Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/760ce4c8-6a97-36f5-8538-8acd79cd037e.roa
File:                     760ce4c8-6a97-36f5-8538-8acd79cd037e.roa (raw, json)
Hash identifier:          bFw8GsPTrp9qMB4R8UWEehnZs0REybjf9BXfqKTyDdk=
Subject key identifier:   C3:03:B9:C5:50:0B:7F:DE:7C:46:D0:42:37:D4:2F:46:39:F1:B3:8A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF4DB6E45B208AD0BD7202800
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/760ce4c8-6a97-36f5-8538-8acd79cd037e.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     15169
IP address blocks:        104.134.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:6e:45:b2:08:ad:0b:d7:20:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=87644a63-c422-44fc-b67b-3b1b541ef64f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6d:23:f3:97:bb:71:dd:e2:78:97:b1:18:f4:
                    d4:72:ab:e0:ba:7f:3a:ef:17:cf:8b:6a:66:02:09:
                    44:3e:5c:c9:a4:36:11:a4:9a:32:7b:40:bd:35:6c:
                    d7:29:f1:8b:90:5c:b7:b9:b9:62:25:8f:4b:d7:81:
                    4f:9b:ee:31:c0:b1:a9:c3:37:d5:b8:8b:ea:c9:b7:
                    88:7d:4f:c3:26:39:14:ed:0b:f2:72:82:a5:f9:73:
                    57:33:f2:f7:92:40:c1:96:41:67:d4:7f:c8:44:8e:
                    50:4f:5a:8d:82:9b:8c:1d:ef:d7:22:17:00:4b:e1:
                    3e:75:eb:64:29:8d:c2:27:80:74:5d:8c:ca:6d:5a:
                    ad:c3:27:5f:26:86:cf:8a:34:a6:21:0d:fc:82:37:
                    86:63:33:85:0c:73:3c:20:89:06:24:ca:c1:6c:8a:
                    67:9f:59:7a:0b:b6:a2:b3:68:18:e6:53:d4:3f:78:
                    0a:05:d2:01:83:0f:1f:73:db:3b:5c:64:ef:6c:15:
                    dc:10:3c:57:dd:56:98:08:47:af:22:79:6a:71:8a:
                    2c:7e:5e:77:94:47:cd:36:b6:31:b5:fe:79:c7:a5:
                    cf:03:da:1b:09:05:8c:30:15:57:1b:38:80:ba:56:
                    a3:90:b8:e8:68:d6:89:2b:31:88:33:5a:77:13:06:
                    cd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:03:B9:C5:50:0B:7F:DE:7C:46:D0:42:37:D4:2F:46:39:F1:B3:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/760ce4c8-6a97-36f5-8538-8acd79cd037e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:35:98:e6:0e:69:d4:e1:0b:ee:2c:27:3d:fa:ce:7d:b5:4b:
         f1:99:eb:60:24:9c:0b:98:94:6d:cd:5a:f8:cf:f4:1b:34:9e:
         63:32:50:ae:ce:23:d2:b2:12:f7:79:b1:5f:d3:77:90:0b:07:
         fd:44:ca:db:61:5e:0f:f1:e4:1b:61:96:36:4b:2f:9e:7c:46:
         0f:51:97:4c:64:df:16:36:e9:b3:c0:1d:28:75:cc:ca:85:a9:
         35:95:dc:68:0a:79:f0:c9:a5:a5:2f:d5:0e:45:97:fd:0a:17:
         77:33:29:56:f1:34:7d:54:27:6f:48:e8:54:e4:a0:15:27:9d:
         0b:0e:b2:fd:ad:75:db:67:89:d2:5f:68:28:9b:86:42:2e:ae:
         1f:d8:ab:c4:d9:2a:2f:d5:f2:9e:56:db:8d:fd:03:d5:b3:34:
         6a:38:97:9b:8e:b7:a0:ad:66:35:ab:d7:29:67:d3:ea:0c:38:
         d7:d4:a3:9a:f1:38:a7:c3:78:dd:1e:70:ff:c0:7f:62:28:14:
         4e:97:72:1a:5b:4d:ed:65:c4:d9:56:8c:b6:2b:c8:cc:19:1a:
         dd:f7:3b:50:88:e4:b0:61:57:bc:c6:10:25:c8:e4:9c:2f:06:
         bb:1c:cb:15:41:7a:78:aa:a7:8f:fb:30:5e:b7:3a:7d:8f:3c:
         5b:79:5b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:31:11 2026 by rpki-client