Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/83225254-2c2c-3295-9f11-cff68906b06c.roa
File:                     83225254-2c2c-3295-9f11-cff68906b06c.roa (raw, json)
Hash identifier:          dShZzGLLxZvd8+QZ7IL40UH71+tK29VebubwzDKhJcw=
Subject key identifier:   B3:43:1B:57:F6:51:C7:4C:77:E2:DD:E2:92:FC:74:9C:82:D4:16:89
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584E0006116535CB849E8A058EE0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/83225254-2c2c-3295-9f11-cff68906b06c.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     15169
IP address blocks:        104.134.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:11:65:35:cb:84:9e:8a:05:8e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=ae25f565-4021-4836-8824-c42148ca1317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:40:cc:da:6c:de:e2:f6:c7:46:c0:9b:1f:f1:
                    62:65:8f:b4:3f:c6:3e:d3:52:0e:7c:a6:cd:85:cb:
                    bb:c4:69:d9:f4:6a:4c:11:1e:33:13:b1:3f:ff:dd:
                    58:55:6c:eb:2a:3d:94:a4:57:f5:41:c8:50:5a:2d:
                    91:91:72:87:14:76:9e:03:37:83:14:92:4d:b3:d6:
                    5a:3f:ac:07:1a:74:68:be:a8:88:8c:f5:19:ca:07:
                    e7:fe:22:96:57:0b:20:30:75:a4:3f:7b:50:79:ab:
                    d8:e1:41:68:ea:bc:16:d1:f1:99:7d:71:51:18:0a:
                    7a:ef:da:23:40:f1:5f:26:cb:2e:1d:b6:9b:4e:7e:
                    e3:83:bc:4a:ce:bb:a1:20:87:92:1b:26:20:93:14:
                    82:c7:ea:d1:56:ca:5b:02:3b:4f:6f:32:0f:8d:88:
                    83:a2:fa:66:b0:01:cf:71:85:00:b0:bf:bf:ec:f9:
                    10:9d:de:40:e0:9b:84:11:30:63:65:08:49:54:83:
                    97:41:f9:6e:e5:01:94:7e:9e:ff:e8:51:13:b4:1a:
                    e8:ce:3d:6f:81:b3:52:e0:61:ce:e8:05:3a:16:0e:
                    55:ad:18:92:82:05:b6:cf:cd:dc:99:71:84:37:37:
                    a3:ae:ad:61:bf:9d:25:21:e8:12:2a:13:42:d8:38:
                    03:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:43:1B:57:F6:51:C7:4C:77:E2:DD:E2:92:FC:74:9C:82:D4:16:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/83225254-2c2c-3295-9f11-cff68906b06c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:8a:7b:33:6e:01:b9:25:14:84:6e:15:fa:5a:24:5d:7e:17:
         ca:57:29:46:40:62:c1:38:e3:72:c8:1b:11:e8:de:b2:86:2c:
         d1:cf:38:06:25:93:80:40:29:86:7b:fc:56:f8:aa:4a:45:14:
         88:82:92:6e:f3:cb:7a:0b:99:6d:45:7e:55:5b:7f:6e:21:2e:
         2b:d9:00:81:90:b7:ae:00:98:35:b1:30:47:6a:b8:c6:4f:1f:
         b0:ea:db:55:9d:05:1a:51:4c:0f:83:46:9a:76:20:a7:67:80:
         b6:35:ec:aa:d4:a6:13:23:09:2d:5d:bd:16:89:64:01:3d:96:
         44:93:4e:3d:91:5f:23:31:c6:fb:03:c5:9f:39:e7:30:eb:b7:
         51:92:5f:d3:23:c1:85:8c:51:3b:63:be:e6:51:94:af:bc:31:
         88:88:ec:26:21:58:a5:00:5e:30:d7:f5:37:8f:f5:c8:02:36:
         aa:21:90:cc:dc:c3:4f:54:da:5f:f3:18:bb:16:b5:2b:71:45:
         6a:27:c0:50:d8:51:67:68:5b:0b:03:aa:e7:9d:87:61:bb:cf:
         8e:fe:7b:70:0f:1f:3b:40:f9:d8:fd:81:10:da:a1:8e:48:25:
         33:2b:2e:34:f7:cb:ee:ad:8d:1b:b8:b1:15:1b:c9:e2:14:c2:
         76:03:f0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:32:18 2026 by rpki-client