Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6d3f34e2-6b13-3987-a0bd-c3965e7e7523.roa
File:                     6d3f34e2-6b13-3987-a0bd-c3965e7e7523.roa (raw, json)
Hash identifier:          8uUfxpddor2cVfSx5dDU3mlj+BHbPnOLSXOe/XkLIAo=
Subject key identifier:   84:C9:19:68:A6:EF:19:C5:26:39:DE:36:63:BC:57:28:B3:F2:8E:67
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF4DB7BFF0EB52F37F0010D80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6d3f34e2-6b13-3987-a0bd-c3965e7e7523.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     15169
IP address blocks:        104.134.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:7b:ff:0e:b5:2f:37:f0:01:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=d1b6f4dd-fafa-4b82-9154-31c563d2af10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:38:82:65:4c:ec:fe:a9:a7:9e:67:31:10:0b:
                    6d:6c:ba:38:2d:aa:46:aa:fc:6f:3e:97:69:75:4b:
                    71:fb:8e:5b:3a:be:e8:2c:95:d3:66:7c:26:23:09:
                    db:40:4a:e9:05:59:7d:76:76:a2:0c:c1:38:b1:fd:
                    6c:a7:34:11:14:d1:5c:bd:ec:5b:20:69:9e:45:84:
                    4b:9f:96:34:87:9b:86:68:f5:84:a5:54:1c:63:1e:
                    21:83:39:d3:5f:53:20:35:17:6e:c5:7f:61:75:5e:
                    ab:e9:3b:02:61:89:9d:0b:ee:b8:31:0f:26:db:b7:
                    64:08:0c:3c:75:8c:dd:cd:8d:2d:5e:ab:66:8e:ba:
                    98:bc:7f:4e:c0:24:45:b3:4c:bb:c9:3e:73:12:c7:
                    d4:50:aa:43:08:ac:b9:bc:c8:98:cd:b5:0b:c3:78:
                    15:8f:48:1c:a7:50:65:a6:fe:07:51:02:42:62:e1:
                    99:25:19:c9:e5:c0:41:2e:87:fa:02:46:cd:df:14:
                    48:c9:9c:58:81:d9:ed:c3:bc:7f:d4:a4:7a:09:63:
                    d5:bb:92:21:fe:70:6a:b2:d5:21:da:3e:c4:79:80:
                    49:5e:bc:12:cb:b8:8e:6c:e0:21:a6:92:41:bb:6a:
                    da:4a:86:27:2a:b1:1b:3e:4b:3a:ec:14:66:7d:cf:
                    e5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C9:19:68:A6:EF:19:C5:26:39:DE:36:63:BC:57:28:B3:F2:8E:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6d3f34e2-6b13-3987-a0bd-c3965e7e7523.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:0c:4f:60:86:40:6b:58:4f:88:8c:af:d0:64:8b:ef:64:4c:
         95:ad:37:42:a9:1c:76:fd:ab:7f:5d:95:79:01:16:cf:c9:4d:
         2f:53:f0:79:dc:52:63:19:a3:1b:d6:59:24:fe:12:c2:ef:27:
         ff:50:e0:7e:ef:c8:77:e4:92:4f:0d:50:5d:c9:28:72:12:21:
         db:4d:f2:c9:7a:30:0d:b7:f5:44:ee:b6:85:d1:2b:e4:c1:1c:
         66:ce:35:2b:4a:de:83:d8:36:64:bf:b8:6e:59:ca:38:8b:8e:
         93:1e:7b:09:52:80:6e:bd:45:a2:80:1a:38:e4:0a:41:6c:10:
         6c:eb:ce:46:c3:e7:86:06:06:7d:b8:63:96:06:4a:aa:2c:67:
         0a:aa:45:6c:6e:52:c6:ae:73:26:80:e1:16:9b:3a:cb:3a:c5:
         54:bb:66:32:8f:da:1e:69:e8:d1:16:96:dc:f6:d9:18:73:61:
         a0:cc:37:40:8c:88:80:f9:28:71:a8:44:3c:06:40:30:ad:d3:
         47:ab:73:9e:a6:a4:ae:0f:46:42:bd:b4:8c:b8:b7:6c:32:57:
         94:cd:85:eb:37:f7:cc:da:d7:79:6d:7c:d3:95:d3:d6:7f:ae:
         31:21:0b:92:c3:81:9f:65:85:76:08:15:c3:c5:b3:02:80:88:
         b2:7f:3b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:32:12 2026 by rpki-client