Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a582a6da-aeb5-3486-b9fb-6465b99a61b9.roa
File:                     a582a6da-aeb5-3486-b9fb-6465b99a61b9.roa (raw, json)
Hash identifier:          763DG9TaLiqLMbpOGNQ4S4glhW0fVu62mbpo9wIDEnU=
Subject key identifier:   D7:CF:7D:ED:67:47:89:E7:06:27:BF:39:11:D3:F4:1C:E9:0E:D5:36
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D1F4A4B43FA43E731CB92ABC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a582a6da-aeb5-3486-b9fb-6465b99a61b9.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     36383
IP address blocks:        104.135.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:4b:43:fa:43:e7:31:cb:92:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=89ab1ba2-4597-4829-8e6c-e2f99d76b51b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:97:6c:af:9a:31:39:0e:2c:88:0f:8e:72:3f:
                    7b:20:f0:6e:c0:5b:c9:31:6a:b8:07:7d:ed:d2:b0:
                    6c:b3:46:c4:92:2d:b1:10:76:01:64:59:43:58:d0:
                    de:cd:67:c4:b6:2f:da:78:3f:c6:f7:f4:90:4e:39:
                    dd:57:a2:88:55:7e:87:15:c1:d1:84:0b:3f:74:09:
                    5a:10:42:26:d9:62:71:76:c6:99:4c:3f:d7:f7:46:
                    65:23:b8:46:fe:fb:90:f6:67:c9:e0:43:7b:e0:cc:
                    68:0c:f8:79:2d:37:ae:44:ea:10:b2:46:51:c4:15:
                    e7:7c:87:45:f4:20:55:35:f3:ce:fa:ab:1a:55:41:
                    c3:34:76:c5:d0:d5:0b:60:0a:99:d8:03:d6:e9:8e:
                    15:41:70:5c:9a:38:dd:60:5b:07:cf:36:4d:5b:c4:
                    fc:1a:a5:9d:46:0f:1d:c9:62:1b:d7:ed:45:c5:93:
                    91:eb:b8:36:c0:35:c3:73:c9:a4:36:82:b9:da:6b:
                    80:37:d7:bf:48:01:5f:61:c7:ef:4e:92:3e:b1:d8:
                    38:ea:70:92:f7:b9:b8:83:97:34:57:c8:5c:0a:b4:
                    e6:92:a4:54:7c:7f:15:78:23:6f:c8:b7:b0:55:6f:
                    6f:50:cd:a2:63:66:06:0c:6c:81:0a:1f:1c:9e:98:
                    6d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CF:7D:ED:67:47:89:E7:06:27:BF:39:11:D3:F4:1C:E9:0E:D5:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a582a6da-aeb5-3486-b9fb-6465b99a61b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.135.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:cd:32:00:58:44:99:11:93:bb:b6:4c:bd:9d:4b:64:51:0c:
         3f:cb:2c:8f:f7:69:ec:0b:21:f7:40:46:a7:d1:df:ca:b2:dc:
         02:25:f7:f8:78:8b:1a:58:7f:75:9b:48:46:d5:bb:a5:9a:ce:
         38:4d:23:8f:10:40:a6:ca:f9:29:25:e1:a3:b5:45:c7:d8:49:
         71:ba:76:fe:79:56:df:aa:c3:91:18:3c:fc:cb:1e:ef:97:c9:
         1a:03:9c:df:21:d5:4d:22:3e:c8:2b:77:bf:25:6a:1b:ca:dc:
         12:42:96:9b:b1:b0:1d:af:91:d3:51:9e:31:4c:2f:d0:99:4c:
         4a:cd:66:2c:4b:e5:96:2d:2a:5a:66:d2:3b:95:86:85:ad:f1:
         41:a0:ef:70:42:2f:e4:2a:45:1e:b7:f0:48:34:10:c2:64:00:
         de:b4:f3:3d:48:d0:e8:50:eb:2b:96:fd:f2:5a:6b:11:7a:67:
         61:55:7c:1a:47:63:8c:09:f4:60:e8:c0:a9:68:19:85:03:7f:
         b0:93:d6:55:29:c0:14:25:ad:ca:2e:3c:f1:08:04:3d:4e:55:
         5e:60:ab:bb:7a:b1:4d:50:b7:e6:59:7f:16:0f:17:fc:d9:3b:
         f5:d5:77:6e:97:70:1a:f9:84:81:fd:4e:3b:21:c6:fc:79:fe:
         6b:25:8f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:39:40 2026 by rpki-client