Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e2a5441b-5c2c-3a08-b199-0a9d4dca21c4.roa
File:                     e2a5441b-5c2c-3a08-b199-0a9d4dca21c4.roa (raw, json)
Hash identifier:          cfDpKUUhNgj7tUuL/LjJ25cLeEniiEnyZKzsYRkb+ZU=
Subject key identifier:   B6:80:7F:3D:34:42:CD:CC:56:E3:45:EA:90:C8:7C:21:13:89:45:17
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584E2AD44DEE367E27DFC56F1000
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e2a5441b-5c2c-3a08-b199-0a9d4dca21c4.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     395973
IP address blocks:        104.134.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:4d:ee:36:7e:27:df:c5:6f:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=66336848-2b7d-450c-bcaa-af0ec2ac4339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a6:da:7d:f0:4a:6f:90:82:b0:2f:95:83:6c:
                    23:ef:6a:f8:15:66:89:2a:ad:19:5e:ff:77:f4:09:
                    10:76:a2:1e:ce:b0:4a:45:16:dd:45:88:da:9b:fe:
                    c2:6b:83:c9:ad:f9:79:91:a8:70:f2:9c:d6:44:af:
                    f3:20:d9:cd:41:47:00:40:c9:cd:70:92:a2:b0:51:
                    72:63:09:fd:4e:92:ce:a2:31:a4:61:fa:16:48:52:
                    de:b4:16:d8:f2:34:1d:ab:9d:c4:59:0b:4e:5f:13:
                    9a:da:a1:56:ee:64:03:45:28:68:59:0d:a4:7e:fb:
                    48:58:0a:31:f4:7e:85:56:ba:0b:4e:40:ab:fa:28:
                    48:83:2d:5e:31:2a:f2:5c:d0:5d:17:56:e9:f1:4d:
                    e1:0a:fd:43:d6:70:19:9c:94:5e:ac:1d:1c:5b:fd:
                    c3:14:7b:05:3b:6f:20:8d:79:ee:fd:b4:4b:3f:9d:
                    2d:63:6b:02:57:a8:21:e3:57:e7:77:77:32:79:a3:
                    33:8c:f3:75:b4:6a:5c:f5:23:7d:ad:cb:f5:3d:47:
                    fe:2f:06:03:a0:5a:fc:c0:af:b9:c9:a7:2d:c0:eb:
                    b7:48:90:3c:c9:10:60:07:ad:fd:c2:b4:2d:70:6b:
                    fa:fe:56:d1:87:63:a0:5c:ac:d7:99:2c:c3:da:04:
                    79:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:80:7F:3D:34:42:CD:CC:56:E3:45:EA:90:C8:7C:21:13:89:45:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e2a5441b-5c2c-3a08-b199-0a9d4dca21c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:33:36:f6:19:49:9c:53:38:9b:eb:e8:ae:71:3a:b2:b3:6d:
         8f:b2:45:f2:f0:65:b2:85:3b:1f:bd:58:08:ad:f1:16:77:29:
         38:7d:f9:71:99:01:14:ed:b4:41:9c:70:b8:37:3a:89:ac:ee:
         d2:f6:b0:54:18:fa:21:d7:1c:7b:b7:f5:6d:86:5f:ac:53:96:
         16:09:37:cb:f4:a7:a3:44:38:de:6f:b9:9f:3e:f5:fa:17:43:
         d3:eb:95:e7:61:26:ce:43:4a:54:13:f5:63:4a:f8:04:48:26:
         7b:9c:83:87:81:93:73:4b:3d:fc:39:fa:4f:8b:22:6b:ca:6d:
         bd:f1:82:ac:2a:c5:d9:3b:b5:e1:18:e6:d0:54:e0:6a:dd:d9:
         bf:90:5b:c9:24:ff:b8:de:7b:74:bc:3f:15:ec:25:c0:ca:59:
         6a:ef:12:b8:c0:f8:0a:ab:73:0f:36:f8:f2:f5:ae:09:8b:87:
         93:e8:16:f6:36:89:7f:79:45:70:29:41:bf:10:8a:8f:2c:1a:
         b9:2f:91:db:de:59:33:34:f8:1c:7d:ce:4a:c9:e3:64:7a:4d:
         ff:bc:49:22:fb:5e:0f:be:97:5e:1e:f2:20:a0:98:51:98:46:
         89:e5:55:72:3d:cd:d5:f9:90:61:fa:bf:c7:4c:f1:ee:9a:44:
         35:49:f6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:42:36 2026 by rpki-client