Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/23202b2a-7b07-3d35-bb15-00ae2f859eb6.roa
File:                     23202b2a-7b07-3d35-bb15-00ae2f859eb6.roa (raw, json)
Hash identifier:          iotWlubNMqnm/3LJh5BrFElJyKs2LNDD3kyr7q4XeOI=
Subject key identifier:   6A:2C:0B:AB:D7:1C:28:43:A5:57:63:DE:A2:46:62:5B:18:40:AF:15
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DD0906F56645739564A32FD00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/23202b2a-7b07-3d35-bb15-00ae2f859eb6.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     15169
IP address blocks:        104.134.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:6f:56:64:57:39:56:4a:32:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=e09c4a17-430e-41bd-9301-1e63ff1c0ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0f:c0:34:62:71:b3:5c:7f:50:9b:a8:0e:bf:
                    a1:f5:35:f7:a1:7a:ed:20:e7:61:5f:4f:4c:9c:3c:
                    02:44:09:bd:c8:73:4a:ea:2c:ad:6e:cf:8f:6d:43:
                    ff:43:b7:70:a7:7d:ef:1a:10:68:7d:bb:a1:a9:bd:
                    6c:7b:14:61:d3:b6:4f:de:ef:ae:a2:22:f9:aa:3d:
                    0d:7b:22:29:d0:38:ef:91:16:0e:eb:be:47:a5:dc:
                    a3:d5:2d:7b:d6:7b:5b:04:69:2c:58:ba:d9:cd:a2:
                    43:6f:c7:e1:6a:40:b6:5b:c1:06:0e:47:7d:68:e4:
                    22:71:03:03:b4:85:7a:0a:45:9b:ae:8a:0b:cb:04:
                    c8:76:87:95:c8:2e:d5:aa:52:dc:bb:c6:e7:ba:9e:
                    ac:93:c8:b6:78:3a:a2:c7:7f:fe:5c:a7:8f:39:47:
                    f3:67:5e:d7:51:1a:38:d0:8b:3e:c0:28:f7:33:b0:
                    7b:a1:bf:7e:a2:d6:56:17:96:4f:2d:57:0f:f5:5f:
                    cd:68:af:0d:3e:94:32:b3:b0:16:50:23:be:c7:ec:
                    1c:be:21:70:4f:a4:03:6b:16:1d:56:50:fa:e6:15:
                    ee:97:0e:59:28:2a:4e:e6:fc:78:9a:21:40:89:f3:
                    7e:9e:34:12:8d:1f:99:98:f9:bc:89:2d:f6:14:8d:
                    0c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2C:0B:AB:D7:1C:28:43:A5:57:63:DE:A2:46:62:5B:18:40:AF:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/23202b2a-7b07-3d35-bb15-00ae2f859eb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:e0:cf:67:0d:c4:99:55:c5:bf:91:2b:31:e7:cb:fb:1e:33:
         6f:36:4b:bb:e1:cd:41:6f:91:d4:f0:d5:3a:f3:5d:a0:0b:ed:
         b0:6a:cc:12:90:b5:b4:41:ee:cd:ff:32:cb:78:b4:ab:cc:84:
         05:26:6a:99:9f:54:d2:ab:3a:c4:8d:00:ec:e8:67:82:82:89:
         b7:e6:11:19:26:ea:e4:ff:36:ac:3e:15:fa:de:a9:4c:aa:53:
         47:e9:7a:92:b8:f8:52:ef:c4:30:ab:68:d0:5e:f1:d7:08:f1:
         06:2c:d1:c5:a5:c0:fa:7a:17:96:80:37:0f:c7:db:cd:46:96:
         42:17:da:da:c7:12:71:bb:06:33:d3:11:b6:0a:6a:28:55:55:
         de:d3:1f:ea:37:96:10:92:c6:a9:49:91:6e:90:c0:de:26:38:
         0c:17:c2:55:34:be:26:70:c5:5e:b0:eb:27:a6:64:69:1f:c7:
         f0:d8:42:b5:2f:64:13:b8:cd:95:30:92:59:f6:8b:39:b2:4c:
         03:5f:ae:1d:05:cd:ce:ae:a6:50:a2:ea:70:e7:9e:fd:79:a7:
         32:0b:ec:59:d0:54:81:8a:9b:1e:4b:54:59:13:f8:64:21:68:
         63:f0:0a:37:b1:72:48:d3:72:45:99:3d:a7:38:b1:35:d5:bc:
         df:dc:62:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3QkG9WZFc5Vkoy/QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDUxMzAxMDAyNFoXDTI2MDgxMTAxMDAyNFowLzEtMCsGA1UEAxMk
ZTA5YzRhMTctNDMwZS00MWJkLTkzMDEtMWU2M2ZmMWMwYmEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAug/ANGJxs1x/UJuoDr+h9TX3oXrtIOdhX09M
nDwCRAm9yHNK6iytbs+PbUP/Q7dwp33vGhBofbuhqb1sexRh07ZP3u+uoiL5qj0N
eyIp0DjvkRYO675Hpdyj1S171ntbBGksWLrZzaJDb8fhakC2W8EGDkd9aOQicQMD
tIV6CkWbrooLywTIdoeVyC7VqlLcu8bnup6sk8i2eDqix3/+XKePOUfzZ17XURo4
0Is+wCj3M7B7ob9+otZWF5ZPLVcP9V/NaK8NPpQys7AWUCO+x+wcviFwT6QDaxYd
VlD65hXulw5ZKCpO5vx4miFAifN+njQSjR+ZmPm8iS32FI0MAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGosC6vXHChDpVdj3qJGYlsYQK8VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjMyMDJiMmEtN2IwNy0z
ZDM1LWJiMTUtMDBhZTJmODU5ZWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIYkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ/gz2cNxJlVxb+RKzHny/seM282S7vhzUFvkdTw1TrzXaAL7bBqzBKQ
tbRB7s3/Mst4tKvMhAUmapmfVNKrOsSNAOzoZ4KCibfmERkm6uT/Nqw+FfreqUyq
U0fpepK4+FLvxDCraNBe8dcI8QYs0cWlwPp6F5aANw/H281GlkIX2trHEnG7BjPT
EbYKaihVVd7TH+o3lhCSxqlJkW6QwN4mOAwXwlU0viZwxV6w6yemZGkfx/DYQrUv
ZBO4zZUwkln2izmyTANfrh0Fzc6uplCi6nDnnv15pzIL7FnQVIGKmx5LVFkT+GQh
aGPwCjexckjTckWZPac4sTXVvN/cYqQ=
-----END CERTIFICATE-----
Generated at Wed May 13 06:43:58 2026 by rpki-client