Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bfe96bb7-2ba7-3fb0-8b20-ed4a650ff27f.roa
File:                     bfe96bb7-2ba7-3fb0-8b20-ed4a650ff27f.roa (raw, json)
Hash identifier:          QAW9dCbBQxMjABoafRQbTR3XUN0Zc02lkTg+LFNiFqk=
Subject key identifier:   7D:49:6B:7B:D5:68:41:C8:27:93:D2:0E:33:22:11:19:50:6A:F6:C2
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D143D8C977085ECBB94085F88
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bfe96bb7-2ba7-3fb0-8b20-ed4a650ff27f.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     395973
IP address blocks:        104.134.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:8c:97:70:85:ec:bb:94:08:5f:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=8dc3ccb7-972f-4d4f-933e-755254e4707b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1e:23:13:09:dc:84:8c:9e:e1:18:35:eb:fe:
                    a5:44:ac:da:56:dd:05:fc:e9:0f:ec:83:49:b9:b4:
                    80:35:cc:a0:69:6e:2e:87:d1:00:b1:b1:b8:c8:f0:
                    8e:b9:40:f2:15:6e:8b:7f:55:95:bd:a4:a4:e4:92:
                    9d:87:c2:0d:a2:ae:b3:8a:eb:57:20:36:33:14:4c:
                    3a:76:52:d5:cb:e2:ad:87:a8:04:b7:b5:52:f4:41:
                    60:58:83:49:37:29:8a:db:5f:e3:61:a9:af:12:a8:
                    e7:56:b5:26:43:9a:96:55:30:3e:6d:27:46:7a:de:
                    8c:5c:ad:6a:0e:92:2d:20:fa:6e:15:61:71:ea:73:
                    0c:65:c6:22:2f:04:57:49:b9:d8:a2:32:a4:be:73:
                    dc:3d:a5:40:c6:6d:58:15:2f:68:9b:19:69:7f:f2:
                    76:01:b7:fa:d9:1e:57:9e:1b:0d:f7:5d:5f:e0:1b:
                    11:ef:bf:db:7c:35:c2:2e:21:ea:d0:49:5d:db:bb:
                    a1:7b:26:12:37:be:f0:5d:64:ef:18:ab:40:41:aa:
                    e9:40:24:a2:55:1e:0b:99:bd:4e:d2:d9:bb:29:00:
                    b9:29:87:02:33:0b:bc:3a:9c:96:cc:3b:bf:24:e9:
                    b6:97:21:f0:06:bc:f3:69:9f:a0:2d:a0:3a:d7:9e:
                    b2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:49:6B:7B:D5:68:41:C8:27:93:D2:0E:33:22:11:19:50:6A:F6:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bfe96bb7-2ba7-3fb0-8b20-ed4a650ff27f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:6b:0d:7b:e3:e7:b9:a0:75:61:7d:a4:0b:a5:0e:cf:42:e4:
         bb:13:a1:c9:91:ed:d1:35:b1:e7:6e:a3:21:40:f6:3c:17:a6:
         20:f2:41:7e:6d:53:11:68:11:63:d5:28:8d:67:aa:d3:2a:31:
         af:a7:8b:90:b5:c1:95:75:28:c3:f8:58:b3:e7:f2:ce:5c:aa:
         7f:1c:05:62:52:af:28:f1:07:e5:43:4d:2e:b0:35:cd:f1:0c:
         25:40:9f:b3:78:63:b7:c0:cd:45:53:c7:98:1b:9c:a2:db:0c:
         73:91:3d:c2:0e:95:a8:b8:ca:70:09:1c:b2:e8:a4:97:2f:b7:
         63:e1:24:6d:6d:c9:e7:11:f3:de:7d:1a:cb:cd:f6:ca:9b:07:
         24:93:7d:d9:65:07:e5:b0:72:77:7a:2f:f7:9a:81:52:06:76:
         5d:51:4d:6c:61:5a:62:28:8f:47:a3:52:f4:e2:ec:b7:33:b4:
         d7:55:90:97:09:a2:43:7a:bb:d9:5d:9a:b7:03:c1:32:0b:1f:
         e7:22:36:13:b8:43:0d:a3:45:1b:83:f0:96:30:6b:76:1c:42:
         3c:6e:89:6f:7b:c8:6a:97:7a:3d:68:21:4b:25:d5:5d:19:73:
         48:6a:f0:53:ba:8a:c0:4d:17:78:9b:02:00:1d:a8:56:18:79:
         3a:b5:f8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:10 2026 by rpki-client