Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/76a9d50a-914c-3794-91d5-3869f4df4c12.roa
File:                     76a9d50a-914c-3794-91d5-3869f4df4c12.roa (raw, json)
Hash identifier:          /pxgKCM1eEjK7HZsgau+oiUD52CgpIvRLFQkzRbeHqQ=
Subject key identifier:   EB:CB:AC:B9:9E:3D:D6:1C:F2:98:A3:2A:92:D5:86:89:DD:B3:01:52
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D143D8DE456A2FFF0794A5C80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/76a9d50a-914c-3794-91d5-3869f4df4c12.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     15169
IP address blocks:        104.134.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:8d:e4:56:a2:ff:f0:79:4a:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=09264483-60a4-4378-8b2d-1c1fc4c1d2d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b8:14:11:11:b6:f2:d0:ae:de:ec:96:43:29:
                    00:49:3e:fd:5c:2f:6b:35:58:20:c1:a1:ce:6b:ad:
                    01:6c:5a:f8:e5:15:c0:b5:f7:50:9e:6e:9b:38:7c:
                    0d:47:21:f0:ec:38:63:7c:2a:83:b9:22:25:8f:3c:
                    11:ee:49:cc:3f:b5:41:c8:33:03:d3:8f:25:0b:65:
                    38:c4:ff:dd:15:35:7d:4a:94:be:de:ee:c6:f3:53:
                    b3:12:47:30:4a:bc:70:7a:a7:f7:12:8a:70:53:3d:
                    b7:3c:fb:9b:1b:9a:51:17:a4:5f:27:3e:84:60:7c:
                    0b:dc:dc:d9:d1:6f:12:f3:ba:30:88:19:62:44:d0:
                    d7:a2:51:04:68:3f:5d:47:2c:4b:5c:17:18:e5:42:
                    22:3d:1c:04:56:3d:08:7e:07:0b:10:94:14:35:4b:
                    3a:ff:7c:1c:82:63:9d:d9:c4:80:12:b1:bf:c1:b5:
                    12:4e:12:c5:ae:77:84:c7:28:27:85:64:e0:5e:69:
                    ab:2a:d3:47:74:3e:0e:b7:86:c6:1b:f1:32:05:51:
                    1e:d5:c9:f7:a9:02:c8:ca:4e:66:d8:d4:e9:d8:e5:
                    75:89:1c:7b:e3:31:92:e2:4c:80:0a:32:48:93:4a:
                    de:ba:65:f3:8a:9c:70:ab:e0:11:12:3c:ee:ba:c2:
                    f2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CB:AC:B9:9E:3D:D6:1C:F2:98:A3:2A:92:D5:86:89:DD:B3:01:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/76a9d50a-914c-3794-91d5-3869f4df4c12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:af:e3:59:5b:a2:2b:b8:ac:ef:03:d7:d1:8c:86:8b:ee:a5:
         c6:97:83:71:52:63:ae:6a:36:16:09:55:2b:dc:9d:fa:32:ff:
         b5:b2:b8:91:54:14:b1:2c:32:5c:7e:72:12:42:1b:be:e4:b2:
         ce:ba:3e:f2:b9:03:f8:d6:6a:b7:c5:18:9e:1c:4a:03:b7:41:
         00:69:66:cb:e7:3b:31:6d:e6:1c:1c:de:4f:a8:f9:1d:df:59:
         c9:d2:65:3b:4b:ae:96:f3:b7:3e:3d:0d:3c:97:3d:f3:54:71:
         5d:02:be:3c:33:27:3b:aa:74:97:12:07:d7:14:2d:00:53:a7:
         c1:57:7e:ff:15:61:c9:aa:a3:5c:e9:77:74:8e:19:2f:a1:53:
         67:79:44:4e:56:00:cf:cd:c5:ca:c8:a3:d9:1d:6a:02:fd:27:
         77:11:dc:82:53:0c:89:aa:80:d3:e8:06:4f:d1:2b:82:31:e8:
         c0:c2:8a:4a:30:b5:93:e5:af:29:9f:29:0b:b2:f3:69:04:15:
         fb:40:66:52:fd:57:33:3e:a9:c6:e0:05:43:d0:cd:da:bd:5e:
         80:62:30:e6:16:e7:ad:48:c2:1a:94:92:e8:9f:e1:13:8d:97:
         52:dc:5e:15:35:ab:32:19:28:e4:cd:a3:65:fb:52:41:9e:76:
         ff:19:82:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:41:55 2026 by rpki-client