Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2a90c852-9a33-3690-94fc-d837c371c753.roa
File:                     2a90c852-9a33-3690-94fc-d837c371c753.roa (raw, json)
Hash identifier:          hY6zHBiWKFbSSsgHNbqGAMMyiw07U4/+hpsAsSyf7p0=
Subject key identifier:   9B:96:3A:52:CD:06:C5:CF:03:E1:EA:22:39:57:F8:5D:98:F5:64:F9
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D143D9D42E23A4E521E936900
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2a90c852-9a33-3690-94fc-d837c371c753.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     395973
IP address blocks:        104.134.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:9d:42:e2:3a:4e:52:1e:93:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=009d3b03-9fec-4955-b4b4-24883a2767e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ec:67:6d:06:76:21:ba:d1:e8:70:c3:53:70:
                    7a:00:b6:bf:31:8b:c5:6e:7d:1f:4f:60:f0:96:36:
                    9e:b4:f1:c8:5c:e8:ce:5d:49:5c:06:3f:82:39:1d:
                    67:3c:80:21:90:34:03:1d:1f:6c:f2:98:bf:73:23:
                    d6:10:a1:7e:31:15:a8:58:27:e8:a3:c3:bd:ea:f9:
                    81:2f:95:b1:b0:57:22:0e:72:85:3e:26:68:60:5e:
                    6b:b1:be:87:77:e6:25:a0:91:e3:23:c8:46:38:d5:
                    ad:98:a5:af:c6:f7:59:b0:c8:65:e2:07:40:b4:5d:
                    6d:e1:a9:0d:b6:ea:f5:7d:45:1f:4e:3c:70:c3:cc:
                    70:8e:65:4d:90:8f:29:58:40:56:b8:cf:06:53:99:
                    94:07:aa:48:ca:bf:53:78:0d:cf:74:be:9f:b7:61:
                    1e:e3:20:2e:b7:ee:7c:50:b0:3e:8b:a3:e2:c1:4a:
                    38:95:6f:d8:ca:24:3b:d7:56:f9:61:c4:3f:ca:9c:
                    cf:a0:7e:f9:f1:91:93:d1:08:6a:31:4d:cd:fc:49:
                    8b:3b:41:4e:81:60:6f:2f:b8:7c:48:fd:ce:2f:38:
                    e9:40:bb:c1:37:65:d3:82:86:cf:12:51:fa:f2:d8:
                    03:1c:9c:2a:b3:4e:92:8a:42:0b:cf:74:a6:b3:68:
                    0c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:96:3A:52:CD:06:C5:CF:03:E1:EA:22:39:57:F8:5D:98:F5:64:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2a90c852-9a33-3690-94fc-d837c371c753.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:b6:92:bc:0a:d1:cf:77:a0:31:a0:59:51:25:74:44:af:61:
         10:42:82:00:b8:80:d0:f5:65:8e:d7:8f:e7:18:2d:93:3f:5c:
         4f:18:4c:39:8f:1c:d7:23:f6:30:ac:bc:31:b0:f3:d2:92:2a:
         ed:e0:0c:99:32:30:ae:86:cf:44:b4:25:74:b6:7b:8d:9b:65:
         0b:03:ee:4c:40:10:9d:da:e8:19:26:ab:26:30:b6:ce:b4:c3:
         87:1c:90:00:df:4d:5e:47:c1:e0:e0:e8:16:64:a1:92:15:58:
         3b:29:37:23:e6:50:bd:3a:10:1e:06:23:b5:94:60:b8:d2:19:
         09:12:38:d6:da:08:ce:29:00:81:2c:1a:59:a7:40:f4:df:bb:
         41:83:17:5e:07:bf:f6:a0:3e:b9:7e:a6:7a:32:8d:7e:e4:92:
         84:08:17:cb:09:b7:95:cd:e0:ac:a5:21:90:e2:fe:5f:53:97:
         0e:e8:d8:ce:f9:f8:34:f7:0b:57:86:d5:cd:8c:b4:00:83:2c:
         95:75:cd:cc:44:63:d6:91:2d:07:a6:39:0c:ca:f1:ae:f8:86:
         bf:d0:f9:65:85:3b:19:b9:7e:29:6e:d0:4b:ee:ee:d5:ad:68:
         b5:59:de:b6:e6:28:65:6f:8b:a1:36:90:e5:8b:9d:74:73:6e:
         35:45:1e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:01:11 2026 by rpki-client