Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/354ce78a-fc7a-3ee3-a203-4f1da06da216.roa
File:                     354ce78a-fc7a-3ee3-a203-4f1da06da216.roa (raw, json)
Hash identifier:          x2va3BV9+mrJWIzjY8EvH5wHIFJABLVpi3ZTJyW0I40=
Subject key identifier:   06:88:18:E5:32:16:DC:2C:E9:70:60:28:7C:23:2C:58:7F:8C:1F:2B
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D143D914465CEB9BA625E1020
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/354ce78a-fc7a-3ee3-a203-4f1da06da216.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     15169
IP address blocks:        104.134.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:91:44:65:ce:b9:ba:62:5e:10:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=8cf386cf-38e9-425e-8e25-24dcff94d7db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b4:6a:5a:ce:f6:f8:b5:0f:d1:8c:5a:55:8b:
                    e7:f9:68:77:72:e8:95:33:7a:ff:e9:f7:cb:b9:8c:
                    cb:51:44:73:1e:24:ad:8e:dd:dd:9f:2e:7a:c4:8c:
                    b9:e1:fe:fd:22:26:2b:11:65:75:11:e0:c4:3d:b9:
                    9d:6e:b3:f0:bc:c5:c5:0c:46:53:da:b1:48:c3:3c:
                    42:33:cb:c9:e3:b0:35:1c:cb:fe:ca:ed:05:a4:7c:
                    61:58:39:96:df:69:52:08:2c:34:5b:10:93:53:3f:
                    fc:7d:9f:8a:c4:19:3c:e8:56:c6:37:b4:ac:e5:8c:
                    68:14:b7:4d:19:fe:fd:ef:0f:4f:f6:50:e5:23:41:
                    cd:09:59:1a:66:61:b9:44:38:93:87:51:dc:99:86:
                    46:31:87:8f:ec:19:3d:c9:c2:a4:83:c1:a4:3e:eb:
                    c5:f9:a4:54:13:0c:a4:3d:4f:b4:4b:12:91:5d:81:
                    f4:4d:e5:3d:a3:88:cd:5e:38:d9:d8:12:a2:1d:52:
                    2f:73:8b:fa:25:9a:60:ce:6a:9f:ab:90:fa:fa:6e:
                    b6:7d:9e:5a:39:14:0a:3b:2c:f2:4f:da:92:4f:23:
                    de:ca:d4:ee:88:d1:9e:78:08:b8:b7:be:0e:03:ff:
                    67:07:e3:f9:08:d3:df:8e:13:75:eb:41:8d:22:93:
                    c3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:88:18:E5:32:16:DC:2C:E9:70:60:28:7C:23:2C:58:7F:8C:1F:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/354ce78a-fc7a-3ee3-a203-4f1da06da216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:51:06:27:0a:84:0d:2b:cd:1d:db:98:79:5d:89:41:26:ef:
         e7:9f:25:07:73:a5:51:45:b1:f9:43:59:71:04:74:3a:76:e1:
         c7:59:c2:18:62:c9:35:f8:f6:f5:c9:af:42:c5:d3:36:51:37:
         76:fb:34:4c:96:cd:1f:c1:28:0c:a8:aa:0c:fa:b0:10:2f:5f:
         86:7e:40:dd:e0:d5:19:6a:6e:0a:cf:91:89:c3:95:01:fd:67:
         51:db:01:23:53:9f:12:a2:e8:13:b7:6b:1a:b8:fe:b7:31:fd:
         f1:82:5d:d6:54:93:2e:13:0e:c9:70:43:39:11:aa:4c:f4:c1:
         f4:3b:65:42:19:07:fd:d3:11:b7:56:54:f6:23:ea:2c:70:d7:
         f4:36:05:e1:9c:ad:f5:c7:e0:95:28:b4:7e:8e:5a:4a:b5:50:
         54:a5:54:6c:39:b4:e8:d5:d5:ea:6d:58:6d:89:20:df:75:5c:
         c6:a9:76:c3:e5:61:d9:33:cb:d0:26:1d:85:dd:ba:8b:7c:23:
         c5:2b:66:16:bf:8a:f3:80:54:f7:a3:24:dd:2a:83:27:d1:0c:
         97:6b:de:f8:46:be:e8:e8:60:cf:0b:b6:0a:5d:9b:ca:4c:68:
         29:3b:2e:1d:ca:c0:6e:23:f9:87:cb:92:e2:b7:c5:33:ce:f9:
         8a:b8:88:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPZFEZc65umJeECAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk
OGNmMzg2Y2YtMzhlOS00MjVlLThlMjUtMjRkY2ZmOTRkN2RiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLRqWs72+LUP0YxaVYvn+Wh3cuiVM3r/6ffL
uYzLUURzHiStjt3dny56xIy54f79IiYrEWV1EeDEPbmdbrPwvMXFDEZT2rFIwzxC
M8vJ47A1HMv+yu0FpHxhWDmW32lSCCw0WxCTUz/8fZ+KxBk86FbGN7Ss5YxoFLdN
Gf797w9P9lDlI0HNCVkaZmG5RDiTh1HcmYZGMYeP7Bk9ycKkg8GkPuvF+aRUEwyk
PU+0SxKRXYH0TeU9o4jNXjjZ2BKiHVIvc4v6JZpgzmqfq5D6+m62fZ5aORQKOyzy
T9qSTyPeytTuiNGeeAi4t74OA/9nB+P5CNPfjhN160GNIpPDxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAaIGOUyFtws6XBgKHwjLFh/jB8rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzU0Y2U3OGEtZmM3YS0z
ZWUzLWEyMDMtNGYxZGEwNmRhMjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH9RBicKhA0rzR3bmHldiUEm7+efJQdzpVFFsflDWXEEdDp24cdZwhhi
yTX49vXJr0LF0zZRN3b7NEyWzR/BKAyoqgz6sBAvX4Z+QN3g1RlqbgrPkYnDlQH9
Z1HbASNTnxKi6BO3axq4/rcx/fGCXdZUky4TDslwQzkRqkz0wfQ7ZUIZB/3TEbdW
VPYj6ixw1/Q2BeGcrfXH4JUotH6OWkq1UFSlVGw5tOjV1eptWG2JIN91XMapdsPl
Ydkzy9AmHYXduot8I8UrZha/ivOAVPejJN0qgyfRDJdr3vhGvujoYM8Ltgpdm8pM
aCk7Lh3KwG4j+YfLkuK3xTPO+Yq4iBo=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:44:52 2026 by rpki-client