Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2fdbdebc-b22f-33e1-8dd7-70ade7dd0ef9.roa
File:                     2fdbdebc-b22f-33e1-8dd7-70ade7dd0ef9.roa (raw, json)
Hash identifier:          hLtenZmYS0bZTPYd5sf7/FuEGDW8uexYsYQofdtwFm8=
Subject key identifier:   84:1D:08:93:C4:80:07:E7:63:94:91:FE:1C:15:85:DF:CA:91:FF:33
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DBA3B05CCA145695C0F794FC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2fdbdebc-b22f-33e1-8dd7-70ade7dd0ef9.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     395973
IP address blocks:        104.134.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3b:05:cc:a1:45:69:5c:0f:79:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=86d8bdf8-6f39-414b-993b-a8e74e5ef124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:62:91:2d:70:42:23:60:01:32:5c:2d:96:f6:
                    dd:a3:17:ca:6b:01:8c:e8:48:ad:ca:ec:eb:94:a8:
                    9f:5e:3f:29:ea:7b:88:eb:29:6d:57:8d:2b:6c:40:
                    be:cb:fd:83:ba:77:33:e5:31:35:f2:d9:6a:4d:c7:
                    f5:4a:ef:e0:20:69:77:25:3d:28:2c:0f:6b:4d:1d:
                    2e:a9:1b:31:4d:fb:74:40:9a:8f:b7:ec:6c:af:59:
                    3b:d3:2b:83:f7:15:ec:15:d0:1a:ac:63:a1:93:cd:
                    77:3f:73:39:f4:dd:85:4c:2a:95:98:d1:e3:dd:c0:
                    e6:d3:7e:d5:d0:7d:91:a9:a6:34:e1:28:f1:23:38:
                    f3:20:ef:1d:c9:c7:b2:f0:0d:d3:ae:2b:21:02:bd:
                    97:71:be:15:73:30:1f:de:ad:e4:cd:aa:94:f1:c6:
                    ce:b0:b8:87:ee:cd:d9:1a:10:9d:b7:20:4a:43:d2:
                    a7:a8:97:70:f5:b5:84:a0:af:f1:66:c0:f1:5e:96:
                    08:f6:40:60:ef:a5:cf:da:e2:5e:89:49:c7:20:ff:
                    06:75:2c:ad:f9:6f:d9:f9:26:3a:e2:52:ab:79:f1:
                    72:13:40:0b:07:79:cc:ca:c3:7b:a9:8a:48:c3:97:
                    e7:b8:c2:e1:1d:d9:80:63:ae:5b:9d:58:0b:25:87:
                    15:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:1D:08:93:C4:80:07:E7:63:94:91:FE:1C:15:85:DF:CA:91:FF:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2fdbdebc-b22f-33e1-8dd7-70ade7dd0ef9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:44:97:1f:8a:77:e7:d2:a2:08:ba:51:a9:61:06:34:b8:a1:
         4b:f4:44:98:79:be:30:88:84:92:ed:c2:ab:fc:21:85:e6:48:
         2f:ed:ff:c1:5f:26:5d:9d:28:76:ef:83:8f:75:88:c3:2e:e8:
         cb:ec:58:08:bc:a8:f2:ab:2f:f7:37:d8:55:66:a9:c1:31:cf:
         de:d9:f9:08:61:a6:92:69:de:be:26:ac:66:64:e1:a9:c2:62:
         13:7a:89:ea:87:a8:78:b8:ee:7a:e2:fa:3b:3c:ef:f0:5b:b1:
         71:62:28:a6:61:ca:7d:42:9f:55:a9:f4:ca:d4:a9:70:f7:d8:
         b6:31:d0:0c:fa:43:1e:be:9f:6f:4a:11:91:19:15:c3:5f:c8:
         5b:45:db:d1:b7:27:ef:d1:ad:45:eb:00:ad:9c:35:be:1f:4e:
         63:fa:62:0a:b4:17:85:2e:f0:97:2c:7c:4a:21:b2:aa:26:20:
         b6:d7:73:7d:ba:60:91:d4:a3:27:55:3e:ee:f1:67:f7:9e:d9:
         c1:90:d8:f8:58:06:07:5c:e4:fe:ec:7a:30:1a:20:1f:58:74:
         17:0a:e6:06:8a:26:f2:6d:47:54:9f:eb:30:0d:eb:8a:50:35:
         59:6f:8c:e3:b5:c2:8a:a4:4b:a7:19:91:02:c6:80:5c:60:ba:
         78:42:32:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:30:15 2026 by rpki-client