Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a5918730-9194-31c1-b9c6-a93078738549.roa
File:                     a5918730-9194-31c1-b9c6-a93078738549.roa (raw, json)
Hash identifier:          kH/0LHZoMEEkie2eMJDoW2pcEN8FWPQo9AasZ21Wqw8=
Subject key identifier:   89:F0:C2:1D:28:4B:74:77:87:25:55:E3:7A:6A:08:94:F6:7A:DD:77
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584E4129DFD2340BC32C555E7100
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a5918730-9194-31c1-b9c6-a93078738549.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     395973
IP address blocks:        104.134.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:df:d2:34:0b:c3:2c:55:5e:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=c6c613d6-465e-40e0-8669-e1ae60c159af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4e:1d:61:65:5c:ce:6e:7f:b1:4c:2f:61:4c:
                    32:17:0a:ac:f8:1b:da:49:e4:3e:b4:13:8f:d9:ab:
                    18:62:87:f0:d4:4d:ed:b8:dd:af:84:b5:62:ba:1b:
                    b4:27:fe:5e:09:97:31:ed:46:9e:b8:bb:91:1e:f3:
                    61:99:d5:eb:1d:aa:5f:36:b1:1c:ef:bc:0c:75:0b:
                    b7:e2:cc:9e:e6:e4:44:f6:c3:89:ef:30:30:33:91:
                    32:bb:06:f2:d2:e8:eb:e7:c6:36:2e:a7:9d:47:e5:
                    77:1d:40:81:32:b4:c9:d2:fd:8e:c0:d6:20:61:2f:
                    95:ba:6b:0d:1c:7a:af:12:47:58:13:66:a7:73:ee:
                    ee:89:ca:ae:42:9e:98:77:1e:0a:77:01:db:ce:14:
                    56:12:10:e1:77:37:5f:49:9e:c7:4b:b4:bb:de:0a:
                    58:66:ce:72:41:90:ef:b7:f5:b9:c5:a8:57:73:0a:
                    35:cf:6e:f3:72:47:43:7a:5a:69:94:18:d5:3f:cc:
                    69:7b:6c:5a:c3:7d:21:3a:e2:fb:37:50:f3:8b:79:
                    fd:48:3e:14:0b:81:03:fb:38:a2:6e:80:28:af:be:
                    d7:27:f3:d0:ed:7a:3a:22:c1:58:fd:d8:44:43:80:
                    db:c1:28:87:4b:37:7d:14:e7:30:c9:e2:69:e7:de:
                    b7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F0:C2:1D:28:4B:74:77:87:25:55:E3:7A:6A:08:94:F6:7A:DD:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a5918730-9194-31c1-b9c6-a93078738549.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:fa:24:0d:88:6f:6a:6f:e6:ff:07:f9:15:02:52:a1:2d:c0:
         13:21:ba:7f:99:1d:e3:fc:34:78:15:bf:f4:30:15:68:e3:80:
         27:09:ff:82:94:83:43:b0:93:cd:7d:6d:76:19:e2:15:87:15:
         85:86:f9:49:3d:80:26:44:b5:28:97:ee:7d:f3:c4:d4:5d:03:
         0f:30:61:96:b9:fa:91:6f:d0:24:79:53:aa:24:da:2f:f4:de:
         f3:34:20:3d:f0:02:59:c9:02:bd:b5:3a:b5:f4:83:25:fe:83:
         81:67:1d:8d:ba:f1:8d:a8:a3:5a:19:25:3a:16:c3:21:5e:6e:
         97:2c:0b:66:1c:d4:93:77:0b:90:75:55:63:91:fa:27:38:80:
         5f:64:e3:d0:d5:1f:88:28:9d:c4:7d:b2:87:f0:23:ee:8f:68:
         f4:d4:89:d3:d8:94:f2:3f:3a:ca:db:17:25:75:72:f1:13:9c:
         6d:f8:05:f7:c6:3d:df:d6:26:fc:44:25:7f:3f:e3:7d:5a:1d:
         0d:34:bb:a1:4b:b4:a2:90:e2:a5:38:be:3c:b2:7a:a9:31:e9:
         a3:aa:3f:0a:59:59:7e:1f:ca:17:98:cd:6e:ce:bb:15:ee:07:
         47:ad:e8:e4:34:41:6f:54:90:7f:57:3b:f4:6c:28:9b:0c:e8:
         9d:16:ea:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:08:05 2026 by rpki-client