Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7085ed56-08ec-3dff-bfb2-c0a402571d39.roa
File:                     7085ed56-08ec-3dff-bfb2-c0a402571d39.roa (raw, json)
Hash identifier:          I3VDJYzTFQro8CyZH/fgMLu0/Apnae5TDaAjIMLNMAo=
Subject key identifier:   06:E8:DA:60:37:36:23:0D:6B:34:26:8A:91:17:05:F4:79:A6:94:92
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF4DB6A15F9D2EDA9CC44C700
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7085ed56-08ec-3dff-bfb2-c0a402571d39.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     395973
IP address blocks:        104.134.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:6a:15:f9:d2:ed:a9:cc:44:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=aee0b2a4-395d-45c0-9832-31798f67d472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:16:1f:ae:f1:47:a7:b6:15:a6:58:f7:d4:40:
                    f2:a3:28:48:ba:9e:f1:66:d4:00:88:7f:e0:40:b6:
                    4f:11:d3:e4:59:a1:ef:20:dd:d7:4e:8f:e5:cc:49:
                    e0:d3:87:f9:73:50:4e:3a:85:b1:e6:3b:13:5e:58:
                    d2:cf:fe:ba:8e:e5:da:0c:a8:95:dc:b6:0a:7d:e7:
                    66:d7:42:90:16:9d:22:37:3f:ae:6a:99:7c:41:3f:
                    9d:73:d4:73:78:90:15:98:cb:ec:69:bd:ea:eb:d8:
                    06:d4:ec:eb:1a:f8:ae:cc:2d:ea:8b:89:c2:51:11:
                    d4:74:17:72:83:1f:9f:e6:ef:74:72:4c:b7:49:4d:
                    d7:02:80:35:37:cd:b6:0e:ad:0a:1a:5c:d8:5f:e6:
                    07:c1:e5:7d:40:ab:9b:83:af:5b:84:a9:e1:49:d4:
                    26:b3:14:a3:8e:33:89:ec:c9:a2:3b:fa:3e:30:02:
                    a0:cb:bc:e5:05:8f:d8:c7:09:42:97:56:6c:06:da:
                    10:f1:52:59:08:9a:f3:3b:ef:6a:81:b7:2c:d5:13:
                    9a:52:d8:bc:7b:46:23:a5:b1:09:e5:88:cb:68:02:
                    ea:cb:1e:d9:a3:05:3b:86:94:b6:f6:cd:4b:fb:71:
                    cb:ff:8f:5d:90:45:f9:ab:6a:28:22:24:fb:7f:aa:
                    8d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E8:DA:60:37:36:23:0D:6B:34:26:8A:91:17:05:F4:79:A6:94:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7085ed56-08ec-3dff-bfb2-c0a402571d39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:22:af:de:90:cb:d4:27:59:fe:7a:ca:7e:16:b0:c7:8c:72:
         39:48:ed:88:a6:61:79:35:92:f9:4d:83:b2:d7:9c:a5:77:a7:
         45:ca:e8:77:15:26:0b:8b:69:c7:91:d8:1a:d6:2f:3f:0d:fa:
         13:bf:d8:31:0b:59:19:cd:51:c9:06:c3:12:1e:36:9a:10:d7:
         b9:a8:b5:3e:4a:35:a7:64:06:b1:de:e1:13:80:77:69:f9:8b:
         89:65:b1:4f:f5:38:1f:8d:9f:18:52:6e:87:cd:95:63:ff:bd:
         e7:b0:6a:09:bc:c0:32:8f:0e:eb:33:49:86:bc:cc:e2:1c:c5:
         67:f8:06:4a:57:95:34:6e:4c:bb:77:85:41:b5:1d:02:1e:3c:
         74:b5:35:b3:ce:02:fc:68:94:1a:a7:bf:78:b4:34:ae:db:b6:
         37:78:b7:2d:dd:d8:19:4c:d2:ee:c2:51:30:32:ca:f3:56:2b:
         4a:c1:5b:42:54:03:bf:46:9c:7a:4d:33:26:86:27:89:0f:11:
         6b:a7:dc:39:24:ca:a3:81:ea:9e:98:04:82:11:47:b9:27:c5:
         d5:c0:24:e4:93:77:90:e1:60:ab:4c:19:d1:71:37:16:7f:2a:
         6e:f8:5d:48:34:51:cb:91:85:9a:27:c6:a9:33:f9:2f:1a:9c:
         17:0e:d3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:31:12 2026 by rpki-client