Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4bd6b89e-4bd1-3aa3-ae82-2561c1e5c5b3.roa
File:                     4bd6b89e-4bd1-3aa3-ae82-2561c1e5c5b3.roa (raw, json)
Hash identifier:          nqDPmMAW2Ao60TWJW1j9193+rTUH/X5azAhSK8EJ994=
Subject key identifier:   06:C8:E9:C8:36:D8:E0:A6:7C:B5:7F:58:B4:17:9E:61:36:F4:F9:E4
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584E000615E642990A0E0FED13C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4bd6b89e-4bd1-3aa3-ae82-2561c1e5c5b3.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     15169
IP address blocks:        104.134.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:15:e6:42:99:0a:0e:0f:ed:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=2b0699e3-0bd9-43e1-91ef-21bfd8ace58e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:01:39:71:d5:97:eb:32:9a:e5:52:7a:77:ef:
                    7f:81:54:47:d0:11:e9:44:c9:72:54:9e:5d:8d:85:
                    3a:21:d1:0f:55:6d:b4:77:9f:bf:ed:8b:37:52:36:
                    56:78:03:39:ac:99:0c:03:e6:78:fe:02:08:05:0c:
                    19:98:53:37:fc:54:e5:cb:f8:e3:75:1d:3c:77:25:
                    00:45:27:70:4b:87:23:5a:df:18:13:8b:ce:19:0d:
                    37:ec:f8:57:8e:ef:90:13:4d:20:6f:e9:6b:a4:6b:
                    1f:7e:e7:34:8c:55:d8:bf:56:0d:79:ee:da:fd:40:
                    59:94:86:5c:42:5d:9b:ab:45:33:96:79:85:42:cd:
                    52:92:49:ec:0b:3a:ed:f4:b8:fc:7a:0f:c8:bb:5a:
                    c0:0f:7b:6d:c1:dc:f1:e6:2c:be:35:ca:18:cd:e2:
                    3a:67:f5:3c:18:e4:a5:52:f2:e2:8b:7f:5e:a1:56:
                    27:6f:70:ea:70:eb:ce:67:a5:ad:d8:35:83:00:20:
                    74:af:29:85:95:2e:c1:5a:30:d4:23:70:a8:37:8d:
                    e5:a5:ff:18:66:48:27:5f:c4:1c:f3:b0:cb:e7:f5:
                    da:d9:d8:cd:e4:c7:fa:1e:e6:8c:80:9a:10:68:71:
                    e5:54:3d:dc:fa:0a:95:25:68:58:44:96:d2:aa:6a:
                    e3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C8:E9:C8:36:D8:E0:A6:7C:B5:7F:58:B4:17:9E:61:36:F4:F9:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4bd6b89e-4bd1-3aa3-ae82-2561c1e5c5b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:70:52:10:4f:4f:40:70:77:91:aa:c7:da:50:90:0a:8f:9c:
         57:bf:a8:3c:8f:e1:d8:9e:b2:cf:0f:28:c5:95:37:48:a0:7f:
         27:c5:54:e7:63:8f:88:cf:1d:6b:f6:c4:bc:1a:09:d4:a6:ca:
         a6:54:91:fa:cd:76:6e:bc:19:c1:97:5f:99:bc:1e:6f:7b:c1:
         b1:a1:ff:62:8f:63:87:93:6c:7d:b6:0f:c7:82:2a:a1:af:51:
         9c:fc:1f:6f:9b:c2:78:02:68:4d:b6:5b:c5:c2:05:d7:b8:ef:
         5a:48:a3:53:08:99:1c:41:12:86:e5:b6:f1:34:cd:7b:9d:62:
         a2:f5:03:82:1c:f1:b4:fc:69:0e:03:a1:3b:aa:99:8d:13:07:
         ef:99:e5:6f:1d:07:77:f6:b7:4f:ff:cc:83:83:7c:37:3c:06:
         22:99:c0:63:38:a7:b3:4a:60:24:9f:fe:75:a1:8b:de:26:67:
         2a:f8:87:ea:fb:21:9b:81:f3:7b:4c:f5:be:6f:8b:7e:b8:23:
         5d:df:e4:98:05:60:4e:8c:24:9a:c6:fd:68:f2:11:ce:35:b8:
         63:06:9a:3a:c9:da:c8:d6:21:b0:1f:57:e9:82:f3:10:a4:89:
         b6:9d:b3:92:8f:71:57:58:d7:a2:30:d8:f8:e7:6a:bb:5c:a7:
         e1:3d:85:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:31:14 2026 by rpki-client