Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f38a1f-619d-3c12-b661-52e2bc8bc04d.roa
File:                     d9f38a1f-619d-3c12-b661-52e2bc8bc04d.roa (raw, json)
Hash identifier:          cyEJaPKmoBMhCSSdBrZjzw3FL0KPouuqUydRMIlVobk=
Subject key identifier:   CF:FE:A1:1E:8E:23:5F:CC:32:8B:82:DB:51:E2:56:9E:4D:44:C4:C3
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF4DB6C7EE26DA2D031169280
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f38a1f-619d-3c12-b661-52e2bc8bc04d.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     395973
IP address blocks:        104.134.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:6c:7e:e2:6d:a2:d0:31:16:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=9b7a5587-179d-4630-8e50-aee5ca09917f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:36:9a:a3:bc:ae:dc:1d:e2:f5:42:da:38:ef:
                    bb:8d:d0:8a:2f:98:0d:dd:ff:47:ad:ea:c6:cd:41:
                    8c:fb:b9:41:2f:0b:0f:1d:6d:25:60:8b:25:20:e1:
                    47:b9:ea:18:72:87:2a:a9:52:cd:33:22:fd:55:33:
                    44:01:57:bb:94:0f:4a:08:9f:8c:fb:b4:ef:3e:c1:
                    b2:38:5c:ae:a1:89:8c:6a:f1:3a:98:6b:33:2b:41:
                    3e:1b:47:b5:fa:d7:11:c5:1a:5a:18:3e:b0:c3:e4:
                    37:ca:83:0c:94:51:9d:7b:82:5e:8a:bb:40:01:f2:
                    63:c4:23:eb:65:e2:0a:55:55:88:92:47:a7:f9:86:
                    3a:2a:1e:ef:8c:2c:7e:9d:49:aa:a1:90:41:ed:be:
                    ab:ee:11:26:b3:70:61:bf:3f:5f:dd:37:0c:9c:87:
                    f6:52:5d:5d:25:92:e8:94:93:da:7f:29:a5:ac:ab:
                    bb:4f:a6:1d:8d:9a:91:9f:80:22:6b:9e:2b:7e:a7:
                    f3:89:da:9e:9f:85:95:89:bd:e5:41:f5:83:d0:97:
                    3a:22:54:ae:ea:9d:43:c7:d3:51:e8:e8:b0:ce:b3:
                    43:fc:2c:4d:40:3f:e1:b6:fa:d2:5d:06:a4:bb:ab:
                    42:6c:f6:bd:f8:28:f7:06:21:59:1e:0c:9d:b5:c2:
                    40:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:FE:A1:1E:8E:23:5F:CC:32:8B:82:DB:51:E2:56:9E:4D:44:C4:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f38a1f-619d-3c12-b661-52e2bc8bc04d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:e5:d6:8e:bb:73:e8:b6:55:2a:64:74:8a:00:bd:4e:b8:55:
         72:cf:f7:3b:a7:fb:63:94:76:d8:d3:d0:09:1b:db:6a:28:cf:
         3f:cc:3d:90:a7:f7:91:a1:44:94:98:7a:f6:41:79:d0:eb:30:
         e2:0f:fb:61:a0:02:a5:d4:36:0a:89:ea:96:bd:30:0b:c1:9f:
         03:93:0f:0d:02:e1:2a:66:25:7c:65:ee:74:5b:20:c5:38:1f:
         ee:6d:e5:ca:1f:66:d0:77:eb:09:9d:59:c9:70:04:bb:28:91:
         d6:54:fd:19:8c:93:b1:f9:cd:9a:88:cf:3b:4c:a2:11:c6:04:
         20:23:a2:ac:3d:d6:26:0d:ce:af:0b:03:b4:53:1f:13:ed:62:
         08:12:68:f9:c8:f2:0d:d1:9f:7f:c8:95:a5:eb:b9:38:da:18:
         6f:95:83:73:b1:a6:da:80:05:46:8f:09:95:24:c7:62:32:e5:
         42:b2:18:e2:a8:b2:65:67:8a:94:70:84:03:4f:2f:57:f7:ac:
         04:0d:43:44:38:af:ab:a3:9c:4e:6e:ed:44:85:f6:89:73:95:
         aa:4c:4f:fd:98:f3:c2:fc:0f:c0:b3:98:40:7f:1b:85:f3:87:
         6f:99:38:75:57:e4:21:21:17:ce:16:aa:f0:aa:3d:e6:82:ed:
         2c:90:4b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:32:25 2026 by rpki-client