Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e3bd7f28-8ed2-3d0d-b173-0fd39665182d.roa
File:                     e3bd7f28-8ed2-3d0d-b173-0fd39665182d.roa (raw, json)
Hash identifier:          Zki9fdqO1j2IdjbyUaGCZcZZ6XDf3OsiIGd9Cxa+YRQ=
Subject key identifier:   29:FB:16:D4:92:B3:F4:8F:43:A3:C9:B6:FB:7C:0D:0E:72:46:A6:82
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D143D8548AD13C6EAA2322D80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e3bd7f28-8ed2-3d0d-b173-0fd39665182d.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     395973
IP address blocks:        104.134.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:85:48:ad:13:c6:ea:a2:32:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=9bada207-4257-4e01-96e0-df70faac0f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:00:1c:ff:8a:8f:a7:eb:04:ba:1b:a6:1c:89:
                    fe:cd:68:2a:bd:5d:05:25:99:27:b1:b1:ee:72:cd:
                    de:33:f8:16:14:2c:cb:d0:15:da:ad:fe:30:b3:fc:
                    eb:a3:25:cb:94:ca:95:b3:36:a4:d8:fd:1e:a5:cd:
                    3f:95:57:1b:6c:cc:74:55:52:64:16:d3:8c:52:3d:
                    aa:49:f3:73:e5:54:33:6b:5a:e0:b3:dd:9e:9a:39:
                    87:03:2b:9f:12:68:80:02:dd:d6:b1:73:cb:19:8c:
                    90:cd:83:43:c9:9f:ef:83:f9:7f:19:31:32:7b:24:
                    bc:2b:7c:a7:6e:7a:47:b9:23:d4:a7:c3:64:cd:7f:
                    12:7a:01:d4:86:60:bc:17:f8:41:fa:f1:95:c4:e2:
                    2c:13:37:6b:b1:bf:a8:3b:cc:a2:e0:cb:2e:a6:d3:
                    16:7f:0b:70:30:27:f8:53:17:26:cc:fa:54:7f:43:
                    7f:15:71:7c:4d:86:2b:c2:7d:d3:47:fb:34:49:3f:
                    c3:c9:31:df:3e:42:cf:df:fb:2b:71:46:12:19:77:
                    fa:9b:53:33:15:84:a8:db:94:67:ba:18:ae:ea:c8:
                    d2:2a:0d:8c:68:0f:e1:d8:db:ff:f4:17:85:9a:bb:
                    51:23:31:54:bf:a1:5c:81:24:dd:bc:9a:da:63:36:
                    9b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FB:16:D4:92:B3:F4:8F:43:A3:C9:B6:FB:7C:0D:0E:72:46:A6:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e3bd7f28-8ed2-3d0d-b173-0fd39665182d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:93:22:ea:da:b8:d2:d7:bf:76:b6:5b:d9:83:3f:71:4e:25:
         e6:1f:cd:c9:11:95:e8:dc:f5:7c:5f:8e:31:47:66:16:64:3c:
         c2:7d:24:8b:ac:39:78:a1:8d:f7:31:57:8c:ee:e6:bc:8e:b7:
         07:5b:b7:b2:5e:3f:e5:16:6a:95:f6:0c:45:85:bb:63:5e:5e:
         28:f6:0f:ab:48:93:72:cd:72:f7:b2:8d:32:4a:26:b6:60:c5:
         4b:30:69:ed:78:e1:c3:25:93:b8:0c:59:4d:3a:87:76:1f:f9:
         8b:ee:fe:39:20:c3:19:c8:5b:e0:48:cb:77:52:9c:85:d3:f8:
         32:03:0d:b0:b9:c7:54:3f:e4:4f:d5:eb:a3:27:a6:10:75:e4:
         d5:80:d6:48:c3:0b:cd:0c:6b:55:f2:a4:16:56:03:0e:58:3d:
         b4:b1:2f:af:7d:64:5e:dd:94:c4:78:97:6c:17:91:a6:16:52:
         ae:aa:13:52:0e:e1:59:52:cd:7c:36:b5:45:6b:2a:3c:12:d9:
         6a:68:33:81:db:37:6a:49:04:be:09:e3:bf:32:0b:3f:61:af:
         2f:88:b4:e4:d0:e6:17:e6:69:db:ce:54:78:0c:57:c2:7d:bc:
         c4:c4:7e:2e:2b:4a:21:9f:cd:3c:39:88:e8:47:75:75:3f:c4:
         ff:57:e6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:22 2026 by rpki-client