Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/90e1e37d-dd2b-3140-92f1-b6fcded71072.roa
File:                     90e1e37d-dd2b-3140-92f1-b6fcded71072.roa (raw, json)
Hash identifier:          2p5NMyiN3CecMkLxItj6Dl0KXMV/3Rxn1gMovVCK/mk=
Subject key identifier:   C5:4A:A9:68:68:B2:05:36:55:C6:0A:95:8A:B3:AA:DD:65:9D:AB:6E
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584E00060ED665C379B4E920B280
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/90e1e37d-dd2b-3140-92f1-b6fcded71072.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     395973
IP address blocks:        104.134.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:0e:d6:65:c3:79:b4:e9:20:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=254c8a60-095c-4d10-bcc6-70389696010a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d8:db:7c:57:ca:83:2d:bc:db:41:8c:3e:ea:
                    46:12:1b:8f:06:19:e9:26:80:a0:d5:bf:a7:0f:78:
                    26:1e:0a:b0:53:00:df:1b:e5:61:f7:50:85:f9:19:
                    45:f1:9f:0d:ee:32:56:56:c4:9c:26:f9:4e:de:c6:
                    87:e9:b3:05:da:be:24:a6:fe:24:dc:18:06:17:8e:
                    a6:34:bf:6d:37:9b:7c:29:3e:68:be:47:86:6e:08:
                    b5:2c:56:a0:db:47:16:65:a9:dd:12:64:d1:84:04:
                    f8:7d:d4:4a:d1:52:90:f2:b3:2a:8e:b3:93:79:77:
                    36:b7:92:4a:82:f5:c2:ea:14:47:12:90:49:3a:ad:
                    4b:3e:92:48:e8:7c:9a:98:dc:3b:6f:14:b0:93:da:
                    67:3f:7a:b3:76:84:59:61:14:83:aa:12:6a:f6:23:
                    ec:0b:34:ce:9f:ea:b8:34:91:02:10:2b:c9:a2:b6:
                    ed:5c:fd:d7:e0:f1:20:5e:c7:c8:f9:70:23:ab:aa:
                    4c:69:01:29:7a:72:df:cd:d4:d3:ef:a7:b5:c8:7c:
                    b4:14:32:1c:b8:62:9e:b2:5d:2a:77:8b:94:f0:21:
                    e1:32:12:c5:69:69:34:67:41:bb:33:bf:ba:16:95:
                    c9:f5:e9:1d:e6:ed:14:bd:7a:41:c9:63:a9:3b:39:
                    d1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:4A:A9:68:68:B2:05:36:55:C6:0A:95:8A:B3:AA:DD:65:9D:AB:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/90e1e37d-dd2b-3140-92f1-b6fcded71072.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:9b:31:e6:27:ff:04:ff:44:42:60:ec:66:a0:be:3d:2b:de:
         3a:b8:4a:51:43:70:3b:aa:21:4d:88:c9:d3:d3:ef:67:07:c0:
         b2:60:f5:e7:0d:f7:c1:a2:c2:9b:dd:a0:9d:4f:33:92:e3:bc:
         31:04:3e:5d:5a:18:9e:3f:9e:77:06:ac:5e:cc:74:ac:f7:52:
         ec:ac:cb:20:a3:05:8c:cc:3b:3a:66:00:5e:5d:dc:ae:95:a0:
         95:16:c9:a9:df:8b:26:cc:09:08:0b:5a:dd:40:88:45:98:15:
         d9:ec:45:1c:cc:bb:4d:3d:d3:75:8b:b2:e3:1b:da:da:19:fd:
         c6:b5:d8:67:c0:c3:60:2b:61:67:14:66:ca:64:ab:44:23:06:
         8e:ca:a5:bd:5b:00:44:63:35:70:85:3e:c5:5e:4b:5b:7f:d5:
         c3:2d:ad:a5:4b:ae:6d:36:16:08:6d:9f:e0:d7:95:39:50:a8:
         d4:40:eb:4c:d1:b8:c4:c1:1d:e0:31:a7:6b:39:cf:62:57:0b:
         60:49:99:16:42:aa:55:0a:9d:dc:4f:c6:1f:5c:f5:65:a5:b0:
         23:3b:ea:a3:06:95:0a:df:22:58:8c:b2:a7:cb:74:04:09:34:
         4e:35:34:4c:37:67:88:00:10:34:62:91:cd:3d:96:8a:42:56:
         07:b0:2f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:30:48 2026 by rpki-client