Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3e575422-583a-3199-b11f-06ff93271a69.roa
File:                     3e575422-583a-3199-b11f-06ff93271a69.roa (raw, json)
Hash identifier:          Gs45ul0jevlqX4ERw5HFSqVZOaho+op1FYhXPDU25Fc=
Subject key identifier:   45:A0:B3:10:A6:A2:7B:B5:4F:64:85:E8:37:C6:CA:50:0D:76:B5:4A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D1F4A86DF951A7B12E020E7C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3e575422-583a-3199-b11f-06ff93271a69.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     15169
IP address blocks:        104.134.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:86:df:95:1a:7b:12:e0:20:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=245c9dba-a604-440f-b710-8b63e4c7f266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:07:fb:25:7d:0b:99:ea:0c:ba:a9:5d:62:c6:
                    57:f1:65:4b:2f:f1:bf:92:49:26:0a:9c:bb:64:de:
                    c0:28:7f:28:40:3d:0b:53:c5:76:6a:b0:df:51:fd:
                    7b:b1:d9:4a:b7:ce:49:9c:83:1f:4c:e5:7c:b1:47:
                    41:45:ab:2e:00:a5:a7:b5:16:f9:82:5e:47:30:55:
                    6c:d4:46:f2:a9:49:2d:a2:48:88:c6:1a:f1:e1:67:
                    ac:8f:5f:f3:a4:90:e0:66:46:68:43:23:88:5c:20:
                    91:a2:3b:00:6f:cd:4e:75:36:6b:ed:21:6d:96:5d:
                    81:52:02:28:1d:08:42:92:ce:04:09:41:15:66:e9:
                    e1:33:23:f3:4f:2e:40:6c:02:6d:49:fa:a9:5a:2a:
                    a9:f7:ca:ce:10:f1:63:4d:83:a3:6a:46:57:5e:d5:
                    bc:19:78:30:ba:f7:dd:1f:2c:12:ea:b0:95:ea:23:
                    19:06:f8:c7:ac:72:66:fa:25:d7:2f:66:e7:f0:4f:
                    25:f9:bb:57:e8:88:77:d6:72:16:61:6e:2e:2f:64:
                    a7:99:d6:8d:6b:dc:fd:62:c1:79:26:63:6c:cf:d4:
                    91:12:f9:93:65:62:25:c0:e4:0c:85:4a:25:2d:2f:
                    eb:43:56:3a:dd:51:96:a0:96:3b:52:f2:17:e1:6d:
                    9d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A0:B3:10:A6:A2:7B:B5:4F:64:85:E8:37:C6:CA:50:0D:76:B5:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3e575422-583a-3199-b11f-06ff93271a69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:4f:84:90:70:3f:e9:bd:16:c3:6a:30:dc:8f:7c:26:86:b9:
         05:ca:6b:30:94:1d:cd:79:ff:95:39:26:5a:3d:b0:a0:ed:9f:
         0f:ae:62:2f:cc:a5:78:9c:d5:99:67:83:f5:c5:53:69:cd:0f:
         2a:c2:e0:e4:e6:4d:d0:9e:b3:26:a8:af:61:bc:90:a0:7a:34:
         af:51:1a:03:dc:fa:cc:af:31:bc:49:c0:b7:bd:45:82:85:6b:
         4f:74:35:3e:61:4d:bd:f2:e2:33:72:a6:59:9b:0c:5c:2a:52:
         74:11:32:19:a0:e1:b0:b4:e6:9f:78:f8:ea:9b:73:1e:05:3d:
         9b:02:1f:db:26:94:fe:94:6e:8f:e6:b9:c3:35:39:1f:8d:21:
         26:08:de:d3:dd:c1:1b:ae:c2:2b:97:d5:7a:08:f0:35:fc:e9:
         21:6d:92:f6:ac:39:b7:42:5b:e1:f0:ef:45:50:2c:ea:db:18:
         e0:aa:82:15:bf:bf:c9:b1:9a:50:eb:b1:22:37:66:85:8c:3d:
         29:c1:0e:37:8d:5f:e8:ba:82:db:22:a8:e3:e1:f1:df:f3:b5:
         f5:0b:4c:c9:43:33:bf:70:b3:08:fb:42:bc:07:d2:c3:3c:8d:
         1f:36:9e:e5:1d:ea:6c:fa:9d:05:c4:76:54:98:3d:44:18:eb:
         94:11:db:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:01:46 2026 by rpki-client