Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/12f9e8c7-186b-377c-a916-d7f2ff4e4d42.roa
File:                     12f9e8c7-186b-377c-a916-d7f2ff4e4d42.roa (raw, json)
Hash identifier:          jcWhtz7GI0RHRa9Bv6UPdugAodC+uvORxHxwdNU9K7c=
Subject key identifier:   CC:44:55:AC:2E:94:B9:E2:D6:ED:94:FE:66:D3:E9:FB:E5:3A:9E:E8
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D1F4A4BF87D93B37D3F1CB8A0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/12f9e8c7-186b-377c-a916-d7f2ff4e4d42.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     15169
IP address blocks:        104.134.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:4b:f8:7d:93:b3:7d:3f:1c:b8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=f86dbdf7-130b-4b4b-9acd-59d4b362d8bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d4:29:51:18:fd:1d:94:5b:ac:a5:fd:c6:ae:
                    0b:4d:f8:9a:7e:2c:5d:95:9d:a5:29:30:ad:79:ab:
                    e1:ef:30:97:b8:97:b7:1e:c3:bc:9f:d0:4a:70:46:
                    43:4c:19:e1:d4:76:69:ca:5b:52:08:9b:d1:c3:b4:
                    16:c0:17:6f:87:58:78:bf:d9:e3:48:68:12:19:0b:
                    e7:18:97:c8:29:6f:d1:36:ce:81:33:de:ee:67:cb:
                    12:64:54:1e:27:a4:90:64:8d:6a:b8:df:5d:81:e9:
                    16:c8:59:a9:d4:9c:eb:d2:88:f9:57:ca:67:a0:8a:
                    e4:4a:39:49:f3:18:ca:d2:f6:fb:49:47:1c:a1:65:
                    cb:da:b1:fd:61:9d:35:fe:37:96:60:8d:71:73:6f:
                    50:1f:3f:6e:9e:ba:82:47:8a:1f:f6:8f:c8:a1:e3:
                    8a:63:b9:bc:7f:42:98:da:ba:64:23:98:df:86:e8:
                    d4:96:83:61:69:de:22:8b:7b:4c:3f:61:ad:fc:12:
                    c0:8a:6a:f2:e1:18:76:2c:64:9c:d1:c1:86:3a:c9:
                    29:b8:30:01:ef:87:49:5e:65:a3:6d:74:25:ca:94:
                    40:1d:d1:a5:3e:39:17:92:ce:91:16:db:96:29:ad:
                    ce:a1:34:0c:0c:f9:4e:af:f0:ec:50:e8:a2:f2:d2:
                    03:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:44:55:AC:2E:94:B9:E2:D6:ED:94:FE:66:D3:E9:FB:E5:3A:9E:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/12f9e8c7-186b-377c-a916-d7f2ff4e4d42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:78:85:d0:2d:d0:37:26:6b:da:fe:40:8f:91:87:86:04:fc:
         e5:bd:9a:9d:d2:84:36:7f:72:38:c0:d0:d9:a1:73:a4:1d:8b:
         46:c1:bc:6d:c6:c7:8c:8a:da:e4:5d:55:14:08:a5:b1:5b:d6:
         48:7c:50:53:c6:ba:12:9b:bf:ee:15:9e:9f:96:35:2c:26:65:
         41:8a:dd:54:39:bb:9a:e0:65:a4:48:b4:bc:a4:bd:f3:60:9f:
         d4:6e:34:53:85:62:fc:8b:73:96:f7:a2:e9:cd:3f:a5:3b:32:
         b8:f5:59:8f:2c:66:00:bd:ca:35:9a:17:16:48:03:cf:8c:9e:
         9a:73:ae:4d:bc:e1:20:93:08:eb:77:8a:40:c6:6b:73:f5:37:
         e3:ce:ac:80:a4:28:6a:2b:c8:9a:d5:f6:56:09:1e:3b:38:0b:
         96:57:1d:3d:30:91:c4:99:ae:8f:c1:68:54:a1:e1:2e:37:45:
         86:7b:7b:f2:de:3e:56:8f:17:be:56:cf:a7:f0:82:29:1a:09:
         32:8e:fc:99:ec:a2:8e:62:3a:3c:e3:8e:5b:3a:ea:83:e4:bd:
         41:b2:20:5a:fd:af:52:e6:d9:d2:6e:28:2e:c3:23:52:5c:07:
         5d:79:3e:52:ee:43:e8:d8:08:13:d5:19:ee:08:5f:77:0c:00:
         f1:7b:38:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSkv4fZOzfT8cuKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk
Zjg2ZGJkZjctMTMwYi00YjRiLTlhY2QtNTlkNGIzNjJkOGJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9QpURj9HZRbrKX9xq4LTfiafixdlZ2lKTCt
eavh7zCXuJe3HsO8n9BKcEZDTBnh1HZpyltSCJvRw7QWwBdvh1h4v9njSGgSGQvn
GJfIKW/RNs6BM97uZ8sSZFQeJ6SQZI1quN9dgekWyFmp1Jzr0oj5V8pnoIrkSjlJ
8xjK0vb7SUccoWXL2rH9YZ01/jeWYI1xc29QHz9unrqCR4of9o/IoeOKY7m8f0KY
2rpkI5jfhujUloNhad4ii3tMP2Gt/BLAimry4Rh2LGSc0cGGOskpuDAB74dJXmWj
bXQlypRAHdGlPjkXks6RFtuWKa3OoTQMDPlOr/DsUOii8tIDVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMxEVawulLni1u2U/mbT6fvlOp7oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMTJmOWU4YzctMTg2Yi0z
NzdjLWE5MTYtZDdmMmZmNGU0ZDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAR4hdAt0Dcma9r+QI+Rh4YE/OW9mp3ShDZ/cjjA0Nmhc6Qdi0bBvG3G
x4yK2uRdVRQIpbFb1kh8UFPGuhKbv+4Vnp+WNSwmZUGK3VQ5u5rgZaRItLykvfNg
n9RuNFOFYvyLc5b3ounNP6U7Mrj1WY8sZgC9yjWaFxZIA8+Mnppzrk284SCTCOt3
ikDGa3P1N+POrICkKGoryJrV9lYJHjs4C5ZXHT0wkcSZro/BaFSh4S43RYZ7e/Le
PlaPF75Wz6fwgikaCTKO/Jnsoo5iOjzjjls66oPkvUGyIFr9r1Lm2dJuKC7DI1Jc
B115PlLuQ+jYCBPVGe4IX3cMAPF7OCs=
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:39 2026 by rpki-client