Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/61ea1429-2237-3dee-95fe-89a342c89790.roa
File:                     61ea1429-2237-3dee-95fe-89a342c89790.roa (raw, json)
Hash identifier:          xdMVkQg9gtnZXGkwijxi0ebFLbanYJ60VLCxigZvIE0=
Subject key identifier:   4F:CB:25:D2:21:00:0B:69:30:24:91:92:DB:B3:32:6C:E2:F8:FB:7D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D1F4A5C66AF06F94F7CD8D000
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/61ea1429-2237-3dee-95fe-89a342c89790.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     15169
IP address blocks:        104.134.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:5c:66:af:06:f9:4f:7c:d8:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=0c823aca-88fe-4b0b-93dd-815e0c30928d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:20:f9:a7:80:1c:e8:5b:08:cf:68:29:ac:08:
                    d5:60:c9:e5:11:86:1c:fe:76:12:d1:a3:3a:6e:ff:
                    13:e4:d4:42:c1:2c:0b:b2:95:a1:53:f9:db:ea:d1:
                    ff:3e:e5:81:f3:c3:3a:93:a1:4d:32:57:6e:9b:0b:
                    aa:72:43:e2:ae:7d:d7:55:5f:7a:af:76:0e:42:42:
                    72:55:62:2b:13:29:e5:72:4d:b3:d1:2e:4a:f1:c7:
                    79:85:e2:41:a5:76:c5:94:cc:6e:d2:16:ad:3c:87:
                    f0:a7:90:e2:1a:25:a6:00:6b:33:dd:ee:7a:74:59:
                    cb:75:55:55:c4:a4:28:93:1f:30:82:aa:b1:e5:b9:
                    d9:bc:2d:a0:3a:4b:61:33:8b:ba:14:51:fa:46:3a:
                    05:ad:51:31:49:9e:8a:01:2c:b0:93:42:2a:56:96:
                    a7:d3:dd:4b:54:db:7a:fa:f2:b1:77:c1:be:6f:53:
                    9e:46:fa:2f:b4:57:4a:d5:33:52:cf:59:23:d3:b0:
                    91:a7:dc:5b:9a:3b:c7:34:78:06:12:c4:68:84:00:
                    3b:94:3c:87:b8:39:c5:f5:47:e5:68:14:9f:30:2b:
                    33:df:b4:e2:10:bc:6d:6b:4e:77:3f:9f:8a:be:9d:
                    74:aa:f8:06:80:34:4d:34:0a:eb:a9:c6:5f:68:42:
                    96:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:CB:25:D2:21:00:0B:69:30:24:91:92:DB:B3:32:6C:E2:F8:FB:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/61ea1429-2237-3dee-95fe-89a342c89790.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:d5:41:7d:1a:72:68:6b:f8:1c:60:57:b8:1d:74:54:28:4c:
         78:9f:9a:87:e7:b9:e9:97:18:a3:dc:ab:87:97:f8:35:71:e7:
         7e:a1:dd:83:6f:46:e4:1f:cd:bb:bf:99:d8:ff:1f:d8:4c:48:
         46:8f:b2:7a:00:09:c5:dd:2a:a2:e0:3c:41:61:0b:e9:93:32:
         41:9f:5b:60:00:b8:c5:12:c2:14:1d:dd:93:6d:1a:29:76:5d:
         15:3d:eb:32:db:c4:a5:a6:d6:d4:51:3f:d9:cc:4d:68:06:eb:
         73:65:aa:7a:59:11:f3:dd:4d:17:4b:be:e0:0c:51:c3:a1:8a:
         5b:4a:c4:42:06:44:4f:11:a4:0d:11:08:d5:eb:9a:c0:c5:b9:
         ca:fb:bb:57:bb:de:a1:40:78:71:e4:87:cf:54:3b:c5:08:6a:
         82:2e:86:0d:58:cd:a7:20:f6:99:06:00:14:de:c2:af:a7:ff:
         f2:1d:f9:f2:a9:42:e7:5d:6d:a8:3d:34:43:39:d2:f1:8b:6b:
         6e:ef:cf:a6:14:c5:8b:c9:8f:12:0e:9c:c3:96:ef:98:1f:e4:
         e9:ef:96:9a:ff:f3:2a:f8:fe:c4:77:9d:bd:cb:d2:81:77:97:
         cf:21:65:76:7a:0b:57:04:a4:ea:4a:5f:e8:8c:7e:7f:0a:e2:
         a3:95:92:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:14:47 2026 by rpki-client