Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/923427c8-783a-31c6-ade4-2bbbb6759d6a.roa
File:                     923427c8-783a-31c6-ade4-2bbbb6759d6a.roa (raw, json)
Hash identifier:          qG0e2Va6vyUw+/Z5DbJugJLfFlFxKk8zKnA1O9ipyYo=
Subject key identifier:   25:2E:8A:D6:DB:94:B0:0D:A8:31:4B:98:DE:4A:86:5A:8C:58:F2:E4
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584E0005EF12DC2884D5979F8E00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/923427c8-783a-31c6-ade4-2bbbb6759d6a.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     15169
IP address blocks:        104.134.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:ef:12:dc:28:84:d5:97:9f:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=5f2b902a-bee6-4258-b881-5356472a466c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1e:7b:cc:07:27:70:2e:c8:dd:40:2e:36:f9:
                    22:f9:c4:eb:8b:08:b8:32:97:05:01:d0:f1:dd:0c:
                    c9:e5:a8:73:65:e3:50:8a:78:a2:13:91:74:05:45:
                    e7:43:77:e4:c4:6f:28:ff:40:58:12:d0:22:55:68:
                    6c:8b:28:69:5a:4b:7c:35:e3:36:29:23:7e:b8:33:
                    c2:9e:97:4d:7f:94:9e:4d:2a:e4:5a:55:3f:5b:b9:
                    45:6b:c5:75:3c:d8:3a:56:61:41:9c:58:06:54:b9:
                    0a:97:cb:01:fb:ee:07:08:59:74:f9:be:93:9e:0c:
                    bc:85:48:a8:22:5e:ae:f0:58:41:ec:40:7d:6c:8e:
                    8f:16:35:49:78:ad:93:47:3a:29:0b:2d:bb:d6:3d:
                    86:b0:85:6b:5a:de:ac:4c:52:07:3a:82:59:af:c1:
                    26:61:83:e0:a3:67:4c:85:21:ba:af:32:b4:fe:d6:
                    92:c1:70:4e:c3:94:95:ce:3c:3b:4d:bd:75:79:4c:
                    b7:37:d9:01:8a:25:d8:94:45:ed:69:8a:8d:74:4a:
                    40:d3:7a:c8:dd:a3:7c:d0:a4:2d:ee:23:8c:51:1c:
                    34:38:de:3d:86:8d:e6:da:c7:42:cd:d7:bf:d7:6c:
                    74:b0:a6:30:99:19:43:5a:4f:23:60:4a:24:0d:9c:
                    6c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:2E:8A:D6:DB:94:B0:0D:A8:31:4B:98:DE:4A:86:5A:8C:58:F2:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/923427c8-783a-31c6-ade4-2bbbb6759d6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:fc:31:57:e1:bb:bf:c9:cb:83:f4:41:62:66:a7:70:5d:cf:
         bb:05:dd:ec:5e:6d:18:24:ef:be:1a:9b:65:f1:ba:3d:56:d0:
         17:da:2f:89:6c:f8:1f:ab:2c:81:42:0a:f9:2a:91:53:79:7b:
         95:62:90:61:80:38:93:30:ad:d4:46:67:1d:1a:69:61:63:97:
         e8:2e:11:cc:bf:dc:4c:3b:97:f8:a7:a6:b3:ba:ff:33:ec:42:
         39:27:32:8c:10:17:f5:bd:60:0e:cf:51:4b:48:7e:45:a9:aa:
         71:c6:cf:6c:70:3d:6c:5e:33:90:d9:6a:75:f6:29:ac:6a:69:
         97:83:47:0f:22:ae:49:09:95:9a:47:c5:22:56:3d:26:9a:74:
         dc:19:b8:fe:f6:0b:fb:c0:97:45:05:9b:aa:8c:c3:b9:cb:5d:
         aa:93:d6:a2:32:8e:cc:44:d3:3d:0e:6e:90:a7:3a:04:14:7b:
         4d:12:30:ea:0a:13:b3:7b:03:7f:eb:e7:39:dd:9b:75:0d:84:
         c6:69:cb:ed:8f:17:05:92:8a:8d:21:89:0d:b3:4f:13:0c:9b:
         f9:37:e2:6c:fe:bb:ce:a2:f6:6d:2a:0a:c6:d3:51:9a:79:e1:
         59:3f:49:bc:4f:d6:ae:aa:11:88:e1:32:09:84:bc:93:b9:a6:
         0e:da:d9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:30:51 2026 by rpki-client