Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7891b2df-185a-3462-825e-ae609edda099.roa
File:                     7891b2df-185a-3462-825e-ae609edda099.roa (raw, json)
Hash identifier:          y0/9u5ZiScirC/+RbgIHOmChR2OVLPAyNiE/Rg3l7Iw=
Subject key identifier:   EC:9F:D4:E4:38:10:6A:32:3D:0B:23:9D:34:F2:04:F4:DC:11:92:44
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF4DB6DE98F0BDD054806C080
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7891b2df-185a-3462-825e-ae609edda099.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     15169
IP address blocks:        104.134.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:6d:e9:8f:0b:dd:05:48:06:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=f80aa35b-e094-4488-8259-77a96ae1415c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:93:8d:56:cb:d2:d6:bb:7a:38:e1:2e:88:3c:
                    d0:af:71:8f:51:a5:fd:02:b6:96:df:39:cb:5f:9c:
                    1a:0a:28:74:44:10:c3:1d:0d:17:ab:be:a4:c1:65:
                    56:1e:2b:1b:9e:d7:bb:a2:53:14:47:cf:54:09:2e:
                    ca:bd:f5:af:5d:29:be:d6:ef:5c:0f:34:2c:22:2a:
                    a1:8f:7c:a7:e1:22:33:0c:a0:6c:3e:93:a6:ed:8e:
                    11:55:35:9a:6f:2e:7b:35:c6:43:46:c3:6a:aa:e0:
                    53:10:b8:23:5b:9f:42:f9:05:e3:38:37:f5:a4:57:
                    98:5c:54:f3:41:5d:3b:48:f2:bd:d7:a7:45:5b:4c:
                    c3:4d:4d:40:44:12:08:64:22:f7:37:91:ad:07:7d:
                    f9:2a:ce:74:a9:ff:90:db:ab:3c:82:e3:c7:5f:f4:
                    78:11:2a:c3:25:27:0f:1b:d7:cd:b6:aa:b0:ca:ed:
                    f8:ee:c2:9a:fc:1d:e8:22:e7:df:c5:14:12:4d:68:
                    ce:78:72:35:81:f3:ec:1d:b2:4d:49:0c:11:b9:b4:
                    eb:7d:6c:af:ff:92:eb:59:43:9d:be:81:ab:b5:88:
                    14:9a:6e:10:0d:b1:13:ff:8f:f3:2f:11:50:95:de:
                    f7:b7:3c:07:10:81:e2:09:c0:cc:e0:2b:3e:b5:9f:
                    c8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9F:D4:E4:38:10:6A:32:3D:0B:23:9D:34:F2:04:F4:DC:11:92:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7891b2df-185a-3462-825e-ae609edda099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:8c:94:28:c0:d2:ee:c7:5c:46:7c:69:3e:0a:82:fa:41:8c:
         fd:95:8d:d1:d3:37:a6:9f:1b:10:2b:0f:57:14:98:d1:18:00:
         5f:67:b3:03:1c:9f:d5:bd:58:e0:e8:cc:0d:67:13:ef:34:4e:
         b4:66:f0:78:df:85:e8:f9:01:e9:c5:dc:7b:54:34:f2:cf:0c:
         50:ce:fd:93:6c:dc:b7:e0:e5:19:85:c6:2a:fd:65:bf:6a:1b:
         80:ff:52:83:b7:55:e0:8a:57:27:e5:ee:bd:74:30:f5:f7:ba:
         b5:99:23:a0:7d:17:e0:33:68:f6:5f:db:b4:51:cd:a5:ca:28:
         3e:03:31:a3:3d:35:e2:5c:44:0f:b5:56:15:44:77:7b:87:d8:
         0c:6c:2d:0d:b8:eb:f0:27:2f:5b:ae:dd:09:91:63:cc:4b:cb:
         d4:bd:08:78:42:04:3c:9b:52:c9:a6:97:d3:18:12:66:73:41:
         40:e1:80:8f:26:e4:27:db:61:f7:fd:88:ff:f3:46:3e:11:8d:
         2d:9c:e2:eb:53:17:06:6d:5a:c7:05:f3:61:c5:05:84:c9:b8:
         e9:2f:a5:34:8b:71:14:9b:d8:88:21:7c:35:20:56:50:31:0c:
         89:5e:bd:46:85:bc:1a:68:59:9b:4a:c2:07:3e:2c:97:b6:39:
         58:fc:e0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:32:58 2026 by rpki-client