Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b1bdc6b6-f8a3-319e-b9e3-9c2ebd12d3c7.roa
File:                     b1bdc6b6-f8a3-319e-b9e3-9c2ebd12d3c7.roa (raw, json)
Hash identifier:          uGQDfzLM8t/dnTaEfIX6NRON33yPFokIp9J2+3r1uOs=
Subject key identifier:   81:C5:D1:0A:99:16:FC:16:63:E0:FD:42:68:A9:F8:CA:8C:BB:20:DE
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D143D8FCD4DF856F3F4286080
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b1bdc6b6-f8a3-319e-b9e3-9c2ebd12d3c7.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     15169
IP address blocks:        104.134.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:8f:cd:4d:f8:56:f3:f4:28:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=a26d9364-ba3d-4011-a364-d5dc60e9e12f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bf:29:8f:3c:10:b4:08:da:36:e8:86:16:de:
                    c0:b5:28:3b:de:ff:27:c7:1c:23:69:50:95:f5:35:
                    b2:28:56:f4:2c:cc:a0:af:02:df:e2:93:95:65:33:
                    5f:41:8d:3e:a7:85:f5:0b:f4:ce:f3:b7:c4:20:7d:
                    07:47:a2:d6:73:04:d7:15:08:a7:e8:59:e2:a7:ae:
                    e7:8f:1d:31:24:2c:fd:ae:02:46:41:7b:5f:ad:01:
                    eb:2a:66:f7:ca:24:da:8e:6e:9f:6b:5b:00:fc:07:
                    5f:8f:18:7a:2c:90:4b:bf:5c:33:b2:f1:10:1a:c6:
                    d4:56:fd:78:e1:11:5d:11:fa:da:2a:c3:6d:a8:1f:
                    82:62:9e:71:9e:7a:74:b2:2c:93:cf:b0:5e:99:25:
                    62:24:15:3a:d8:70:66:0c:ca:bd:4b:a9:ba:62:0e:
                    96:73:85:b4:08:ed:d6:15:78:50:85:f9:7a:52:12:
                    fb:24:b5:8f:b1:ef:f0:80:c6:3b:7a:86:3a:86:ef:
                    72:77:71:b5:7b:c7:58:bc:13:c1:7d:02:a1:30:32:
                    96:8c:a2:f4:f7:0a:d6:21:9a:b1:4d:9f:44:85:3c:
                    61:9c:a7:a4:38:c3:f1:a4:60:c8:0b:27:c3:78:18:
                    14:16:da:56:16:41:0f:1c:8e:9d:af:2d:83:21:45:
                    f3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C5:D1:0A:99:16:FC:16:63:E0:FD:42:68:A9:F8:CA:8C:BB:20:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b1bdc6b6-f8a3-319e-b9e3-9c2ebd12d3c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:3f:e5:6a:37:e2:e1:13:7a:db:8d:9b:a2:f7:dd:36:b8:6f:
         eb:64:15:9c:9d:15:f8:3f:ea:dd:5f:9d:39:57:eb:63:11:3f:
         f9:a7:ed:00:75:91:46:d9:76:34:0d:65:d5:f1:b4:c9:c5:53:
         77:10:56:a0:1d:da:78:d1:e8:b8:87:7c:8c:44:22:90:32:b2:
         91:f5:3e:dd:28:3d:16:f3:fe:bf:17:8f:0c:e2:54:b6:de:9f:
         c7:98:94:42:49:d3:45:d1:19:84:db:80:9d:34:10:28:2c:a6:
         e3:2c:91:fd:e6:fb:ee:5e:2b:bc:85:69:f5:c7:c7:14:e7:f4:
         9b:74:4e:13:3a:f3:b0:e7:ba:30:44:2e:1f:16:ce:1e:0b:4d:
         52:96:4b:df:0d:b3:ef:e6:23:39:18:65:f8:ba:57:7a:00:ab:
         a6:a2:80:57:41:93:e7:90:25:cc:2e:63:7e:ee:57:05:a4:d9:
         df:f4:51:4a:8f:53:eb:22:82:8b:e7:db:af:3b:04:6d:57:99:
         63:63:53:d1:f4:2e:20:06:31:39:81:f0:86:29:60:69:d4:9c:
         b1:ec:0b:c3:fe:22:06:b8:a0:eb:1e:55:d8:b0:92:00:48:dc:
         ab:20:86:75:83:5f:c5:59:9a:f6:6b:ef:04:24:49:38:e0:0d:
         a5:5a:bf:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:17:49 2026 by rpki-client