Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/972612c8-381a-3c2f-b692-279c8df60166.roa
File:                     972612c8-381a-3c2f-b692-279c8df60166.roa (raw, json)
Hash identifier:          Co2DyPJ3G0ht5ccdAESJFrOys8WTN7fgrOYsicA+HC4=
Subject key identifier:   46:D2:49:59:29:11:FE:35:71:2A:44:E1:9A:E9:69:88:C3:5B:ED:53
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D143D892FC466C59F7F3D8500
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/972612c8-381a-3c2f-b692-279c8df60166.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     395973
IP address blocks:        104.134.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:89:2f:c4:66:c5:9f:7f:3d:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=883b48ba-d00a-46f4-9002-7d172224778b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:66:d3:bd:5e:36:79:32:be:61:97:30:88:e2:
                    6c:9c:85:99:52:eb:96:ab:06:bf:78:47:f2:f7:8f:
                    5f:d8:6e:6c:3e:ba:db:14:d6:49:b8:41:6d:3a:0e:
                    e3:1a:2d:44:41:99:8f:33:b9:61:6e:d1:c7:cc:5d:
                    b3:e9:5f:ac:b8:65:19:2a:ed:65:e0:6c:04:2d:7d:
                    9c:06:3c:19:5b:a3:8c:e0:3f:80:4d:70:0f:ca:fe:
                    ba:91:cf:48:11:4b:a6:37:93:9a:69:5e:85:0e:b6:
                    31:ec:65:cb:c6:b3:c9:0f:af:1c:3d:dd:8a:73:a1:
                    87:b2:2f:73:5d:b8:44:db:ca:67:92:b1:53:8e:a6:
                    6a:b0:a8:6d:bb:78:39:1d:4e:f2:70:c1:5b:d4:2a:
                    1d:8a:12:05:9a:6a:11:1d:e1:b0:96:22:62:75:1b:
                    2f:e5:59:76:1e:71:18:fa:b6:16:55:48:b9:a4:de:
                    ed:1b:30:53:78:f1:64:12:14:43:30:e3:43:11:1e:
                    58:ac:d9:63:64:b6:0a:96:56:12:21:96:bf:8d:6d:
                    cf:f9:71:64:01:a1:a1:c9:7a:25:67:8f:63:b2:83:
                    9c:83:4b:44:5b:5b:89:0f:b1:f2:15:2c:05:21:af:
                    1e:10:0a:61:1d:98:b5:65:fa:db:d9:2c:b4:46:d0:
                    9f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D2:49:59:29:11:FE:35:71:2A:44:E1:9A:E9:69:88:C3:5B:ED:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/972612c8-381a-3c2f-b692-279c8df60166.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:a0:14:43:67:70:3b:a8:89:70:da:59:60:30:7f:52:e8:f2:
         b9:1d:e5:d7:35:7a:ee:49:93:5a:d8:69:fd:e2:b6:97:d0:d1:
         ba:1a:14:6f:a8:fe:bd:74:bc:48:cc:6b:03:ca:86:ce:8b:8b:
         3d:84:2f:d5:1c:98:a1:a0:74:52:92:39:6a:09:7a:22:2b:5b:
         dd:3c:09:e7:5f:36:d5:12:d0:11:22:19:04:5b:2c:e9:c7:ff:
         07:3b:58:fd:e4:75:45:98:af:98:dd:26:9c:02:5d:4a:6b:ce:
         6d:04:ae:cf:b7:b6:9a:dd:ab:bd:be:a8:5b:f4:22:78:9e:16:
         7f:52:48:24:4b:d2:ad:1c:ac:1a:52:47:c9:1d:88:35:27:d3:
         5c:5e:33:fb:45:20:ea:d4:44:a9:94:79:90:f0:bf:2c:7e:f5:
         8e:02:5e:e4:d7:51:5e:ee:cf:09:12:3e:a6:0e:f3:18:0f:cc:
         73:8a:87:3d:94:ef:20:bc:83:0f:c5:ca:8b:81:84:76:6e:6b:
         81:d6:b4:6d:33:f6:3c:cb:35:f0:1a:c8:98:4c:43:07:02:17:
         a9:de:51:00:69:31:2a:9f:91:bd:86:d4:ec:3e:6c:1a:a0:44:
         81:35:8a:ba:7e:89:af:80:7d:25:66:f4:04:fc:ef:9b:b2:f6:
         a8:17:8f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:14:29 2026 by rpki-client