Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c05e8519-5219-3515-ba37-197f273844fc.roa
File:                     c05e8519-5219-3515-ba37-197f273844fc.roa (raw, json)
Hash identifier:          W/r+CMkB9dFAXbNco7L0IdEo6asOkHiTwQbUHWVYwA0=
Subject key identifier:   47:D1:62:8E:A4:59:D3:CA:1F:B4:8A:82:75:E9:E0:38:05:E3:F2:7A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D1F4A5922C552E76CCDA32F80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c05e8519-5219-3515-ba37-197f273844fc.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     15169
IP address blocks:        104.134.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:59:22:c5:52:e7:6c:cd:a3:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=596c1c27-d17b-437e-b133-91fbeffe5f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:53:b4:e5:3d:87:8c:4a:1a:21:0f:22:0a:69:
                    14:2e:e0:df:42:30:58:12:be:43:a1:ab:ed:ec:58:
                    75:57:62:0e:c3:75:f8:0a:e3:50:6d:d9:bf:f9:0e:
                    9d:eb:8c:44:3b:4e:b1:b7:53:d6:50:e1:46:98:a2:
                    17:1c:03:f9:1d:21:5c:d0:c2:9e:34:63:76:9d:a0:
                    a6:b9:5e:3a:42:7d:72:75:e0:ce:2a:7c:e3:ac:0e:
                    6e:9c:0a:07:4f:7e:81:c5:cf:21:ab:3f:6f:35:70:
                    f5:f3:da:ce:f7:09:c7:77:3b:f1:1b:c5:18:6b:f9:
                    f6:23:2f:91:71:5a:08:2d:75:26:e6:64:c6:2d:80:
                    f9:a5:b2:65:31:47:c5:56:6b:05:55:19:bd:7f:55:
                    5b:49:08:4b:48:27:54:d1:36:4d:8d:97:9c:0a:1e:
                    5e:1b:bc:f2:dd:6f:59:d4:19:51:47:3b:9b:c5:62:
                    b7:bd:23:04:27:5a:02:9c:9c:95:90:25:cc:35:84:
                    fa:3d:fc:0a:87:82:27:b9:17:56:08:d3:8e:3b:57:
                    e9:82:90:fc:4e:78:f3:6f:7b:b6:64:f6:09:2e:06:
                    d4:7f:47:f0:5b:d4:0c:13:da:30:8a:86:13:e1:09:
                    ce:e9:5f:11:c0:2e:21:d1:a9:b3:c4:1d:5f:7e:bf:
                    dc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D1:62:8E:A4:59:D3:CA:1F:B4:8A:82:75:E9:E0:38:05:E3:F2:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c05e8519-5219-3515-ba37-197f273844fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:af:c0:59:08:17:c9:cd:4b:87:d1:c5:37:2e:6a:38:4c:d5:
         81:84:7f:77:be:6b:af:fe:e5:24:ab:fb:30:b6:92:77:c4:7e:
         31:7a:05:1c:40:52:12:b8:72:26:24:91:60:42:69:69:f5:7c:
         3f:90:98:5a:be:fc:7b:22:d0:f2:23:35:09:a6:6f:37:50:dd:
         4d:64:06:c3:df:c4:4a:15:5b:7f:be:44:91:bf:f7:a4:bb:48:
         54:44:21:36:32:51:69:0b:74:b6:6c:a3:a7:19:64:1b:f4:22:
         e5:31:87:13:0b:f0:46:51:c5:4a:f6:e5:11:a1:f3:66:f8:36:
         29:71:68:45:46:8f:43:99:34:ca:d1:9e:33:4a:8b:2d:14:82:
         5a:5a:26:65:07:38:8a:1e:af:4f:8a:bd:36:e1:79:32:ef:a1:
         bf:39:ec:b5:2c:93:b0:a8:01:96:1b:00:33:e5:43:82:08:7a:
         89:0f:17:5e:f4:1b:3a:96:c2:30:38:92:7b:a6:7e:96:18:de:
         02:b9:a1:08:3f:9c:3e:0e:b3:60:ed:3b:64:93:a4:c8:29:57:
         76:83:5e:41:bd:45:fe:43:c3:43:b2:83:92:7b:96:3d:ca:29:
         be:0d:c6:45:d0:d5:e2:46:3a:1d:cf:d4:83:11:42:c7:47:e5:
         8c:9e:7a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:44:58 2026 by rpki-client