Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0ed7484a-f5ad-35dc-a862-5d72be7259c1.roa
File:                     0ed7484a-f5ad-35dc-a862-5d72be7259c1.roa (raw, json)
Hash identifier:          5drkELutwXPYDBAjNwhAjFk4e3wWOGYXBcxhtofZNAU=
Subject key identifier:   ED:3C:2E:E0:C8:78:60:E0:1E:3F:83:B7:31:22:2D:E9:4A:33:76:D6
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584D6C0FAF651BB3D84813F6DE00
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0ed7484a-f5ad-35dc-a862-5d72be7259c1.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     19437
IP address blocks:        104.254.234.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:af:65:1b:b3:d8:48:13:f6:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=34b3ceaa-5d3c-4d0c-917b-0e670d381824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1b:59:ed:db:94:de:80:94:a2:7c:02:58:a5:
                    cf:d8:91:16:82:7e:b3:83:74:2f:77:27:e7:cb:30:
                    53:59:e9:a0:78:1f:ff:2e:ff:ae:4a:5b:99:29:2b:
                    23:e6:b1:7d:27:fb:dc:d9:97:12:d9:d7:74:3f:88:
                    b9:db:c7:de:95:ed:ad:20:f3:35:7a:be:d5:13:c6:
                    03:38:bb:66:4e:5d:05:4e:e3:cd:ef:ad:98:17:34:
                    30:bf:53:3c:35:4e:03:a3:eb:5f:1e:7c:31:47:3e:
                    14:69:bb:5c:87:aa:af:e8:63:d9:c7:95:45:71:39:
                    77:9b:9b:90:1d:d9:9b:76:25:90:73:32:e9:52:c3:
                    3e:63:60:69:34:18:25:4e:db:92:1c:42:53:f2:27:
                    21:56:7d:78:71:3e:ff:38:ea:50:50:37:74:a4:8d:
                    e4:1e:5f:ca:25:83:57:0c:5c:d8:06:6b:22:84:c2:
                    25:36:28:50:1a:d9:3c:66:ff:0a:4b:d3:d7:78:44:
                    0e:b8:d5:b0:c2:a1:84:c2:bc:f5:ff:56:66:de:fd:
                    c7:db:83:75:f0:1b:02:2b:0d:1a:28:db:84:c7:b9:
                    ee:a2:b3:ab:7e:b1:f2:87:6a:a8:f2:56:8d:5d:9b:
                    83:00:ce:be:84:98:81:de:1a:9f:4b:04:af:72:4f:
                    6b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3C:2E:E0:C8:78:60:E0:1E:3F:83:B7:31:22:2D:E9:4A:33:76:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0ed7484a-f5ad-35dc-a862-5d72be7259c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:71:45:24:52:00:fd:97:66:92:86:68:cf:02:21:19:af:38:
         31:09:81:a6:bf:e1:41:09:14:77:fd:ba:2f:52:a6:58:76:8b:
         7e:f4:0b:c6:4a:ac:5d:b9:27:a1:1d:69:24:1a:2f:23:2b:72:
         e9:80:47:71:c3:c0:ec:4a:90:4a:99:50:3e:ff:57:96:9a:59:
         c8:17:5c:64:9a:bd:7d:6d:53:37:73:99:98:ed:b9:05:ca:a1:
         6c:14:6d:6f:56:50:b1:7a:a3:39:02:9f:33:88:0c:1a:df:c8:
         91:6a:c7:a2:76:37:73:18:c8:42:50:f9:c0:83:4e:b7:c6:b9:
         22:f7:6a:14:ae:ce:bc:f1:ae:af:57:2d:58:8e:3a:9e:c4:57:
         05:15:11:3a:10:69:7e:de:8e:9e:7f:ae:3a:ca:fc:00:a1:0f:
         0f:d5:a4:0c:df:a0:b1:7a:c5:5b:b7:69:ab:07:0c:29:e8:5f:
         c1:a5:07:a9:38:b9:70:d0:6c:00:0c:6b:e7:8d:8c:e7:80:ab:
         d0:42:82:81:48:fc:d8:f6:5c:6d:c5:69:23:5e:c1:49:0f:3c:
         b5:55:b6:af:34:60:21:8c:ff:ab:d6:05:ea:78:42:d5:2d:7e:
         64:d6:18:96:2c:06:e2:15:08:78:be:2f:38:95:25:3e:20:4a:
         7f:f3:34:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 07:19:55 2026 by rpki-client