Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/999a42e4-ba2d-3d5a-93e9-51dad185705a.roa
File:                     999a42e4-ba2d-3d5a-93e9-51dad185705a.roa (raw, json)
Hash identifier:          5sNrl6eoeSXF2XW2Muz32scocRFnT0ogKqDWlBHUK9U=
Subject key identifier:   CB:86:F2:BC:EC:7C:A8:8D:78:B5:C1:38:78:52:88:C1:3E:A5:EC:8B
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D1F4A502135A0175866838A80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/999a42e4-ba2d-3d5a-93e9-51dad185705a.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     15169
IP address blocks:        104.134.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:50:21:35:a0:17:58:66:83:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=80757095-35ba-43c4-ba54-dbaca0c274a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:03:2c:37:55:dd:de:35:9b:29:c8:5b:f6:d4:
                    3a:65:f7:f0:fc:9d:87:dc:28:bd:40:69:c1:73:f5:
                    0c:46:5a:fa:68:32:f8:22:01:4b:ac:27:35:e3:d6:
                    ad:4b:1e:07:6f:21:fa:c0:a0:ab:59:fe:2e:d4:19:
                    25:03:cf:68:9c:34:f0:38:c2:c7:52:e5:17:d0:3c:
                    42:b3:a9:9d:09:7d:fd:78:05:20:a6:aa:01:c1:a5:
                    70:34:89:f2:13:f2:df:88:77:ca:27:ae:cc:a4:54:
                    23:b3:df:30:a7:81:d6:07:8e:1d:85:23:71:84:ad:
                    a8:d9:32:2f:b0:12:b5:bd:24:e4:d6:08:d6:e6:09:
                    75:4e:0a:aa:2d:07:3a:1e:de:a9:3d:46:bc:6c:f2:
                    e2:69:b3:0b:6e:88:e9:43:2f:1e:6e:7e:5c:26:7d:
                    bc:25:eb:f5:b6:63:d5:bb:d6:55:1b:7f:64:2f:c6:
                    d9:c9:6f:1d:47:5f:6e:01:33:a0:15:64:8b:f7:23:
                    01:16:74:77:f5:d4:5e:42:0d:fa:3f:2d:46:8f:67:
                    33:08:e6:04:bc:59:8b:57:af:29:15:5a:54:bd:62:
                    72:51:04:0b:ba:8e:34:ba:86:54:9b:be:b9:f1:59:
                    b3:b6:84:4a:3d:00:01:4b:9e:00:45:4d:14:15:9b:
                    d5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:86:F2:BC:EC:7C:A8:8D:78:B5:C1:38:78:52:88:C1:3E:A5:EC:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/999a42e4-ba2d-3d5a-93e9-51dad185705a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:31:91:bf:09:da:a6:0a:79:c5:2d:41:f4:1d:45:ee:ff:06:
         f2:de:3b:50:d8:8f:a6:27:9b:06:58:40:11:8d:e5:c1:86:8c:
         e1:b5:f6:8b:50:e6:21:3b:a8:ae:f4:f7:5b:84:1d:d4:f7:1d:
         72:10:70:89:bf:9d:c2:d7:3c:a4:9f:21:50:e9:63:40:a0:f3:
         78:22:d0:8a:35:e7:05:f8:73:8b:ae:6a:a4:fa:90:86:a1:f8:
         b0:e1:dd:29:0e:cf:88:fb:5a:15:a2:8c:44:05:53:bd:b0:70:
         5d:ad:45:83:09:b5:29:87:55:fc:5d:e9:81:27:0f:2d:54:52:
         25:99:9b:1b:6b:8a:b4:67:9b:6b:73:a6:6b:2e:0f:f3:6d:02:
         1f:3e:be:d7:0d:31:20:d3:81:dd:8d:22:9d:ad:cd:ee:ce:67:
         fd:25:78:73:06:f3:91:aa:26:11:32:ea:2f:f8:5f:6c:c7:e7:
         48:75:55:ff:86:d7:76:4f:31:73:60:44:8f:ce:45:19:50:3a:
         9f:60:7a:1d:d1:28:c5:b8:4d:b4:45:23:4a:cf:d3:e8:96:48:
         27:15:18:1b:ce:1c:0a:0e:00:eb:9c:99:35:a5:df:fc:d6:bc:
         6a:53:90:c9:1e:de:27:ce:55:d3:44:3b:88:9f:8b:1a:fa:ac:
         20:a6:97:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:31:44 2026 by rpki-client