Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/416a016f-79e7-3740-8a48-d6d0330ed271.roa
File:                     416a016f-79e7-3740-8a48-d6d0330ed271.roa (raw, json)
Hash identifier:          j2eJcsm3UkoH/E+360MizBMxbQ2iuw5KzDgjAUasubA=
Subject key identifier:   3C:BA:8A:09:9F:C7:3B:5C:A3:C3:2D:47:F2:5B:95:CC:C5:63:55:4D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D143D8A40FCCC963C4CB68A00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/416a016f-79e7-3740-8a48-d6d0330ed271.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     15169
IP address blocks:        104.134.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:8a:40:fc:cc:96:3c:4c:b6:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=88d478d4-5abf-4ef5-ac5c-60d39723a610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4f:d4:55:06:d9:12:41:00:a6:9e:4e:23:2b:
                    c1:c4:03:e3:3f:01:0c:fa:05:c6:37:e9:e6:02:49:
                    e2:43:71:8d:a0:b2:8c:f3:16:19:f5:95:0b:b8:de:
                    1c:f5:6e:60:02:7d:44:53:28:e6:34:08:96:95:66:
                    be:2a:3d:6b:e2:a8:21:4d:f2:53:8e:a0:83:fa:d0:
                    b0:c0:c6:67:e4:5e:f0:1d:4e:86:ab:2e:31:71:69:
                    31:ee:45:b8:55:3c:44:72:0b:d3:68:d2:0c:95:a1:
                    65:2f:51:78:01:67:d2:24:e8:c9:64:55:84:66:6c:
                    50:6c:74:9a:f2:45:d7:16:8b:82:c6:bf:f6:d3:1d:
                    6a:98:62:cf:06:81:8c:0f:ad:f5:4a:f8:99:fe:64:
                    40:a8:a4:03:03:44:c9:12:e6:94:91:70:0d:8c:ab:
                    ee:7d:68:47:6a:ba:9a:75:da:66:f3:6d:12:89:e9:
                    09:a7:82:ac:c0:7b:10:a2:ef:7c:b1:47:b5:03:6e:
                    63:83:ff:29:b2:b9:49:a3:ac:f0:f0:b5:ab:17:0f:
                    64:6c:58:11:60:92:c2:ba:4e:b1:01:17:38:5c:64:
                    78:6b:98:0f:fe:41:31:61:b0:f0:fd:68:5f:56:8f:
                    f6:c2:46:3c:c3:3a:e4:7e:df:d0:95:0f:9a:1f:cc:
                    fd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BA:8A:09:9F:C7:3B:5C:A3:C3:2D:47:F2:5B:95:CC:C5:63:55:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/416a016f-79e7-3740-8a48-d6d0330ed271.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:15:64:fb:a6:f5:69:01:53:6e:41:c5:db:c8:a7:bd:97:de:
         20:7f:77:2a:fe:74:45:77:f3:7c:90:d1:6c:51:73:87:4b:81:
         b9:bb:cd:d2:0e:a4:a7:e6:dc:59:f8:73:0c:00:c1:fd:a7:b1:
         f5:91:b6:0b:ef:73:aa:20:37:cf:44:1c:c4:d3:52:6d:b6:dc:
         1b:b6:11:3c:45:af:2e:19:ce:b1:61:3b:53:4d:64:ee:97:cd:
         67:97:57:30:7b:b8:92:b9:be:de:8e:45:71:29:80:a9:22:eb:
         dd:80:c1:ee:58:d6:f0:81:37:1a:b8:89:26:e7:f4:74:e9:ff:
         7d:16:d7:8b:38:d8:cd:34:95:2d:c0:19:ae:56:cd:9c:a8:c4:
         31:81:a3:62:53:ef:f4:b5:ea:f4:6d:25:26:02:9e:15:4b:64:
         bb:dd:c3:32:e1:b1:e5:10:84:3f:79:84:fd:23:40:41:db:09:
         db:b3:be:54:96:7d:e9:b1:4f:cd:8c:bc:3b:a9:e4:d4:83:37:
         27:67:ba:d5:01:fb:62:dd:b0:c2:22:43:cc:91:b0:f2:7e:b9:
         48:39:35:9a:7e:bb:a9:d5:66:aa:06:b7:6d:4f:92:98:94:06:
         05:3f:71:45:d2:55:90:18:b8:66:47:9d:40:1f:92:ca:2a:c6:
         9b:6f:37:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:58:48 2026 by rpki-client