Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/03b38318-9228-3d9b-9da4-a755b157ed1f.roa
File:                     03b38318-9228-3d9b-9da4-a755b157ed1f.roa (raw, json)
Hash identifier:          se2QVg75BkItjC2kltk4YesR3HJ8MWTBrBQ147FghxU=
Subject key identifier:   B8:3B:EE:47:30:8A:83:2F:35:62:29:C1:EE:6F:4D:EC:81:F4:E2:8C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D1F4A79040E8BC598E1495F28
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/03b38318-9228-3d9b-9da4-a755b157ed1f.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     15169
IP address blocks:        104.134.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:79:04:0e:8b:c5:98:e1:49:5f:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=e773df4f-e826-4b48-a2b4-41f39c04fb43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:61:83:9e:98:ba:a9:be:72:e3:f7:6f:1f:3f:
                    99:4c:2c:95:17:15:17:20:cd:91:70:b8:5b:1d:91:
                    93:bb:06:a1:5c:2c:7a:5a:7e:2d:c5:e6:95:74:88:
                    0c:bc:b5:5c:1f:56:68:14:41:00:c8:8b:84:51:d4:
                    19:79:69:86:8c:c4:13:66:db:2e:87:f9:5b:aa:8c:
                    db:63:ab:0e:01:d7:38:8f:a9:40:94:cf:8e:92:62:
                    31:1a:74:b6:52:6c:47:31:8d:ea:fd:ba:69:9b:5d:
                    9a:4f:81:ad:70:b5:e8:12:b2:82:b0:c9:23:9e:61:
                    f6:66:c2:56:13:df:b8:4a:27:ab:b1:e0:77:df:3a:
                    c9:b1:10:12:cf:c4:f2:f9:45:4d:fc:5a:5b:fa:95:
                    6e:d4:4c:8a:7c:62:8a:3e:cc:6a:b7:fc:7d:03:7d:
                    d7:b1:63:66:d5:7c:0b:c6:74:4c:ce:62:52:4c:27:
                    17:41:93:bb:8e:32:19:13:ce:2f:30:b2:35:75:d0:
                    b9:92:07:43:8c:1f:f0:36:db:af:c3:cf:6b:24:b0:
                    16:df:f2:4a:23:21:77:9a:e1:a8:21:75:22:a9:fc:
                    62:8a:0f:32:2a:89:c0:08:f2:d0:c4:c4:5c:69:80:
                    d0:83:70:9b:1b:b0:b7:02:6b:79:0a:e3:b2:7d:96:
                    db:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3B:EE:47:30:8A:83:2F:35:62:29:C1:EE:6F:4D:EC:81:F4:E2:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/03b38318-9228-3d9b-9da4-a755b157ed1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:71:33:19:07:f6:6c:0c:8c:5b:94:38:42:42:21:2b:ad:bd:
         ef:c7:f8:64:3c:e6:d9:a1:10:20:9e:ec:0e:e3:3a:08:3c:56:
         ea:69:be:f3:8f:89:a0:93:e9:d8:02:35:a7:6d:a8:94:d1:ef:
         f1:70:9f:c6:e5:a1:ce:a0:db:99:c9:3b:d1:8f:6b:55:1b:48:
         63:69:a8:35:0f:5c:be:12:4a:a0:69:0a:c4:4d:49:e0:31:39:
         4e:eb:93:7c:fa:6d:58:13:67:fc:25:d5:66:a2:78:d9:d1:f5:
         40:92:c4:3f:3d:9b:91:bc:5e:34:6b:f4:22:98:31:23:5c:63:
         6d:cc:ed:5d:bd:9f:82:66:fb:87:f1:d4:7f:76:ee:6c:c7:e2:
         0a:39:3a:43:06:28:43:3c:37:3d:f4:1d:a3:e5:7d:99:dc:a4:
         b1:e7:1a:ed:33:8b:8b:b7:16:2b:c2:84:d3:45:82:05:d5:26:
         df:99:86:2d:19:81:f2:76:54:87:ce:af:6c:b9:a0:10:e3:ac:
         59:1a:f5:37:1b:61:1f:90:49:68:aa:c8:4b:a0:43:ef:ab:f0:
         8a:1e:fd:e2:62:b1:23:44:8f:f6:3f:7a:79:af:73:3d:b3:bd:
         e1:eb:18:62:87:1a:10:f9:a6:b0:a3:14:6e:da:6c:6c:69:ef:
         f3:12:e9:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSnkEDovFmOFJXygwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk
ZTc3M2RmNGYtZTgyNi00YjQ4LWEyYjQtNDFmMzljMDRmYjQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGGDnpi6qb5y4/dvHz+ZTCyVFxUXIM2RcLhb
HZGTuwahXCx6Wn4txeaVdIgMvLVcH1ZoFEEAyIuEUdQZeWmGjMQTZtsuh/lbqozb
Y6sOAdc4j6lAlM+OkmIxGnS2UmxHMY3q/bppm12aT4GtcLXoErKCsMkjnmH2ZsJW
E9+4SierseB33zrJsRASz8Ty+UVN/Fpb+pVu1EyKfGKKPsxqt/x9A33XsWNm1XwL
xnRMzmJSTCcXQZO7jjIZE84vMLI1ddC5kgdDjB/wNtuvw89rJLAW3/JKIyF3muGo
IXUiqfxiig8yKonACPLQxMRcaYDQg3CbG7C3Amt5CuOyfZbbQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLg77kcwioMvNWIpwe5vTeyB9OKMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMDNiMzgzMTgtOTIyOC0z
ZDliLTlkYTQtYTc1NWIxNTdlZDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD9xMxkH9mwMjFuUOEJCISutve/H+GQ85tmhECCe7A7jOgg8VuppvvOP
iaCT6dgCNadtqJTR7/Fwn8bloc6g25nJO9GPa1UbSGNpqDUPXL4SSqBpCsRNSeAx
OU7rk3z6bVgTZ/wl1WaieNnR9UCSxD89m5G8XjRr9CKYMSNcY23M7V29n4Jm+4fx
1H927mzH4go5OkMGKEM8Nz30HaPlfZncpLHnGu0zi4u3FivChNNFggXVJt+Zhi0Z
gfJ2VIfOr2y5oBDjrFka9TcbYR+QSWiqyEugQ++r8Ioe/eJisSNEj/Y/enmvcz2z
veHrGGKHGhD5prCjFG7abGxp7/MS6eU=
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:10:52 2026 by rpki-client