Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4add4991-07f1-3fc2-8171-b1795c3f31f0.roa
File:                     4add4991-07f1-3fc2-8171-b1795c3f31f0.roa (raw, json)
Hash identifier:          Q4GIYamPgKh6viZMg1i9pezfMVmrLqIGJo4oHRTZG50=
Subject key identifier:   F6:24:49:CC:08:08:39:D9:A6:2C:FA:D6:17:7A:71:5B:CF:CF:C8:A6
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584E000614F6A7A2CC0D3CD6CD20
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4add4991-07f1-3fc2-8171-b1795c3f31f0.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     15169
IP address blocks:        104.134.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:14:f6:a7:a2:cc:0d:3c:d6:cd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=ad5d9c7d-dcfc-4116-a920-0f7d4f999f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:47:8a:c4:1b:3c:c1:89:be:d4:68:d4:4c:f2:
                    2b:0b:db:e1:ba:c0:32:45:8f:7b:df:eb:ce:82:58:
                    69:99:26:1d:2e:c3:c3:7e:58:fa:de:96:ee:c2:60:
                    05:b0:8c:c6:35:21:4b:69:02:ab:53:00:8d:c6:34:
                    8e:24:0a:31:a6:96:e4:05:2d:1d:49:0f:ab:8a:04:
                    ff:59:86:d1:0c:df:9a:50:b5:2f:c5:bd:c3:b2:34:
                    59:ca:79:bf:26:4d:76:20:09:18:80:9c:28:d5:ae:
                    50:3e:b2:98:1f:45:98:c7:08:57:5b:45:f1:a6:60:
                    e4:5e:b5:02:05:f4:46:81:10:57:b4:56:bc:7c:60:
                    b0:24:98:17:ef:ff:d0:7b:00:1e:f4:ec:db:a6:e2:
                    9f:a7:e5:34:78:04:a8:43:fe:b9:43:a5:53:c6:55:
                    eb:b9:1a:a5:fb:b9:73:9a:f6:86:d4:d7:67:79:a3:
                    39:92:7a:dd:e1:69:41:99:3e:6c:c8:2a:d8:2b:4e:
                    cc:6f:e4:89:35:62:16:a0:f2:5a:1c:38:fc:2a:4c:
                    a2:81:14:7f:72:22:6f:09:1e:b0:06:95:10:1f:6e:
                    09:66:85:07:15:70:24:26:74:ad:3a:9e:b4:b4:28:
                    7c:52:c4:d8:18:3f:ef:d0:35:9e:68:51:61:da:27:
                    85:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:24:49:CC:08:08:39:D9:A6:2C:FA:D6:17:7A:71:5B:CF:CF:C8:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4add4991-07f1-3fc2-8171-b1795c3f31f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:dc:3c:e5:d7:b2:b1:45:27:02:b8:f5:4f:1c:57:de:54:c2:
         9c:5e:63:f2:15:14:e1:47:02:b0:ef:1b:02:a7:f4:81:f2:ec:
         2f:ef:88:fd:50:b1:38:15:f8:f6:eb:57:0d:ee:99:cc:aa:1a:
         cc:b2:cb:f8:ea:0a:ec:5a:6b:00:a7:16:ff:01:46:5d:0b:71:
         c3:2a:59:58:6c:93:08:25:bb:dd:58:49:75:49:07:87:e8:40:
         c8:22:47:c7:e3:c6:e6:4b:22:11:f4:40:b1:a5:6e:b8:4c:47:
         35:36:55:70:3e:65:1a:cd:8b:a9:45:94:6f:61:a5:cb:2b:13:
         88:78:58:03:e1:20:e4:aa:8a:22:e9:61:2a:02:65:87:91:e1:
         ae:92:a4:2f:35:6e:bb:2a:04:ca:a7:b6:a6:85:9a:0f:16:55:
         74:3d:96:8d:41:2b:a9:c5:67:73:54:f2:0d:e6:ba:70:df:59:
         b0:64:54:d0:3c:bb:e5:de:1e:a1:10:5e:23:bf:c7:1d:d3:96:
         0f:c9:82:6f:16:35:98:76:ce:7c:12:3b:dc:10:e7:80:01:ff:
         84:25:e4:93:63:fa:e2:37:f1:6d:8d:a0:14:18:01:c1:24:ce:
         45:47:f7:8e:78:79:eb:c5:f9:b2:d8:d7:a7:b8:ad:69:0c:e3:
         b9:58:f1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:34:12 2026 by rpki-client