Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/40385064-d713-3c6c-b460-5575e111dfd1.roa
File:                     40385064-d713-3c6c-b460-5575e111dfd1.roa (raw, json)
Hash identifier:          QqhnhHTJf6z1ScbNGpNihbMlg5UsNMqiqEEpdukETlY=
Subject key identifier:   4E:BB:7E:FD:0A:F8:E7:66:80:D0:77:82:34:28:87:D0:1D:F7:83:95
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D143D9F2C631F3A95F5956540
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/40385064-d713-3c6c-b460-5575e111dfd1.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     15169
IP address blocks:        104.134.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:9f:2c:63:1f:3a:95:f5:95:65:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=d06c10b0-3c65-4ac2-8f8c-99fd0b3da268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a3:13:a6:eb:10:a9:a4:37:65:68:47:39:14:
                    47:74:5b:ec:27:60:f1:05:02:0c:13:52:bc:61:31:
                    62:b4:31:f0:c1:49:18:a5:5e:af:53:c3:e6:d6:a4:
                    49:02:23:69:33:41:0b:6b:ed:07:cf:a1:cc:76:4c:
                    2d:13:07:2d:8e:98:eb:f5:08:79:0d:eb:b2:35:23:
                    64:da:e3:e7:cb:55:1f:76:89:cf:40:fc:08:b1:ff:
                    ef:b3:24:3a:e0:83:25:6d:c0:be:e1:5e:21:73:2d:
                    52:d8:41:9a:03:43:b1:b3:35:a9:b7:18:6a:f6:ca:
                    e5:76:34:6c:e6:07:c9:5e:9a:7b:1e:36:25:fc:87:
                    82:dc:87:d8:c1:26:05:3f:80:cc:f1:eb:5e:07:92:
                    b2:5a:00:9c:a9:a0:ab:10:c8:b4:00:44:83:8b:bb:
                    ff:d3:be:6b:98:50:21:1d:05:ea:73:a9:e5:9a:65:
                    96:02:47:c2:ae:07:89:3b:2a:3b:8e:04:c8:27:37:
                    37:2c:37:ca:0e:76:64:21:8f:c0:79:76:38:d1:18:
                    9a:23:e5:ef:43:5d:a9:ef:82:bd:7d:d0:66:b9:f2:
                    15:3f:32:3f:80:35:5a:b3:2c:36:19:b2:93:46:e0:
                    91:a2:8c:d5:1d:44:b1:58:77:e8:58:3d:44:5a:df:
                    fa:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:BB:7E:FD:0A:F8:E7:66:80:D0:77:82:34:28:87:D0:1D:F7:83:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/40385064-d713-3c6c-b460-5575e111dfd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:54:96:3a:6c:44:7d:14:cb:47:41:2b:6f:4c:95:da:58:34:
         75:e7:bf:6b:0d:88:09:a8:8b:86:16:ba:86:26:bf:24:65:5a:
         3e:2d:48:15:8f:9d:6f:3d:e4:92:4e:d7:03:8a:08:62:7b:7f:
         2f:88:1b:df:4c:57:61:3e:4b:41:42:2b:30:4e:4d:ac:f4:02:
         62:f2:32:b7:9d:82:63:38:1a:82:83:7c:61:25:a0:c0:33:1a:
         f4:b5:9b:4e:99:ab:4a:22:ce:bd:20:1d:00:4e:27:0c:8a:82:
         75:4f:fb:93:c3:ba:1a:e8:6d:80:8b:68:b7:fb:44:87:83:78:
         54:3f:7b:eb:3a:85:13:4c:69:16:d6:0d:d2:8c:d2:1e:18:e9:
         21:24:bf:fe:3b:f7:bc:7e:3c:b1:16:84:30:f2:db:05:57:78:
         97:9b:75:e3:07:d3:3b:32:25:42:ff:09:74:c4:76:27:91:6c:
         dc:16:d0:f5:1a:ef:a5:97:17:95:66:d7:6b:39:ff:38:03:5e:
         ba:8d:4a:8b:7a:38:da:a5:61:12:90:85:ee:30:7a:bc:63:f9:
         ef:c0:3a:02:c6:bc:09:2e:74:5b:ca:98:3b:a3:44:8e:ef:cd:
         40:d2:22:e5:17:15:78:c9:b9:6e:4b:04:d4:e6:77:ab:08:95:
         6c:d5:33:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:58:04 2026 by rpki-client