Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ecf958e5-27ff-332e-aa19-692c325025ea.roa
File:                     ecf958e5-27ff-332e-aa19-692c325025ea.roa (raw, json)
Hash identifier:          QgD2ITPHTpgUV+m0BTukHmXkUBkqZfLD8IFc94bNLtA=
Subject key identifier:   24:7E:79:37:76:F7:7C:75:E2:CB:29:AA:20:2C:9E:DB:CB:54:4C:CD
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF4DB7E1D1ED158764F0922C4
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ecf958e5-27ff-332e-aa19-692c325025ea.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     395973
IP address blocks:        104.134.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:7e:1d:1e:d1:58:76:4f:09:22:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=7b9ef1d3-a758-4152-b814-5314e9c1b053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:98:7c:75:42:ea:0d:9b:4e:68:e6:06:90:5e:
                    60:fa:b0:1a:7d:d6:4c:2d:d7:06:49:5d:58:11:72:
                    ed:e5:98:bb:13:db:64:da:ae:86:5e:4e:3c:0e:d3:
                    2c:22:ba:ca:5a:a9:70:4b:40:3b:3a:0d:93:3e:7f:
                    e3:01:6b:48:04:e2:44:3a:92:fd:88:6d:e2:ab:ae:
                    04:b6:d7:25:1f:68:b6:28:a0:28:9d:6b:7a:06:0b:
                    e8:76:b8:85:29:fb:9e:b5:b8:1f:96:b6:82:1c:cd:
                    0e:91:0a:92:50:70:a2:72:97:42:98:e5:f1:21:10:
                    ad:3a:e9:de:df:2e:fe:bf:03:ee:03:75:e6:20:a0:
                    24:77:89:23:2c:90:74:47:2d:d4:71:f1:a2:73:2b:
                    b0:9d:68:5c:32:d2:97:8f:11:d9:b7:f3:a0:56:d8:
                    70:51:43:07:47:94:76:89:20:4b:60:7c:b7:aa:f9:
                    b7:45:17:16:78:f0:20:8d:a2:f5:e2:02:84:b3:7d:
                    6d:09:cb:99:8d:f0:b2:bc:0f:c2:af:a6:ad:5c:25:
                    e5:6c:91:bb:93:75:b1:de:ee:5d:74:28:13:3e:8a:
                    23:aa:69:aa:b3:e4:e6:0a:35:24:22:05:e6:dd:a0:
                    b8:05:46:9d:a3:ba:29:29:52:44:04:9a:9e:2e:00:
                    cf:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:7E:79:37:76:F7:7C:75:E2:CB:29:AA:20:2C:9E:DB:CB:54:4C:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ecf958e5-27ff-332e-aa19-692c325025ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:df:6b:d2:b5:cc:65:ff:2f:84:6c:b6:32:3b:21:e2:3f:fa:
         f5:d0:6a:e7:03:77:86:69:8c:b8:ab:98:ec:83:66:5d:ec:86:
         3e:8c:71:14:22:88:06:ff:00:0d:ac:71:6b:cc:83:39:dd:3b:
         7d:4b:09:ff:30:02:37:61:c3:33:3e:58:bb:37:92:5a:0b:35:
         7d:88:a5:fc:1d:ad:d8:ec:24:98:a6:96:1c:00:51:9b:9c:8c:
         71:f5:6f:da:77:88:60:c5:0d:35:2b:c6:2a:1b:96:d0:8d:36:
         69:33:c5:0c:94:57:a1:53:0e:c2:ed:3a:dc:86:97:d5:14:c0:
         e0:9f:b3:5d:b8:0b:2f:08:ae:1c:1d:b4:a4:9b:f0:66:80:a7:
         b6:4d:2a:b3:1c:6d:c9:86:fc:7c:e0:b1:f8:e1:ca:6c:2f:3a:
         7e:92:61:53:4a:38:2f:79:e9:bf:53:35:02:5c:ee:a8:c4:5b:
         e5:da:08:0e:43:35:32:55:d9:b2:39:f9:5f:04:a1:cb:14:8d:
         38:b4:0b:52:cf:44:44:2e:f1:f7:db:d8:ee:4e:73:d7:43:5d:
         d5:3f:7f:74:a5:21:1d:61:b9:40:92:58:cc:94:81:45:92:cb:
         dd:02:85:0c:a5:75:ea:2f:63:e0:a8:4a:24:77:a4:30:b0:ef:
         27:4b:46:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:32:08 2026 by rpki-client