Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3e4ca717-6e2c-3d70-9ea0-f8c211e4aac9.roa
File:                     3e4ca717-6e2c-3d70-9ea0-f8c211e4aac9.roa (raw, json)
Hash identifier:          Izy/IeVXBsxtrKtMlRf7hoFfwElfktNKF5nryVo/R+k=
Subject key identifier:   B2:0C:6A:C6:EC:51:1B:A1:6C:77:2B:89:44:AB:DD:59:A9:A6:ED:02
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584E0005F074D3D6E687996076E0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3e4ca717-6e2c-3d70-9ea0-f8c211e4aac9.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     395973
IP address blocks:        104.134.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:f0:74:d3:d6:e6:87:99:60:76:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=2adc4ea1-6ea8-4f18-8f18-782621cfd0af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ee:f5:cf:97:3d:97:f0:a5:99:c4:bb:b2:2f:
                    47:bc:45:be:7c:d0:cb:bc:12:61:cf:76:57:d0:8b:
                    65:3a:08:cd:39:f3:9a:21:8d:20:4e:82:e9:fe:46:
                    5c:a6:35:37:86:5f:39:ce:aa:3f:7a:09:57:71:14:
                    93:69:62:f5:b5:45:ab:f9:39:f9:8b:16:93:e7:90:
                    7b:10:14:57:c1:cc:f0:08:2f:14:d2:7d:34:24:4d:
                    fd:41:1e:63:17:62:d6:07:03:61:04:ba:d9:98:ce:
                    04:44:8a:26:78:e1:ab:eb:65:b8:4f:a4:28:e4:5a:
                    6d:ab:3e:60:d0:c3:b2:7f:af:f3:6c:0c:29:e2:88:
                    e7:93:39:b7:50:cd:d2:c2:bd:71:24:4f:d1:eb:d4:
                    04:cd:a8:be:4c:ab:4f:5c:ca:ef:21:50:f7:6c:bf:
                    5f:ad:6a:75:9d:a7:27:32:41:f1:18:27:a2:0f:56:
                    2a:6a:f6:5f:35:e6:29:7a:c7:ac:0a:98:d7:7c:10:
                    9a:f0:02:ba:eb:83:64:31:4c:13:3f:f7:e4:88:07:
                    3d:1c:39:87:9f:a5:fe:a5:d4:ca:e6:83:5a:13:9b:
                    89:e7:e6:70:ec:92:68:d1:b9:c9:79:51:97:01:83:
                    cd:41:db:9b:01:53:49:32:0c:d5:54:c7:c2:a2:6c:
                    28:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0C:6A:C6:EC:51:1B:A1:6C:77:2B:89:44:AB:DD:59:A9:A6:ED:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3e4ca717-6e2c-3d70-9ea0-f8c211e4aac9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:5a:8e:76:07:04:4d:bb:62:9d:b9:c1:7b:a4:42:9e:fa:69:
         1c:13:5a:f8:5e:7a:2d:7d:f0:74:66:99:39:2c:44:ad:17:a8:
         34:c1:4f:1e:a8:c9:f1:b9:bd:7a:c2:53:3d:37:ae:23:5e:5e:
         da:1f:36:8c:b2:03:f3:46:fd:e5:0a:ba:63:56:a0:42:49:15:
         33:f9:a4:d0:c9:eb:13:b3:c0:b9:36:d2:fd:b1:90:f1:37:11:
         52:2d:86:cd:25:b8:df:ac:37:dc:64:43:09:47:bf:34:ca:df:
         20:15:9e:0e:43:58:3f:9b:da:bd:e0:b3:e3:86:0b:53:c6:1c:
         b3:b1:e5:b9:e9:f5:2f:61:58:64:1b:31:18:17:d7:d6:b7:62:
         46:17:ff:a8:42:e1:e4:ed:27:7e:26:4d:6b:81:d3:4b:e4:ed:
         6c:43:28:c0:8b:7b:0a:d3:ae:9c:77:f6:d5:5f:c5:ea:79:cc:
         62:7f:e8:90:28:65:bf:1f:be:f4:f8:f6:7c:02:c3:ef:1f:31:
         67:75:a1:e4:bd:61:29:7d:25:93:b9:28:b5:d3:87:f2:4a:b4:
         31:df:93:39:b6:89:e0:1e:72:d0:51:9a:ef:9f:5d:f9:50:61:
         d0:f3:3c:06:07:70:94:e6:0c:e9:73:e6:26:91:73:0f:85:90:
         cc:ae:b7:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABfB009bmh5lgduAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk
MmFkYzRlYTEtNmVhOC00ZjE4LThmMTgtNzgyNjIxY2ZkMGFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO71z5c9l/ClmcS7si9HvEW+fNDLvBJhz3ZX
0ItlOgjNOfOaIY0gToLp/kZcpjU3hl85zqo/eglXcRSTaWL1tUWr+Tn5ixaT55B7
EBRXwczwCC8U0n00JE39QR5jF2LWBwNhBLrZmM4ERIomeOGr62W4T6Qo5Fptqz5g
0MOyf6/zbAwp4ojnkzm3UM3Swr1xJE/R69QEzai+TKtPXMrvIVD3bL9frWp1nacn
MkHxGCeiD1YqavZfNeYpesesCpjXfBCa8AK664NkMUwTP/fkiAc9HDmHn6X+pdTK
5oNaE5uJ5+Zw7JJo0bnJeVGXAYPNQdubAVNJMgzVVMfComwo6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLIMasbsURuhbHcriUSr3Vmppu0CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvM2U0Y2E3MTctNmUyYy0z
ZDcwLTllYTAtZjhjMjExZTRhYWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIa2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHtajnYHBE27Yp25wXukQp76aRwTWvheei198HRmmTksRK0XqDTBTx6o
yfG5vXrCUz03riNeXtofNoyyA/NG/eUKumNWoEJJFTP5pNDJ6xOzwLk20v2xkPE3
EVIths0luN+sN9xkQwlHvzTK3yAVng5DWD+b2r3gs+OGC1PGHLOx5bnp9S9hWGQb
MRgX19a3YkYX/6hC4eTtJ34mTWuB00vk7WxDKMCLewrTrpx39tVfxep5zGJ/6JAo
Zb8fvvT49nwCw+8fMWd1oeS9YSl9JZO5KLXTh/JKtDHfkzm2ieAectBRmu+fXflQ
YdDzPAYHcJTmDOlz5iaRcw+FkMyut18=
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:33:58 2026 by rpki-client