Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/24c7ae10-6efe-312d-8d6f-b6c26e5a4be0.roa
File:                     24c7ae10-6efe-312d-8d6f-b6c26e5a4be0.roa (raw, json)
Hash identifier:          QOlpW+4l1D/LCyBOVrNt5Q3VL5lS5kPN0KoZALMsbs4=
Subject key identifier:   7C:BC:9E:40:9F:3B:97:62:AE:DA:3D:80:02:29:90:CA:83:B9:7A:FE
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D1F4A601CFE127420E2E2BD80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/24c7ae10-6efe-312d-8d6f-b6c26e5a4be0.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     15169
IP address blocks:        104.134.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:60:1c:fe:12:74:20:e2:e2:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=42271fa5-bcbf-4d9c-b008-9e9ddefac4c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:82:4c:17:64:8b:a0:51:0a:34:70:6f:4f:8a:
                    61:eb:5d:4d:f4:c7:14:ec:71:c2:79:da:79:20:0a:
                    5d:54:55:87:5e:be:c4:1a:b9:97:2f:b3:95:de:23:
                    bd:05:15:70:ff:3f:56:15:b2:2f:a4:07:08:f4:d8:
                    68:f9:75:cf:90:36:92:0f:94:23:bf:b0:75:c7:91:
                    6b:9a:f6:b5:ed:d6:92:31:73:39:ee:3d:c0:9e:37:
                    b8:c0:a0:4b:e6:d0:0f:fb:9f:ac:99:d5:90:4b:27:
                    e2:b6:d9:fc:e3:21:35:99:1e:3e:32:95:e2:33:80:
                    6f:bf:59:80:93:c1:b7:c9:b1:93:e6:9a:fa:3e:cd:
                    48:c4:bb:0b:af:ed:67:31:ed:08:8f:c0:2e:2c:31:
                    02:09:44:ad:51:b0:39:bc:73:0d:c1:dc:76:05:b8:
                    dc:00:d5:7d:ca:df:63:b3:61:a7:f4:92:93:78:39:
                    08:a6:97:c6:87:86:55:44:ec:c8:b8:3a:fa:11:32:
                    ca:41:e5:32:01:4e:f8:b2:1b:b7:6d:e9:fb:68:88:
                    2a:82:b1:68:e9:d8:1a:18:9c:fc:24:d3:5f:38:0a:
                    56:19:57:31:38:6e:4c:32:6f:c1:f9:9e:b2:c1:2c:
                    3e:54:64:14:5b:f7:16:ec:64:47:3a:48:c6:02:d1:
                    62:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BC:9E:40:9F:3B:97:62:AE:DA:3D:80:02:29:90:CA:83:B9:7A:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/24c7ae10-6efe-312d-8d6f-b6c26e5a4be0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:d3:00:8d:52:da:63:29:be:21:9c:29:3b:e5:09:f2:28:77:
         1d:86:d0:f9:3e:ba:df:bb:a9:33:f1:45:15:5a:f7:91:13:b9:
         b0:49:1e:32:5a:3a:c9:d1:bf:c2:9d:db:95:bf:f6:8e:91:7a:
         17:8e:ac:c1:13:0d:5b:a0:64:1f:5c:04:16:05:81:4e:dd:42:
         dc:68:91:f3:4f:25:a2:a7:b0:5b:98:aa:8f:64:bc:ec:1c:37:
         be:1a:fe:8a:60:25:8e:33:39:6e:94:72:c6:c8:84:e2:76:17:
         8b:6e:46:df:3f:9e:63:ef:24:c4:13:dc:1c:c9:97:d4:dc:e3:
         ee:87:ab:21:0b:44:15:b9:d4:68:e0:b1:79:3a:8f:1f:19:d7:
         eb:df:6b:20:3f:9e:25:e9:74:9c:79:73:a0:0c:51:76:c3:68:
         a6:16:8c:eb:19:df:70:ca:3a:65:af:52:b7:f8:87:a6:b8:fc:
         3e:dc:be:d8:19:25:fd:b1:3f:a4:5a:dc:cd:97:12:fa:24:84:
         9d:61:4e:18:c6:f4:0c:9c:fb:5e:75:3a:cc:6c:2f:46:ca:1b:
         b4:7c:c4:fb:34:47:18:8a:b9:f5:b4:ac:9c:50:a2:4c:a2:9a:
         9f:b4:2c:9a:40:2c:d7:08:15:83:3c:ab:51:37:b9:54:a6:8e:
         93:b4:a6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:58:29 2026 by rpki-client