Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4c290c10-a245-3f26-b6d5-71393a805d03.roa
File:                     4c290c10-a245-3f26-b6d5-71393a805d03.roa (raw, json)
Hash identifier:          SJd3PXZYHVkope09IYdCvBEhMv5gPWNpw6E7jkUvbFY=
Subject key identifier:   73:37:FF:4C:61:97:9C:53:A6:DD:DB:21:16:B4:6D:D4:80:64:0A:98
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584E0005FBF36288928727DD8180
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4c290c10-a245-3f26-b6d5-71393a805d03.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     15169
IP address blocks:        104.134.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:fb:f3:62:88:92:87:27:dd:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=00a7b015-6a78-4699-bd9a-16e308dbfd62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b1:92:d7:89:70:94:e8:c9:5b:17:ac:85:92:
                    b2:67:fb:e9:ad:0c:4c:02:a7:62:94:54:60:7b:ce:
                    60:22:02:1b:3b:ee:ad:85:78:77:b3:7f:f7:42:f2:
                    77:d2:f9:12:5d:fe:24:a5:b2:ee:67:5a:41:98:d4:
                    2e:37:7e:79:81:da:a5:c0:8e:a7:5c:bd:66:4f:5c:
                    66:e4:d6:2d:57:2f:c4:bb:31:74:fb:d2:54:d7:88:
                    be:57:48:d4:34:c0:2f:8a:a1:67:39:86:32:48:73:
                    2a:c8:e5:00:c1:ce:24:c3:e3:6b:a1:6a:41:4c:40:
                    4b:36:4a:80:3e:90:07:79:af:83:f9:8a:14:ec:cc:
                    b4:f0:7f:87:f9:4e:a6:33:c8:31:18:1f:50:3d:eb:
                    59:54:c0:1c:9c:b0:0c:4f:ec:89:e8:cc:80:c2:c0:
                    12:b9:50:c9:72:28:a6:7e:a2:50:97:00:d8:30:82:
                    3a:e9:9d:68:78:5e:6f:8e:b2:c9:74:c5:8d:8c:59:
                    9c:7e:cb:8b:44:3f:2d:22:ca:37:e4:06:6c:a0:07:
                    c7:11:83:72:4a:5f:10:4c:61:a6:5c:ab:73:f6:81:
                    7c:c5:01:fd:7e:f3:31:6d:a0:36:ba:9e:13:63:ae:
                    69:4a:81:fa:db:25:14:e0:b2:9c:fe:a7:f5:9a:d6:
                    0c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:37:FF:4C:61:97:9C:53:A6:DD:DB:21:16:B4:6D:D4:80:64:0A:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4c290c10-a245-3f26-b6d5-71393a805d03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:32:d2:aa:ff:75:0b:63:03:18:d9:d5:95:32:af:67:b0:d0:
         9b:7a:31:62:a7:35:c5:b7:7f:11:b8:56:7e:2f:85:32:c4:84:
         3b:4f:2e:65:21:af:5c:44:7d:e4:71:53:1c:e2:9d:f7:b8:39:
         24:41:ac:8a:83:dd:9a:28:cf:da:34:45:cb:b1:32:d6:34:cc:
         21:1f:8f:99:7d:88:43:50:7d:4b:71:d6:f8:47:ff:a5:ae:a5:
         02:f4:7e:50:5e:0e:a8:03:5c:21:3c:10:21:d1:e5:fd:d4:6d:
         14:8e:b9:e7:17:21:c0:ae:f4:ff:7f:00:3b:03:fa:e1:18:ec:
         f5:92:30:dc:e0:94:e7:39:23:8e:36:2a:29:4d:dd:68:b5:3a:
         d7:39:44:df:63:c3:0b:09:38:07:c8:49:a5:d7:5c:c0:af:69:
         92:29:1f:1e:bf:b2:70:b0:b8:f1:a8:11:3d:5b:3f:d5:0a:8f:
         06:21:36:80:b0:c1:45:2e:89:4f:3b:46:f7:67:ee:f6:98:f7:
         9e:7e:4c:bd:17:2b:2e:2f:5a:3a:82:67:1b:7e:bf:f9:a6:b8:
         64:3b:1f:ef:93:fd:44:1f:85:0c:ff:c3:5e:a6:c6:41:ff:47:
         81:c5:52:ac:2f:2c:15:29:55:e2:0c:4c:d5:a6:d8:37:93:91:
         9b:e8:f4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:35:19 2026 by rpki-client