Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7990dd7e-37be-3b92-95fe-a0e5fb10cac9.roa
File:                     7990dd7e-37be-3b92-95fe-a0e5fb10cac9.roa (raw, json)
Hash identifier:          LRRk1sb+AaL/Yl0QHLe4f2/Wl32WCBnjYoZq7ByA8uU=
Subject key identifier:   25:33:87:F8:D3:57:1C:CB:72:37:34:CB:25:2C:D0:25:05:D2:A5:FD
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D3DFFD143B1347607366F0500
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7990dd7e-37be-3b92-95fe-a0e5fb10cac9.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     15169
IP address blocks:        104.134.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:d1:43:b1:34:76:07:36:6f:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=45c05c23-06ac-49d0-8315-a70891c8e2ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:34:41:eb:bb:a6:30:3e:4b:85:a0:ea:04:eb:
                    d2:a4:7a:78:b2:e2:c3:ec:ef:ec:87:37:cc:bf:8b:
                    2a:73:5b:1d:ac:aa:84:d8:13:04:ba:3d:7c:85:85:
                    68:d8:ea:ae:49:b8:d7:97:f0:d6:b3:e1:33:a1:df:
                    65:63:93:72:f5:8f:ad:d4:e7:5c:0b:d1:48:9b:1f:
                    43:3a:d5:cf:67:1e:49:e9:23:67:e3:66:75:76:07:
                    0f:c5:3d:d4:b2:b4:1b:31:27:14:80:b6:3d:8a:be:
                    3b:66:2d:46:ce:a4:0d:f5:4c:59:3a:2f:bd:7e:a0:
                    2c:ae:42:0e:9c:c1:32:cf:47:15:83:7e:2c:70:39:
                    df:7b:b9:11:2c:5b:0a:bb:c3:54:01:90:49:f4:85:
                    d8:b9:0d:e6:78:30:78:55:ad:d7:e3:38:54:fe:18:
                    80:7b:40:04:65:85:d6:8a:32:5c:0d:ff:f9:b9:40:
                    17:89:6a:22:a7:0b:e2:0f:ce:f8:f7:bb:30:16:9e:
                    43:81:4f:a2:2e:dd:21:80:71:f4:4e:fd:85:0e:ed:
                    8b:87:52:89:a5:30:14:8d:80:0f:84:06:8f:bb:43:
                    ff:ab:52:ff:82:3c:4e:8e:1f:b8:25:e8:5c:66:eb:
                    55:c7:1f:0f:5a:d0:4c:80:e6:dd:d0:82:a7:76:a7:
                    55:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:33:87:F8:D3:57:1C:CB:72:37:34:CB:25:2C:D0:25:05:D2:A5:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7990dd7e-37be-3b92-95fe-a0e5fb10cac9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:fb:f9:0e:71:5e:c5:97:20:6f:8b:67:da:ff:31:66:a1:ce:
         67:0c:cb:eb:33:af:4f:02:52:ad:38:58:76:ab:8c:83:06:9a:
         31:6f:c5:d6:7a:39:b3:5b:64:61:81:5c:d1:97:0c:73:74:1b:
         72:6e:4a:97:ef:c7:f6:c9:f4:12:b9:c8:17:c6:7f:5e:1b:52:
         96:42:0c:5d:c5:fd:c0:b1:bc:dc:0d:5c:37:1d:2e:e0:aa:e1:
         91:c9:6b:ef:d8:17:f4:f1:ef:0f:f7:cb:0a:2a:ae:f1:a8:0f:
         e0:8d:18:7c:f0:60:2d:12:8d:87:93:b1:63:e8:62:09:2b:ff:
         5a:86:a6:40:d5:dc:f4:5b:54:2b:be:36:ad:5e:a1:ab:0c:93:
         00:f3:fc:db:24:d2:08:5f:c2:2b:7a:6b:2f:b7:3c:cd:ae:70:
         f2:1f:79:87:ac:9b:b0:e1:99:c4:b2:34:27:03:b6:44:f3:23:
         07:ca:a0:85:6e:eb:53:59:2e:9a:26:e5:0e:e0:ee:fb:25:57:
         44:e9:87:b1:a3:9e:6b:3b:eb:cb:aa:5a:63:34:94:4a:82:44:
         08:e1:a5:27:41:27:1a:78:f9:4d:44:38:9e:b7:47:45:75:2b:
         35:3e:e0:50:67:70:26:eb:44:ac:e2:82:e9:17:bc:4b:5c:12:
         2f:b5:6e:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/9FDsTR2BzZvBQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
NDVjMDVjMjMtMDZhYy00OWQwLTgzMTUtYTcwODkxYzhlMmVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jRB67umMD5LhaDqBOvSpHp4suLD7O/shzfM
v4sqc1sdrKqE2BMEuj18hYVo2OquSbjXl/DWs+Ezod9lY5Ny9Y+t1OdcC9FImx9D
OtXPZx5J6SNn42Z1dgcPxT3UsrQbMScUgLY9ir47Zi1GzqQN9UxZOi+9fqAsrkIO
nMEyz0cVg34scDnfe7kRLFsKu8NUAZBJ9IXYuQ3meDB4Va3X4zhU/hiAe0AEZYXW
ijJcDf/5uUAXiWoipwviD87497swFp5DgU+iLt0hgHH0Tv2FDu2Lh1KJpTAUjYAP
hAaPu0P/q1L/gjxOjh+4JehcZutVxx8PWtBMgObd0IKndqdVDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCUzh/jTVxzLcjc0yyUs0CUF0qX9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNzk5MGRkN2UtMzdiZS0z
YjkyLTk1ZmUtYTBlNWZiMTBjYWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALX7+Q5xXsWXIG+LZ9r/MWahzmcMy+szr08CUq04WHarjIMGmjFvxdZ6
ObNbZGGBXNGXDHN0G3JuSpfvx/bJ9BK5yBfGf14bUpZCDF3F/cCxvNwNXDcdLuCq
4ZHJa+/YF/Tx7w/3ywoqrvGoD+CNGHzwYC0SjYeTsWPoYgkr/1qGpkDV3PRbVCu+
Nq1eoasMkwDz/Nsk0ghfwit6ay+3PM2ucPIfeYesm7DhmcSyNCcDtkTzIwfKoIVu
61NZLpom5Q7g7vslV0Tph7Gjnms768uqWmM0lEqCRAjhpSdBJxp4+U1EOJ63R0V1
KzU+4FBncCbrRKzigukXvEtcEi+1bmU=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:17:54 2026 by rpki-client