Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/275a86ef-3285-36c2-890a-392a04d9cfbf.roa
File:                     275a86ef-3285-36c2-890a-392a04d9cfbf.roa (raw, json)
Hash identifier:          WqYBeepCORltK/0dOaOWMxP7Q85rvZjzBSb/5j305+s=
Subject key identifier:   92:80:04:3F:ED:B3:42:DD:16:6D:4A:6B:97:52:4C:88:4D:BD:B4:09
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D1F4A4D12ED3828A6DB2C5D00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/275a86ef-3285-36c2-890a-392a04d9cfbf.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     395973
IP address blocks:        104.134.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:4d:12:ed:38:28:a6:db:2c:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=4bb79ec8-d30d-4f32-97e3-18fdde613c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:10:4e:a0:de:8c:cf:0d:03:14:4a:08:47:f8:
                    fd:9c:d5:71:76:d7:2d:08:10:4f:b5:de:09:0d:bc:
                    6b:19:35:a5:e6:6f:66:c8:91:06:64:21:8c:0f:b6:
                    f5:78:ad:91:ac:e2:7a:5b:7d:d3:3c:0e:28:a6:f0:
                    1f:62:ec:ab:3e:8f:10:41:e9:c5:75:37:ca:86:9b:
                    79:a0:e9:17:76:10:b4:5d:04:6e:71:82:6a:86:f3:
                    c5:0f:2c:4a:53:35:cb:9d:27:c1:52:b8:4b:bd:42:
                    ee:74:39:c1:41:5a:2a:bb:55:74:ee:74:9a:9b:d1:
                    74:81:48:d5:da:3e:5b:26:aa:e5:06:6d:40:f0:3b:
                    bc:cb:5a:1d:2d:3e:86:c0:6e:29:d1:c0:6e:3b:cf:
                    b6:a1:01:1f:6a:5e:d0:ff:31:bc:51:67:94:18:20:
                    a1:c9:64:b5:62:e2:ff:80:6e:b1:3b:17:23:19:66:
                    4b:53:f7:fc:4f:5a:80:b8:4e:5b:cb:88:bc:26:96:
                    8e:79:ce:c8:fe:44:6e:bd:72:a0:60:7e:bd:b1:b9:
                    2c:02:98:fb:dd:18:0f:11:1e:05:bc:e9:d3:d1:90:
                    73:ed:30:6f:8a:85:ed:2d:30:07:ce:a2:08:f8:90:
                    0b:3f:d2:39:d9:50:7a:4f:fc:bc:70:d5:74:21:7c:
                    40:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:80:04:3F:ED:B3:42:DD:16:6D:4A:6B:97:52:4C:88:4D:BD:B4:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/275a86ef-3285-36c2-890a-392a04d9cfbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:8e:5e:38:c5:3e:e0:07:5b:23:a4:49:e7:fa:0f:2f:cf:71:
         0f:ae:cd:4d:ba:1a:dd:4c:04:03:e0:94:6a:21:94:62:24:08:
         ae:d6:6b:4c:fe:cb:fa:6c:34:33:00:ab:6e:db:06:88:96:a4:
         6d:af:f8:88:80:21:af:bd:98:65:84:4b:e8:43:82:2d:13:b3:
         a2:7a:85:29:45:e0:d8:f2:6b:35:dd:ec:bc:67:fd:7f:36:91:
         e7:7c:f9:5c:ed:f8:91:d1:3a:18:1b:66:91:0f:e6:97:33:03:
         2f:2c:b9:73:e7:95:06:6e:d1:1c:67:d3:af:5f:15:0e:77:7a:
         d2:66:a4:5a:b6:89:07:92:96:ca:ea:f6:65:b3:13:0e:9d:a8:
         fd:c7:cf:19:2e:d4:3c:3b:2b:42:7e:d2:14:ac:1f:62:4e:b3:
         26:de:36:b7:ad:c4:54:b7:92:5a:9f:02:67:13:28:cd:d3:aa:
         aa:49:dc:28:50:92:7a:8a:7f:6c:1e:93:5a:27:f4:56:87:8a:
         41:56:0c:0b:42:31:ec:d6:21:07:06:46:61:d7:e8:a5:a2:53:
         c0:b9:28:3e:c7:fb:5e:bd:d2:17:36:7e:3a:af:00:f4:51:ad:
         f9:29:ca:f2:c8:5c:eb:90:e5:6f:0a:2b:a5:06:41:d0:3b:4c:
         e9:91:43:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:23:39 2026 by rpki-client