Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cfd5bacf-b676-36e1-b190-4f38b062ea59.roa
File:                     cfd5bacf-b676-36e1-b190-4f38b062ea59.roa (raw, json)
Hash identifier:          Qwe0MTKRZx38X1J8lMa+WgG/ESJtpOqJO6SDSVQte7g=
Subject key identifier:   81:53:6E:61:A5:A8:74:47:AC:0E:7A:F7:5B:5B:3A:C1:C6:F6:74:56
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584E0006137CD10FBA917AD0DA00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cfd5bacf-b676-36e1-b190-4f38b062ea59.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     36411
IP address blocks:        104.134.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:13:7c:d1:0f:ba:91:7a:d0:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=5ff8917e-8b5c-422d-859b-4c39f42f161f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:74:3f:94:bc:a7:13:ee:7e:3f:89:32:9b:35:
                    38:9f:3c:cc:49:01:a7:5c:0e:61:73:45:ae:3f:c9:
                    b9:19:dc:10:0e:e2:60:f1:80:6d:ca:3d:3d:16:9d:
                    73:de:ad:c1:fe:39:48:ac:9a:e8:52:66:8d:3d:f7:
                    80:ef:3b:66:38:31:36:e0:08:5a:91:fe:82:82:4c:
                    fe:a4:95:ec:48:35:1b:22:52:8f:b8:6c:35:83:26:
                    e0:4e:67:bd:76:43:7b:f5:fb:4e:ca:7a:43:46:fa:
                    ec:1e:c5:c1:df:ea:9a:49:b5:8d:07:f5:e1:f6:7f:
                    06:ab:ab:a5:a9:5f:36:83:a0:df:3b:a9:be:4d:b1:
                    25:fc:a1:33:3c:3f:d1:4b:f3:d7:a4:38:c8:2c:d8:
                    c2:4c:13:e6:51:73:34:94:8b:c9:55:a9:2c:d6:19:
                    30:15:10:db:a1:02:87:cf:d2:52:05:85:25:f2:00:
                    98:48:ac:ea:fa:7c:52:4a:ee:1c:f9:42:6c:71:7b:
                    a4:60:ce:43:de:65:65:52:75:b0:95:4f:13:b8:40:
                    7f:e0:80:b9:3d:12:c3:89:2a:79:cc:b7:49:41:09:
                    24:c0:8c:77:ed:67:7c:34:a2:50:c3:8b:9f:95:e2:
                    3f:aa:fd:52:3f:b4:c6:28:c7:38:dd:c5:8a:0f:38:
                    8c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:53:6E:61:A5:A8:74:47:AC:0E:7A:F7:5B:5B:3A:C1:C6:F6:74:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cfd5bacf-b676-36e1-b190-4f38b062ea59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:ca:87:0b:a1:0a:a0:a5:07:cf:c4:f7:8e:4e:6a:bf:01:4e:
         e4:54:f8:42:e5:8f:17:ec:9c:00:92:60:af:7a:17:aa:df:30:
         4c:4b:ec:5f:29:4c:92:62:4e:57:c5:ca:3e:cc:6a:6d:cb:17:
         f8:72:90:25:83:d2:d4:dc:c0:81:ae:31:d7:b2:cf:71:09:32:
         cb:7a:fb:27:b1:de:1c:54:63:01:b1:d9:2d:31:87:93:02:31:
         c8:1d:f8:85:fd:04:5f:4a:07:78:c5:f6:ca:c3:aa:ee:bd:88:
         ea:57:76:83:8e:36:1f:26:38:3f:79:17:fc:18:e3:8f:68:0c:
         e0:3a:28:3d:36:3e:18:85:bb:40:58:b0:42:4b:2d:33:48:25:
         fb:b9:8e:83:6d:4a:f1:a5:e9:51:c3:9d:42:11:4d:97:22:6f:
         46:b2:b0:b4:a5:c8:93:11:4f:81:61:a3:c5:3c:fc:e7:5e:00:
         a5:b6:e0:b9:a5:ee:c2:19:2f:92:55:8b:12:cf:18:5e:d8:90:
         e8:bd:2b:48:b2:8f:43:a3:5f:ca:e7:37:9b:cf:ca:61:f4:6b:
         0f:d5:50:32:dc:3a:a9:32:75:5a:80:49:6e:01:f0:a1:85:bd:
         9f:79:de:dc:7e:7f:3e:6e:dd:6a:11:b0:04:24:b0:af:68:39:
         aa:d5:46:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:30:37 2026 by rpki-client