Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ca8061fc-b111-30d3-af87-544970b8a9eb.roa
File:                     ca8061fc-b111-30d3-af87-544970b8a9eb.roa (raw, json)
Hash identifier:          f/Gp+eXRxoPTqIaG+2SkIr4x/PpvxYvB4vlaXiccEOE=
Subject key identifier:   81:3E:7D:FC:91:10:00:32:70:43:00:CA:41:B3:C1:EC:FA:40:C0:58
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584E000613061B70DA55EB724300
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ca8061fc-b111-30d3-af87-544970b8a9eb.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     395973
IP address blocks:        104.134.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:13:06:1b:70:da:55:eb:72:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=07165fc5-5212-454e-b96a-2f812af0acdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:33:59:55:2f:79:09:fb:e1:09:b7:3e:40:b2:
                    c8:17:de:70:17:25:56:00:19:31:de:56:74:e3:a4:
                    85:42:bf:a7:a9:f7:fb:75:7b:89:d8:39:3c:0a:2c:
                    1b:7f:25:28:d1:63:4a:00:dc:08:36:3f:2e:8d:a8:
                    33:8b:fe:cb:b9:13:10:27:a1:09:72:29:ae:5d:23:
                    93:8f:2a:c2:a3:9d:bf:0c:50:7d:65:86:fc:08:85:
                    05:fb:b6:42:51:eb:d2:eb:fe:8e:ea:6f:65:49:c8:
                    4f:aa:e2:7f:5f:ad:a8:6d:d3:04:65:97:9e:c5:b7:
                    c3:f3:53:96:ad:8e:8f:c3:85:8a:bd:19:ca:2f:4a:
                    26:b8:7e:47:f5:72:1b:6e:0b:e9:be:3f:9f:c8:8b:
                    74:27:b4:db:87:44:f7:d6:75:f5:50:61:48:8f:64:
                    7f:eb:46:55:e2:64:0e:81:39:87:00:3b:3b:6f:20:
                    ed:d0:28:6f:a0:a7:4f:3e:6a:0d:dd:ff:74:2d:64:
                    1c:60:c4:55:bd:b4:ec:64:4e:1b:33:f1:18:91:e4:
                    35:e8:10:a4:d2:c4:8c:cf:d7:50:6a:ae:11:e0:6d:
                    9d:29:c9:f4:aa:93:0a:f9:6e:6a:34:37:3b:a1:50:
                    0c:7e:09:d5:52:1c:81:c3:3f:eb:b2:ea:4e:99:da:
                    46:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3E:7D:FC:91:10:00:32:70:43:00:CA:41:B3:C1:EC:FA:40:C0:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ca8061fc-b111-30d3-af87-544970b8a9eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:5d:bd:43:63:11:3d:0f:6d:b9:f2:74:cd:5d:05:fc:2d:f3:
         1d:5a:b1:dd:cf:4e:ab:e8:88:19:77:16:10:da:2a:98:5e:3b:
         b8:71:ab:ec:ab:4a:af:a0:4a:5b:37:36:dc:69:34:67:40:e5:
         52:de:c3:72:aa:11:15:80:c9:84:c5:16:a1:48:07:22:c1:60:
         9d:d7:12:e5:4a:e3:c3:f5:cb:d2:be:e4:f0:98:f6:40:dc:01:
         0d:a2:55:3f:be:4f:5d:2f:89:9c:36:68:38:7b:02:6c:7a:22:
         52:4b:fb:30:60:62:6c:70:f3:21:9d:ad:ee:3e:c6:19:0d:3c:
         0a:60:08:b2:e2:6c:08:51:9b:54:3a:56:1c:6d:9c:17:08:13:
         74:95:fd:4e:cc:be:fa:95:6b:bf:0e:8d:9c:74:2b:2e:e4:f2:
         7a:af:b3:cd:58:60:90:46:03:a1:ce:73:87:13:04:16:61:4f:
         9a:24:f6:a5:0b:7a:f3:c7:2d:1d:42:03:26:19:61:a4:bb:9d:
         6d:be:2a:a0:a7:f3:3c:44:54:d5:e8:48:eb:a8:f0:97:ec:72:
         82:25:dd:ab:4b:e0:49:a3:4c:ef:a2:47:b7:1a:ab:94:2f:9b:
         d4:27:5c:d6:60:ac:f7:67:4e:6c:6f:e6:af:0d:5e:c5:19:ee:
         e3:35:ff:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:30:44 2026 by rpki-client