Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e0cdd86f-bef6-3429-846c-e793c0db3717.roa
File:                     e0cdd86f-bef6-3429-846c-e793c0db3717.roa (raw, json)
Hash identifier:          wAuNTuexpg39QcP0nayY15q8JaH5vXDdEmdu2BrCsDw=
Subject key identifier:   B0:2A:DC:8B:37:6E:48:AE:C0:A8:80:84:10:21:09:0F:FB:1B:26:9A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF4DB6C5CB2ECDEF4F1EB73C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e0cdd86f-bef6-3429-846c-e793c0db3717.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     15169
IP address blocks:        104.134.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:6c:5c:b2:ec:de:f4:f1:eb:73:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=049ea2b4-a203-441b-880c-e86444a6a453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:aa:2c:ab:3c:88:3c:11:f2:1b:71:6d:c1:f4:
                    ab:87:9e:39:b4:ad:4d:2c:68:e9:28:69:91:8b:95:
                    ea:0a:f4:7e:ed:18:0a:d4:18:a7:8f:9b:f6:10:86:
                    35:f2:b1:88:62:6c:c1:b2:c1:57:1c:2c:de:0a:10:
                    98:05:1f:92:b1:bb:aa:48:ec:a5:4d:6e:24:eb:3d:
                    e9:97:38:70:ea:58:e5:de:1c:2e:c3:fe:23:c5:14:
                    bb:34:9b:fd:71:82:05:41:40:c8:92:3f:da:10:71:
                    6c:a0:c3:96:88:8c:36:39:bd:3e:c9:ab:31:8f:e2:
                    47:a8:89:ea:8a:fc:26:f6:6c:9e:cb:67:9e:c8:16:
                    aa:15:1a:cd:e5:1d:46:f5:fe:d7:b7:53:15:88:7f:
                    44:a0:43:2f:d1:72:97:3d:2d:0d:21:ba:4e:c8:d3:
                    55:ce:ad:88:be:f1:4e:76:f9:20:0d:95:4a:e1:d6:
                    2d:c5:6a:dd:b6:75:72:dc:4e:25:29:69:99:b6:ab:
                    8b:da:b1:9f:40:d5:c7:01:6c:3b:58:94:d4:cc:10:
                    98:a2:da:2f:a1:59:d7:e0:ef:71:a3:3a:68:2a:04:
                    a3:e7:90:77:de:58:89:14:91:59:b9:14:a6:30:83:
                    81:4b:f1:ec:4d:89:28:09:5a:e2:29:65:2b:ba:55:
                    63:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2A:DC:8B:37:6E:48:AE:C0:A8:80:84:10:21:09:0F:FB:1B:26:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e0cdd86f-bef6-3429-846c-e793c0db3717.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:c3:43:18:21:9b:fc:b2:bb:b5:ff:e9:93:25:ad:eb:f6:51:
         4f:08:47:76:4e:9d:65:67:b3:68:3c:3d:4e:95:6a:3f:c2:96:
         6c:d4:64:17:52:b6:13:b3:d2:08:e9:1a:50:97:13:22:50:8e:
         c9:ee:ca:5b:5c:b1:a6:59:87:de:b4:33:06:22:b0:99:7a:3a:
         e8:fe:1e:88:56:18:80:15:a9:b4:43:08:e4:1a:91:54:bc:30:
         f6:38:a4:d4:8d:28:ee:fb:db:d4:49:17:ab:a0:b7:b0:d8:54:
         c6:50:37:7c:4c:32:69:6b:da:ea:af:5e:57:f7:fa:85:09:58:
         5a:ca:3f:ee:4a:84:f3:bd:d3:8c:17:f3:16:d8:64:58:f9:17:
         2c:2f:f5:35:42:dc:bf:cc:49:d7:cd:17:1d:18:ef:f6:fb:dd:
         ac:b4:48:fe:2e:c8:d4:d4:00:51:a4:5e:33:66:e9:23:74:9f:
         4b:6b:f4:32:b5:ad:81:cb:c9:07:50:57:0a:6b:b3:7b:6f:bd:
         c9:99:44:ed:f1:a8:e5:ae:ab:a0:e1:66:03:65:3c:2b:0a:47:
         de:74:41:e2:d6:00:a3:86:1c:bd:ee:4d:1e:48:cf:5a:fb:4b:
         b7:f0:11:0a:6f:ff:b8:b0:b7:e8:8f:a8:7c:65:25:c3:55:37:
         96:e3:6b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:29:45 2026 by rpki-client