Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9abd777b-b7c6-31d6-817b-07051e337f5a.roa
File:                     9abd777b-b7c6-31d6-817b-07051e337f5a.roa (raw, json)
Hash identifier:          oxM7oDYR4FiGHYwAEbOs0h+uyRFBeU2EVWx3FUz7eq8=
Subject key identifier:   44:CF:0E:EE:55:B9:5D:E0:3E:8E:1F:33:90:C4:DE:7F:4C:8E:36:04
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584E0005F6BD40AE5DC600DA8600
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9abd777b-b7c6-31d6-817b-07051e337f5a.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     15169
IP address blocks:        104.134.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:f6:bd:40:ae:5d:c6:00:da:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=8528cbaa-8ad0-4960-a58e-63001b5bad47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cd:c4:27:43:ca:f9:11:c0:66:f4:04:0c:cc:
                    8b:f1:17:98:be:e3:f5:80:0e:90:25:4e:7b:c7:06:
                    fe:da:e0:68:a3:4f:c1:72:6c:18:b8:88:77:62:b0:
                    08:a5:77:3a:7b:50:78:54:28:c9:59:14:b8:0e:34:
                    2a:cb:07:b4:c7:b5:aa:55:e1:7b:4f:bb:d9:35:92:
                    6c:7d:a4:4e:ff:da:08:53:8e:70:99:64:2d:9d:86:
                    b2:e6:70:ef:be:f0:ca:7a:18:a1:15:28:0f:5d:fd:
                    34:a9:04:28:7a:27:a0:a9:6e:d6:85:ed:f3:87:60:
                    bd:7f:9c:d1:c8:dc:9a:8a:74:ed:bc:f8:b4:b4:29:
                    b0:e7:5a:93:1f:65:dc:46:cc:e0:60:00:0b:3f:20:
                    e5:3e:c4:4c:3e:13:23:03:31:e0:58:5f:29:7e:d4:
                    1c:32:03:df:f1:e7:b2:0c:e2:a4:b0:b6:6b:08:73:
                    a1:db:18:c7:9b:45:af:d2:62:4a:3f:b7:65:a4:e8:
                    43:45:89:28:f3:10:93:e4:5a:e6:07:37:89:52:a1:
                    54:0a:c1:a6:ec:43:68:c7:be:5b:ec:95:61:82:42:
                    97:12:82:63:a8:f6:d6:b1:ea:a5:6e:48:58:97:53:
                    ed:8d:f1:c4:6a:f2:4a:9f:41:f5:1a:6e:23:b5:49:
                    79:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CF:0E:EE:55:B9:5D:E0:3E:8E:1F:33:90:C4:DE:7F:4C:8E:36:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9abd777b-b7c6-31d6-817b-07051e337f5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:4c:84:68:0a:4b:00:b2:31:5c:77:c4:da:2c:46:4d:3d:5d:
         d9:1d:41:b6:6c:83:e5:cd:a4:bc:4c:13:7d:f5:f2:77:15:06:
         14:5b:d9:fe:83:04:dc:b7:7f:93:32:f7:66:66:6f:35:d9:1b:
         b8:8c:27:f8:a8:26:21:db:cf:d3:dc:f0:fe:96:2c:81:e2:8a:
         1c:21:1b:73:80:a5:46:a9:e1:61:85:7c:de:fa:31:b0:ee:a9:
         e8:4b:df:f0:71:f2:01:7a:31:ac:c7:48:db:0c:03:27:75:db:
         99:4c:d9:ca:d1:25:9d:48:aa:2a:f1:1d:39:97:fc:21:f3:f8:
         ed:46:41:e5:17:05:2e:26:53:7e:17:2c:da:37:48:83:0c:62:
         bd:22:a0:d2:14:ba:71:8f:86:52:96:bd:9e:eb:1a:be:bb:e1:
         11:a1:88:09:55:16:ed:41:ab:33:e5:04:42:99:12:3c:8f:ea:
         c2:28:bd:2b:99:92:ff:ea:f9:e2:83:e8:f7:30:bc:f4:77:6d:
         43:2b:11:86:21:f2:b6:bf:73:28:97:52:52:81:3d:f6:98:2b:
         0f:21:a4:9f:81:76:ee:ef:7f:05:33:69:be:ce:8c:ed:19:fd:
         e2:88:55:2c:67:34:8d:1f:d5:ea:ab:b3:b2:45:22:98:d4:d1:
         4c:6a:92:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:33:44 2026 by rpki-client