Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3373ab21-9f02-31c6-89b1-4671f50e141f.roa
File:                     3373ab21-9f02-31c6-89b1-4671f50e141f.roa (raw, json)
Hash identifier:          kt4KVesJ6DBA2HAOgIdET0KTGzWLErw2gL7ag6dlbjI=
Subject key identifier:   66:6F:98:A1:E6:BD:9B:1B:83:7F:50:D2:07:F2:3E:75:1D:AF:CB:2B
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D143D913539923C456CF51C60
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3373ab21-9f02-31c6-89b1-4671f50e141f.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     15169
IP address blocks:        104.134.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:91:35:39:92:3c:45:6c:f5:1c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=9590a223-3e90-4e15-b3ef-be661ec7d216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a1:fe:2e:ac:75:a6:a6:63:c8:ed:d4:3a:46:
                    59:87:12:ac:00:3a:bc:84:e2:b9:71:8f:88:80:69:
                    d3:65:03:36:b7:cd:35:08:87:84:f6:71:18:b4:80:
                    0c:32:cc:32:76:5e:20:ea:f9:e4:cb:3e:db:c4:41:
                    5b:50:a9:60:65:64:c7:b0:6e:57:6f:db:c2:71:9a:
                    c4:7d:86:00:d1:c5:b1:9b:96:2b:34:99:a5:97:2c:
                    11:8b:11:da:31:d0:ea:7d:88:61:d7:77:88:fa:23:
                    71:45:99:89:04:7a:2f:77:fc:81:bf:b5:58:b3:f5:
                    76:78:e1:0d:6c:17:7e:ed:a7:51:04:8c:fe:fd:83:
                    a0:f0:43:60:30:63:19:a3:8a:a1:3a:51:db:e3:68:
                    ef:08:8f:21:38:a1:59:62:e7:33:37:c4:a0:4b:ba:
                    ff:50:d7:f5:1b:3a:1d:b1:b8:d5:d1:d5:5a:3c:3d:
                    d1:32:8d:43:1b:f3:c3:14:1e:15:9e:f2:d8:4c:01:
                    fa:26:55:2d:6f:34:2c:5e:69:45:9c:fb:02:45:57:
                    92:40:54:4a:82:48:0c:b6:ff:64:87:60:37:f1:88:
                    96:7b:40:f4:24:6e:3e:07:fa:da:01:d0:e6:9d:39:
                    7f:ee:fc:c9:8c:49:94:78:d8:5d:79:3a:48:6f:5b:
                    81:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6F:98:A1:E6:BD:9B:1B:83:7F:50:D2:07:F2:3E:75:1D:AF:CB:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3373ab21-9f02-31c6-89b1-4671f50e141f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:27:d3:29:49:83:5f:4d:b7:08:d6:62:51:3c:0a:06:26:61:
         b9:99:fb:eb:f7:68:38:e1:ef:f0:48:12:8c:b9:c2:a2:7e:71:
         80:16:62:80:8e:5a:96:05:1e:bf:85:0d:f1:dd:50:49:e3:9a:
         92:80:3c:ac:61:d8:1b:1c:70:12:70:2a:1a:14:77:9e:ec:fd:
         47:67:bf:30:93:6e:03:04:ad:fa:5e:92:bd:a0:e0:28:11:19:
         ea:32:33:7d:31:a4:24:e8:08:92:ed:41:bd:1c:fe:51:24:93:
         29:9c:e3:3d:3f:49:9c:cb:e9:6d:5a:c2:c0:1c:40:d4:3a:15:
         2e:ba:95:c6:99:a6:22:b4:5e:89:67:aa:10:c6:46:24:b6:75:
         e3:2f:c7:cf:47:42:db:72:7a:74:c3:57:89:0e:89:b2:43:45:
         66:eb:e9:2e:09:4a:01:64:da:bf:43:62:ce:be:63:4d:8f:2a:
         67:2b:00:69:9e:10:41:03:3a:8b:8b:bc:14:f5:93:73:25:f0:
         81:7e:00:98:d0:69:ae:e2:1a:10:08:b3:bc:55:71:c5:63:c7:
         49:09:d8:ac:3c:53:3d:91:97:01:18:86:1d:4a:d6:b6:cd:26:
         86:0f:71:97:9f:40:4c:cc:df:94:bf:f5:09:c8:b0:4d:35:d7:
         54:8d:fa:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPZE1OZI8RWz1HGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk
OTU5MGEyMjMtM2U5MC00ZTE1LWIzZWYtYmU2NjFlYzdkMjE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6H+Lqx1pqZjyO3UOkZZhxKsADq8hOK5cY+I
gGnTZQM2t801CIeE9nEYtIAMMswydl4g6vnkyz7bxEFbUKlgZWTHsG5Xb9vCcZrE
fYYA0cWxm5YrNJmllywRixHaMdDqfYhh13eI+iNxRZmJBHovd/yBv7VYs/V2eOEN
bBd+7adRBIz+/YOg8ENgMGMZo4qhOlHb42jvCI8hOKFZYuczN8SgS7r/UNf1Gzod
sbjV0dVaPD3RMo1DG/PDFB4VnvLYTAH6JlUtbzQsXmlFnPsCRVeSQFRKgkgMtv9k
h2A38YiWe0D0JG4+B/raAdDmnTl/7vzJjEmUeNhdeTpIb1uBQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGZvmKHmvZsbg39Q0gfyPnUdr8srMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzM3M2FiMjEtOWYwMi0z
MWM2LTg5YjEtNDY3MWY1MGUxNDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIamMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACkn0ylJg19NtwjWYlE8CgYmYbmZ++v3aDjh7/BIEoy5wqJ+cYAWYoCO
WpYFHr+FDfHdUEnjmpKAPKxh2BsccBJwKhoUd57s/UdnvzCTbgMErfpekr2g4CgR
GeoyM30xpCToCJLtQb0c/lEkkymc4z0/SZzL6W1awsAcQNQ6FS66lcaZpiK0Xoln
qhDGRiS2deMvx89HQttyenTDV4kOibJDRWbr6S4JSgFk2r9DYs6+Y02PKmcrAGme
EEEDOouLvBT1k3Ml8IF+AJjQaa7iGhAIs7xVccVjx0kJ2Kw8Uz2RlwEYhh1K1rbN
JoYPcZefQEzM35S/9QnIsE0111SN+ps=
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:17:11 2026 by rpki-client