Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e7a4df4d-b672-3eba-8d6a-af94809727ca.roa
File:                     e7a4df4d-b672-3eba-8d6a-af94809727ca.roa (raw, json)
Hash identifier:          iOUUzKAPo0MVoVjH5+bnbz3dcDaCcoMZFJAEmfcGbEo=
Subject key identifier:   6D:31:CE:8F:F9:3E:6D:74:8F:E3:12:06:DB:3B:AB:17:1C:AC:93:73
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584E0005F6C93539602E05D18100
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e7a4df4d-b672-3eba-8d6a-af94809727ca.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     395973
IP address blocks:        104.134.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:f6:c9:35:39:60:2e:05:d1:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=5e9cebe2-d3db-46d2-b833-c4e26b5afa1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:db:3d:b3:ff:d1:71:0f:c8:7b:b1:89:48:12:
                    b1:60:24:19:13:e7:47:88:89:05:a9:53:aa:38:7c:
                    a2:34:1e:11:d9:ae:7a:00:3a:ad:74:00:1a:95:0b:
                    5b:ce:9b:c5:d7:55:cf:64:12:b6:8b:72:e0:8c:45:
                    31:b8:62:7a:d8:20:65:48:fd:fc:a0:16:ad:d7:2c:
                    bc:92:7f:d4:d1:8b:6d:8a:cd:fd:da:47:7b:5b:9c:
                    75:38:41:ad:20:d2:0a:74:56:d4:3f:ee:33:1c:99:
                    1e:47:02:ea:e4:e2:77:96:76:89:58:49:72:a1:5e:
                    ea:e0:a5:eb:7e:c5:2a:37:76:a8:6c:41:b8:12:c2:
                    e0:b5:34:9b:cf:10:f1:9b:4d:02:ad:2e:9f:d4:f2:
                    d1:e9:b0:4d:28:68:39:e6:30:04:02:d5:e9:ae:19:
                    77:57:6d:0c:d7:a4:d0:68:78:a9:a2:29:ad:eb:05:
                    64:1d:c2:67:b6:18:e1:f6:7b:ae:fa:82:be:7b:a2:
                    67:c8:bb:e6:72:bb:9d:59:da:39:8b:e7:fc:dd:c4:
                    3b:e1:71:45:dd:c1:d7:62:f3:26:be:e0:62:85:f9:
                    43:7e:a1:0b:07:ed:23:7e:8a:4e:e4:a6:6b:8a:fe:
                    1e:61:73:04:a7:27:b5:96:a8:60:7e:22:ac:a6:ec:
                    03:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:31:CE:8F:F9:3E:6D:74:8F:E3:12:06:DB:3B:AB:17:1C:AC:93:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e7a4df4d-b672-3eba-8d6a-af94809727ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:01:0b:da:36:86:6c:96:48:83:04:c1:ae:96:d7:46:9c:bc:
         7a:d6:ce:cd:db:87:c3:9c:10:bd:de:64:d6:01:f3:23:57:ea:
         6d:5e:59:2b:21:7a:fd:62:6b:ec:4d:5d:54:30:56:66:b7:d8:
         3e:6c:eb:be:76:d4:00:5a:f1:78:d4:7d:f3:4c:73:9d:07:3a:
         65:5b:cd:10:4c:60:b6:8d:2f:10:d7:c8:b8:86:3a:61:2c:0a:
         a3:a5:57:fc:81:30:11:81:f5:6d:b3:5e:66:f7:66:5f:4d:d7:
         ee:f0:bc:7f:20:a1:b2:1c:65:2c:3d:68:75:5f:c2:d3:fa:72:
         6e:07:f9:3b:cd:62:07:33:e1:25:5b:03:56:93:af:70:f7:4b:
         ee:49:25:42:19:04:74:67:74:57:d6:10:55:5f:03:5b:7b:89:
         e4:9e:2b:f9:54:52:c1:8d:00:4b:97:5d:ac:cf:10:c4:81:91:
         64:f1:0d:bd:24:a8:f1:68:da:bb:f1:e4:9a:0a:9d:6e:c2:69:
         22:9c:f1:9c:f6:d8:d1:f0:d8:d5:40:2c:70:f5:a5:d1:b9:81:
         4b:f4:20:ab:7c:4f:b8:16:b5:ee:dd:91:0d:05:aa:e4:50:70:
         f9:3e:0e:ad:49:89:63:4a:f9:0e:e2:01:9c:12:ab:83:8b:da:
         df:04:31:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:28:27 2026 by rpki-client