Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a819dddc-c792-3f70-86d6-4cf7d4418bc3.roa
File:                     a819dddc-c792-3f70-86d6-4cf7d4418bc3.roa (raw, json)
Hash identifier:          gNU1rMvYkWxV27QmRlkLjM3fh2sorjw1Yjx0Iy4yx8c=
Subject key identifier:   81:B4:F4:C2:02:BA:87:24:6E:E3:BD:CD:C3:BC:94:FE:04:8F:AC:3A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF4DB6B5887D9FD3E45457900
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a819dddc-c792-3f70-86d6-4cf7d4418bc3.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     15169
IP address blocks:        104.134.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:6b:58:87:d9:fd:3e:45:45:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=69b911fb-8d99-4c29-b348-71aa38d44062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b4:13:17:11:29:bb:65:89:87:a8:67:d8:29:
                    fd:ab:cb:a7:36:c3:86:16:0d:7b:c2:a9:ee:fe:51:
                    8d:64:65:34:02:5e:f7:c9:36:da:c0:8d:b3:1e:50:
                    0a:d7:1f:2b:9f:ac:b2:c1:8e:cc:db:b7:34:20:5b:
                    96:2d:17:c5:f8:10:ef:48:5c:de:f7:f7:9d:11:a1:
                    fd:5f:4b:4a:7e:7a:5a:49:3e:b9:61:ab:d0:08:4a:
                    ea:c3:b6:fb:54:c1:27:0c:6e:99:d4:4b:fb:4e:84:
                    81:6a:2e:07:25:c1:12:3c:b5:84:18:af:48:4d:2b:
                    a5:90:09:d2:c6:b9:88:d3:3a:76:a2:2b:1e:d4:7c:
                    cd:8d:3f:1f:33:44:65:e4:46:b0:1e:9e:4d:97:ff:
                    ef:da:f9:3b:cc:40:e6:d7:0f:0e:9c:3b:ab:31:df:
                    f3:51:e1:b9:45:bb:28:40:09:c9:cd:3b:fb:90:ee:
                    e5:95:07:51:f2:f0:a3:11:f6:8b:05:e3:ec:89:99:
                    6b:73:d6:4a:68:ee:ed:4d:3f:61:68:7a:ac:6d:e5:
                    bd:c3:9b:bd:4e:86:79:43:6b:17:7b:8b:d7:26:54:
                    f6:b4:3d:e0:d1:0e:c4:2b:6d:74:32:86:eb:89:9b:
                    c4:d1:7e:36:9a:68:8a:ca:5f:9b:e5:8d:8f:bd:b8:
                    3b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B4:F4:C2:02:BA:87:24:6E:E3:BD:CD:C3:BC:94:FE:04:8F:AC:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a819dddc-c792-3f70-86d6-4cf7d4418bc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:05:59:35:a2:0e:9d:da:5b:ca:80:e0:00:a0:97:d5:67:e3:
         22:74:46:87:1a:d2:8c:cc:69:a3:78:7c:aa:56:b5:66:f8:88:
         e3:28:f4:f2:e7:0b:1a:eb:b5:f4:39:01:51:39:25:51:65:42:
         1a:f7:fc:4c:66:7b:7f:14:6f:5a:aa:82:7e:fa:5c:e6:cf:fa:
         b0:63:78:51:32:35:9b:1d:cd:24:8d:26:01:d5:9a:0a:d3:8e:
         a4:0b:82:4f:df:ba:8f:99:71:50:87:9b:fd:e1:3f:f1:60:78:
         0c:82:85:3d:1c:8e:e1:84:e0:40:7a:8b:79:3a:4e:0a:e2:50:
         b6:09:46:22:54:4b:68:c8:b4:7e:78:a3:39:93:3e:34:ff:18:
         13:81:e3:49:66:13:6f:c5:5d:03:e3:4d:22:2c:97:55:dc:d4:
         a1:ef:66:57:10:c1:91:d0:94:ca:ee:c0:64:1d:73:24:93:8c:
         0b:1f:c7:6a:1e:f6:a3:7a:47:33:c8:6f:ab:75:84:64:30:12:
         a4:0e:94:6c:50:02:39:4d:9e:f7:df:9a:96:21:c6:6f:56:fa:
         d6:6b:88:c4:42:2c:ec:74:7c:09:0e:31:97:a5:7c:17:fb:0c:
         35:54:86:52:06:af:93:b4:30:6b:1a:fa:b9:f5:61:e0:a1:f4:
         4f:95:7e:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3022tYh9n9PkVFeQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk
NjliOTExZmItOGQ5OS00YzI5LWIzNDgtNzFhYTM4ZDQ0MDYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7QTFxEpu2WJh6hn2Cn9q8unNsOGFg17wqnu
/lGNZGU0Al73yTbawI2zHlAK1x8rn6yywY7M27c0IFuWLRfF+BDvSFze9/edEaH9
X0tKfnpaST65YavQCErqw7b7VMEnDG6Z1Ev7ToSBai4HJcESPLWEGK9ITSulkAnS
xrmI0zp2oise1HzNjT8fM0Rl5EawHp5Nl//v2vk7zEDm1w8OnDurMd/zUeG5Rbso
QAnJzTv7kO7llQdR8vCjEfaLBePsiZlrc9ZKaO7tTT9haHqsbeW9w5u9ToZ5Q2sX
e4vXJlT2tD3g0Q7EK210MobriZvE0X42mmiKyl+b5Y2Pvbg7QQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIG09MICuockbuO9zcO8lP4Ej6w6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYTgxOWRkZGMtYzc5Mi0z
ZjcwLTg2ZDYtNGNmN2Q0NDE4YmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIayMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEAFWTWiDp3aW8qA4ACgl9Vn4yJ0Roca0ozMaaN4fKpWtWb4iOMo9PLn
CxrrtfQ5AVE5JVFlQhr3/Exme38Ub1qqgn76XObP+rBjeFEyNZsdzSSNJgHVmgrT
jqQLgk/fuo+ZcVCHm/3hP/FgeAyChT0cjuGE4EB6i3k6TgriULYJRiJUS2jItH54
ozmTPjT/GBOB40lmE2/FXQPjTSIsl1Xc1KHvZlcQwZHQlMruwGQdcySTjAsfx2oe
9qN6RzPIb6t1hGQwEqQOlGxQAjlNnvffmpYhxm9W+tZriMRCLOx0fAkOMZelfBf7
DDVUhlIGr5O0MGsa+rn1YeCh9E+Vfqw=
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:30:42 2026 by rpki-client