Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a007ea9c-d73b-301c-9d37-0406014960c5.roa
File:                     a007ea9c-d73b-301c-9d37-0406014960c5.roa (raw, json)
Hash identifier:          2NVWY7dEbIXEXjoeumFqtMlv6ZtW/MZIKVdGbCG0ozI=
Subject key identifier:   FE:9B:8E:DA:BC:88:57:08:BD:59:BD:95:01:ED:C1:A2:1E:57:78:FB
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DA81589B488BD369BB0A15640
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a007ea9c-d73b-301c-9d37-0406014960c5.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     36411
IP address blocks:        104.135.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:89:b4:88:bd:36:9b:b0:a1:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=ad50801e-5c16-4d2b-989c-0b360e74ea6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:04:25:70:c7:9b:d8:37:3c:de:1b:cc:04:09:
                    cd:e6:76:c7:ed:91:ef:ca:5f:15:81:e5:1d:af:25:
                    c6:bc:70:e3:61:86:c9:7a:9b:c4:1e:6b:34:d9:fd:
                    4c:d1:76:b7:21:a2:28:f3:2f:9b:66:e0:70:b9:af:
                    f4:bf:ad:61:dc:00:1a:96:45:db:ae:54:f9:a5:9f:
                    48:9e:58:8f:1c:90:81:d5:f2:00:c1:35:fa:e1:83:
                    56:98:0c:b3:9a:37:5d:1d:e6:9f:f3:77:2a:d3:a5:
                    41:1f:ab:e1:9d:5f:87:7e:22:76:ad:2f:ce:7f:03:
                    d8:c0:a9:59:9c:4d:85:5d:8b:9a:62:cb:1c:83:50:
                    df:77:35:28:d7:66:d6:ad:b0:e7:fc:eb:18:3a:b2:
                    6a:87:29:b4:f8:3f:75:c1:b9:e3:79:1c:d4:7d:a9:
                    c5:88:2e:a2:9b:4b:8f:45:b7:ac:30:3e:b5:3a:f8:
                    e2:94:b9:58:95:bf:7a:51:b7:db:ab:62:95:70:b1:
                    9b:2f:2b:ee:94:5c:18:f8:6f:10:f0:bb:5c:14:6b:
                    d2:99:06:e6:54:dd:70:0c:cc:02:5d:72:26:b4:ea:
                    42:c0:46:99:5c:44:f8:37:3b:38:e8:81:f8:45:18:
                    8d:33:c3:80:a2:c5:27:ab:0d:68:d9:cd:d5:e1:5b:
                    d7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:9B:8E:DA:BC:88:57:08:BD:59:BD:95:01:ED:C1:A2:1E:57:78:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a007ea9c-d73b-301c-9d37-0406014960c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.135.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:79:35:b1:c4:99:d1:20:5d:d8:e0:f1:b2:63:80:84:2e:05:
         7d:a4:e8:a2:0d:e1:4d:7b:27:b1:a3:0a:18:c7:1c:fc:45:64:
         46:38:b6:74:e6:7d:06:09:fb:b2:8c:88:83:2d:c9:d1:77:ca:
         1b:06:cf:7d:f3:cf:48:3d:36:05:07:14:db:70:77:ee:aa:ae:
         f3:d5:1e:08:09:c2:2c:cf:a5:63:77:5f:a7:96:95:4d:f6:b6:
         f8:fb:77:65:f5:6b:13:3c:33:24:ee:31:70:ac:87:09:d2:62:
         ee:84:8d:21:3d:44:16:67:be:08:e5:bb:54:bf:6b:23:34:60:
         e0:9d:d7:36:08:8f:2f:5c:9e:89:ed:7c:71:bb:bd:44:fd:0a:
         35:9c:c8:a5:24:3e:67:77:8c:67:be:e9:53:f7:e4:33:2d:f9:
         20:8d:02:6c:9c:a2:b5:48:05:81:fc:92:4f:1a:16:07:5a:1e:
         e7:87:60:62:43:0e:fb:18:97:85:e3:37:e5:6f:46:c1:bf:df:
         27:4a:9a:b9:ea:39:e0:1f:40:90:85:d1:df:4d:2b:47:e5:7f:
         ac:cb:b2:e3:9c:89:e0:f0:ba:95:06:76:19:83:bf:bd:8a:bc:
         aa:93:55:3f:84:1a:ba:50:7e:0c:1c:8b:14:fd:3a:1c:eb:b5:
         a5:27:e2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 01:05:05 2026 by rpki-client