Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b86920eb-93dd-3e90-94cb-78aa809d61f3.roa
File:                     b86920eb-93dd-3e90-94cb-78aa809d61f3.roa (raw, json)
Hash identifier:          9Q0vpYks8Dvw6fk5o8JlbcyXpZj6JkhjlicFnMigyB8=
Subject key identifier:   08:CD:03:EA:32:AC:B9:58:E1:33:E7:38:C9:E5:DC:2D:B4:A8:17:BF
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584E15E454E5E42A3985B8E59780
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b86920eb-93dd-3e90-94cb-78aa809d61f3.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     36411
IP address blocks:        104.132.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:54:e5:e4:2a:39:85:b8:e5:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=839438e7-62de-4d66-ad1a-a79efebdd781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9c:14:a9:6a:b9:98:4c:44:76:c1:db:6b:2d:
                    fc:2a:46:de:8d:9d:89:65:25:11:7f:bc:f1:d3:ed:
                    9a:07:dc:86:62:a6:4f:91:c0:87:43:c9:70:89:71:
                    01:a0:d9:12:91:aa:17:90:8b:c4:2b:a5:0e:9b:5f:
                    63:ed:3a:11:76:b6:ee:e0:2e:37:fe:64:18:05:11:
                    b0:71:74:4d:6a:e3:97:cc:e0:27:27:9a:f5:de:41:
                    55:80:cf:80:ce:fd:ee:b5:77:3f:19:68:2e:6c:6a:
                    32:0a:ef:10:87:96:8e:38:44:51:1f:a6:4d:7e:66:
                    8c:84:3d:7f:e1:a0:55:48:bc:68:64:f7:10:07:09:
                    27:67:2e:bb:eb:81:d0:a4:54:4a:45:2d:f8:55:12:
                    27:0e:07:f2:49:26:b3:76:77:07:60:c1:71:86:ca:
                    44:42:d4:70:2c:eb:5c:9e:e2:46:06:7d:32:ec:59:
                    96:42:71:d0:d9:af:66:dc:91:0f:5b:58:81:a8:fe:
                    38:f0:15:6a:fd:4a:95:58:f4:56:92:96:19:71:17:
                    91:85:fc:fe:c3:4d:f6:03:e8:6b:49:63:fd:e5:5e:
                    dc:f9:f5:b0:60:59:b0:b9:f1:96:d4:ca:b5:90:25:
                    12:74:e7:96:2b:13:2d:e5:e4:04:92:5b:19:4a:22:
                    25:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CD:03:EA:32:AC:B9:58:E1:33:E7:38:C9:E5:DC:2D:B4:A8:17:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b86920eb-93dd-3e90-94cb-78aa809d61f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:62:25:1d:4e:42:f9:9d:d5:ac:1d:97:99:e7:09:b7:f9:30:
         0c:0e:aa:17:b4:57:22:0a:2d:57:eb:b6:98:2d:21:94:6d:e7:
         5c:ea:e7:94:19:93:0c:0a:f3:c3:77:93:19:7d:8e:ae:95:1d:
         ae:92:d7:d7:ad:55:1e:15:b8:73:5e:4a:d6:86:01:98:b6:b1:
         38:43:f8:7b:d2:d0:df:26:74:ac:34:35:18:a1:12:93:dd:34:
         7a:b1:7e:31:69:f2:76:b5:49:6e:da:4d:8e:50:cc:d4:d2:12:
         fb:3f:6f:d6:73:40:43:12:eb:6f:14:5e:92:4f:c6:49:76:03:
         ea:68:24:24:e5:10:f8:dc:c7:3a:85:ef:09:ea:08:0a:0a:37:
         d2:4d:3f:45:8e:de:c9:16:d5:63:0e:76:b6:7d:f9:b6:bf:94:
         df:07:93:06:8b:d1:cd:3d:45:68:b7:f9:5a:e9:27:1b:a6:3d:
         31:f1:88:3f:e3:6f:a9:d7:90:cc:fa:9b:d2:ea:06:93:38:02:
         a4:52:22:03:c8:3c:be:bd:ce:fc:55:22:7e:4d:7f:1d:a9:0b:
         41:0d:ea:98:2a:22:d5:b0:23:3a:b6:bb:f1:cd:44:b5:eb:f8:
         0b:c6:c3:43:3d:6e:1f:03:39:ff:94:08:bf:d0:89:d6:3f:87:
         2d:fc:ce:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:32:58 2026 by rpki-client