:31 2026 by rpki-client