Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d1d3dc5b-00da-3bb2-bbaa-cb1360dc3c32.roa
File:                     d1d3dc5b-00da-3bb2-bbaa-cb1360dc3c32.roa (raw, json)
Hash identifier:          4udVer4n9H0VVG38mVHnkdu9C8ZI0aABROdVmV/SdQw=
Subject key identifier:   3B:3E:58:5F:63:82:BA:0F:5A:2B:30:C3:1B:A3:00:23:CE:DB:12:0B
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584E51E9F66C61BD854AEEE9F780
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d1d3dc5b-00da-3bb2-bbaa-cb1360dc3c32.roa
Signing time:             Sun 28 Jun 2026 09:00:11 +0000
ROA not before:           Sun 28 Jun 2026 09:00:11 +0000
ROA not after:            Sat 26 Sep 2026 09:00:11 +0000
asID:                     36383
IP address blocks:        104.135.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:51:e9:f6:6c:61:bd:85:4a:ee:e9:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jun 28 09:00:11 2026 GMT
            Not After : Sep 26 09:00:11 2026 GMT
        Subject: CN=c6af38e2-7207-4574-9239-a90deb4fc049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:12:4e:bf:7c:dd:0d:fb:da:49:98:54:3c:58:
                    3b:2f:f1:20:6a:ce:6f:21:be:bf:d4:52:83:e5:08:
                    01:67:84:96:a8:6c:95:e6:42:b5:4e:3e:16:6d:9d:
                    e4:9c:2f:f5:15:2c:25:77:a0:78:02:8b:bd:9a:7d:
                    24:ad:cf:82:c3:93:7b:57:01:11:83:ae:f1:99:4b:
                    97:98:f4:e9:a2:f7:14:35:7d:af:51:d2:af:b2:e2:
                    32:30:2e:6f:80:50:ea:cc:5c:33:ad:bb:b0:2f:bf:
                    52:50:af:fb:60:35:97:6b:83:5b:2e:2d:db:ff:de:
                    d6:29:59:40:6e:53:2a:ec:5c:df:06:ab:58:b8:f5:
                    3c:cd:fb:fc:22:57:d8:87:be:45:b8:77:2b:1f:3f:
                    6f:7d:58:f5:69:71:e9:50:ca:aa:b6:8d:80:d2:70:
                    00:9b:33:87:8f:bc:8f:dc:77:ee:15:54:66:eb:5e:
                    1f:b7:a7:d2:63:93:e3:6e:45:12:b9:c9:e8:69:29:
                    e9:38:06:ec:17:8e:ac:98:5c:80:d0:60:f8:98:a8:
                    47:fb:79:d7:ee:2a:24:dc:a7:7f:19:08:d2:90:ed:
                    9e:5e:09:09:43:f0:bf:09:c2:40:68:82:9c:70:20:
                    f8:fa:11:d7:09:7a:54:b2:2d:65:04:9f:b6:38:2a:
                    fc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:3E:58:5F:63:82:BA:0F:5A:2B:30:C3:1B:A3:00:23:CE:DB:12:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d1d3dc5b-00da-3bb2-bbaa-cb1360dc3c32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.135.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:04:d5:3c:98:9f:11:a8:90:d6:32:6d:33:35:84:3b:b7:33:
         9b:ff:f7:aa:4c:59:c8:89:dc:90:4a:d9:15:01:d2:7c:0e:44:
         87:65:9a:cb:84:3b:ce:3e:26:35:01:cb:83:cf:08:e6:3f:3d:
         50:ca:8f:8a:cf:61:43:b8:24:01:b3:56:87:e3:46:d0:ee:5f:
         92:a4:55:2c:6c:a7:3a:d6:a8:e2:ee:06:d1:44:eb:71:a2:95:
         aa:57:24:5a:90:b8:b1:eb:60:82:cc:36:8a:26:3c:c9:84:b9:
         74:33:34:7e:83:10:3d:56:96:0b:33:d6:90:73:4a:78:7b:0d:
         67:f5:85:66:f8:5f:f7:ad:c1:7e:17:ba:1a:d9:2a:69:6b:e2:
         fc:82:c8:73:d8:29:47:30:8c:0a:a4:00:cf:69:5e:7c:67:c6:
         24:f4:fa:61:13:61:ae:27:66:c4:3d:c3:02:03:4c:d9:ac:95:
         23:e6:3e:56:02:6d:73:38:8f:29:7f:a4:3b:17:2c:bb:46:94:
         74:0b:63:a4:c2:f5:04:5d:49:03:d0:bf:08:e8:41:eb:4b:31:
         57:e6:bd:de:10:27:43:cb:7c:d4:fd:4a:7b:77:3c:fd:13:c6:
         ae:f4:9a:cc:0d:37:e4:8a:b2:0f:3b:d8:2b:02:27:3f:f3:cf:
         f6:5c:88:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:41:53 2026 by rpki-client