Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/388a0483-4e30-3ba3-b6e6-4b48b37342c8.roa
File:                     388a0483-4e30-3ba3-b6e6-4b48b37342c8.roa (raw, json)
Hash identifier:          wUvNv3FmJeUIjTjBWl5zdiDur643MkKgFF7aBuhNG+E=
Subject key identifier:   58:3D:59:7D:E2:92:4C:40:E8:E0:00:87:76:2B:DA:B9:D4:78:1C:2C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF4DB7122A05EE0AA1B330A00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/388a0483-4e30-3ba3-b6e6-4b48b37342c8.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     15169
IP address blocks:        104.134.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:71:22:a0:5e:e0:aa:1b:33:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=41ab9f7b-1341-4754-b07f-4e64b81047de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:89:2c:b2:f7:b9:f3:b6:36:39:3b:7a:03:cc:
                    b1:52:65:7c:2c:5b:03:92:ea:fe:92:67:00:d2:3f:
                    9e:c2:ca:8a:f1:4e:65:74:21:55:b1:14:b3:fe:fd:
                    e0:dd:c4:46:01:96:94:fe:7b:bd:1d:3b:69:67:70:
                    0b:ed:ae:19:4d:dc:38:e0:97:21:2e:dc:46:ae:32:
                    af:27:05:26:85:3b:d5:d3:5b:0f:43:35:a5:e4:67:
                    a8:b1:54:4a:82:e3:90:dc:fb:f4:25:29:c0:33:9f:
                    92:1d:7a:d3:2c:82:c9:63:2a:f1:e0:1c:db:ae:75:
                    ec:84:f0:36:1c:70:bb:ce:5e:4b:44:a2:cf:f6:53:
                    d4:98:4a:01:44:98:9a:09:cc:2b:8f:46:94:79:22:
                    01:3a:8e:bc:c1:90:86:46:8e:4c:29:91:9a:2c:40:
                    44:72:5d:c7:d9:ee:9d:b5:8a:07:9f:d2:ea:ef:9f:
                    c1:4b:78:8e:8d:80:02:43:0b:39:3f:d0:2c:c6:73:
                    a6:2a:ff:4b:eb:51:9f:e0:61:8f:c5:96:04:d2:06:
                    ca:57:33:d1:4e:d7:fe:59:4b:50:fb:c3:a0:4c:d2:
                    ee:15:43:f0:7d:b3:a4:61:a8:58:61:32:39:f0:bb:
                    c8:c0:35:5e:25:03:fe:39:ab:8a:56:36:d3:d8:b2:
                    3a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3D:59:7D:E2:92:4C:40:E8:E0:00:87:76:2B:DA:B9:D4:78:1C:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/388a0483-4e30-3ba3-b6e6-4b48b37342c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:ef:e1:47:30:96:d0:2b:71:47:57:b2:a0:63:fb:a4:21:eb:
         ab:d9:a6:a8:8a:f8:59:bc:8b:3c:6b:ea:ea:b4:b9:bd:d7:72:
         6c:bd:79:eb:cf:81:28:5a:6b:14:fb:1b:3c:f9:5e:5d:34:d7:
         be:c3:63:ab:84:7c:69:9b:a7:37:45:a4:4e:16:38:97:58:ac:
         33:df:58:e6:60:d8:9a:71:3e:ba:bf:b4:63:cb:5a:b9:17:25:
         9b:61:df:51:ab:78:de:ac:4f:74:ad:58:35:e5:4c:8f:c7:2a:
         fd:25:22:86:c0:c6:a7:93:52:75:f0:65:b5:4e:52:97:84:94:
         22:6e:42:f9:4d:7f:b9:60:63:21:f9:d0:fd:88:5b:84:95:5e:
         49:4d:a4:2a:f3:82:a5:03:ac:3b:36:7f:4a:a7:17:9c:d7:2a:
         c9:46:d8:6e:3d:f5:6e:ca:b4:10:10:bc:0b:09:c8:9a:8f:01:
         82:79:76:df:9c:14:c6:e8:3d:06:c5:1f:bb:de:30:5d:c6:5d:
         08:23:2a:0c:c9:d6:90:6a:79:d0:ed:2c:fc:4b:25:35:a8:73:
         86:71:21:c0:95:c2:72:bd:b9:71:52:56:af:48:74:5e:9a:63:
         2c:4f:9f:94:4e:dd:50:75:69:83:0e:db:b4:e3:b5:20:6a:7f:
         a9:02:bd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:31:13 2026 by rpki-client