Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e7a4df4d-b672-3eba-8d6a-af94809727ca.roa
File:                     e7a4df4d-b672-3eba-8d6a-af94809727ca.roa (raw, json)
Hash identifier:          UpEfmtY4lzTBPe7NxJSzK4VXYC6VYDVNIaFwQtiUoA4=
Subject key identifier:   EB:5E:5F:68:64:4C:52:4A:3D:52:56:8E:48:46:01:11:71:E4:A1:74
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D1F4A586F4B56CDF7CC614FB0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e7a4df4d-b672-3eba-8d6a-af94809727ca.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     395973
IP address blocks:        104.134.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:58:6f:4b:56:cd:f7:cc:61:4f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=70ffc9f7-83d4-4db4-a381-7ebd477fb252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d0:30:49:fd:9d:16:dd:3c:e7:2d:68:9d:25:
                    8f:a8:92:8d:18:99:cc:c3:85:d4:f8:43:c4:8c:b0:
                    8f:73:e4:8f:48:a3:02:39:e1:7a:bd:b3:40:f2:20:
                    48:88:18:af:b8:15:40:ed:56:bb:b1:c6:b1:f0:d7:
                    3a:f0:ee:30:ba:4f:99:88:97:83:da:f5:89:32:a9:
                    fc:89:86:d1:fe:43:29:d5:36:a8:f2:96:35:ab:93:
                    be:46:c5:49:1d:1a:53:fd:45:da:02:77:67:f1:af:
                    41:18:be:24:f7:6c:06:31:a2:b1:d9:ab:c4:f3:4d:
                    b2:c2:6d:94:a9:fd:d3:8a:b1:2b:13:6b:ed:c8:fb:
                    df:b7:6b:9d:cb:9c:e4:c6:84:a5:85:71:2f:06:a1:
                    e6:45:b4:ab:a2:ff:16:49:c0:3c:5d:88:2b:35:2a:
                    ff:bb:6b:57:09:bc:0a:24:d1:24:82:0d:b1:8e:dd:
                    fa:21:a7:57:28:2c:fa:83:f2:e1:f4:f9:61:01:de:
                    b3:8b:b8:62:22:b0:6f:92:f0:b4:79:f1:75:90:2c:
                    81:c7:bf:c1:0b:45:1a:7b:a1:02:42:be:e4:98:cc:
                    bc:e8:49:93:c4:0c:3b:13:81:9a:d9:17:3f:07:4f:
                    e8:a7:f4:ac:35:eb:3e:5b:4b:7a:e2:73:dc:92:0f:
                    58:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5E:5F:68:64:4C:52:4A:3D:52:56:8E:48:46:01:11:71:E4:A1:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e7a4df4d-b672-3eba-8d6a-af94809727ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:bd:23:82:e7:56:11:06:3b:db:94:10:a0:dd:f9:d9:53:1c:
         2c:4c:ed:ca:95:3b:ef:37:af:8e:ec:32:34:f3:10:b3:3b:c7:
         ea:63:0b:2f:c4:00:f0:2a:81:4e:a4:ac:b2:e6:fe:ec:9a:5f:
         c0:ff:34:24:bf:35:9f:5b:a3:64:91:a5:3f:fa:b3:78:03:c4:
         f3:23:45:f3:17:1c:1f:2b:dc:8a:4f:a0:00:2a:86:a2:ed:04:
         6a:d6:a2:7e:86:11:9f:6f:2e:72:84:a3:33:61:87:eb:29:36:
         46:f3:4c:d4:ea:23:5d:2d:97:6e:ee:d5:1c:b1:98:5e:ba:ed:
         8b:88:4c:84:90:48:04:ba:3a:ad:9f:0f:ec:68:48:b2:1d:49:
         c9:c6:94:86:28:53:cd:66:af:5f:3d:e5:83:c2:d3:05:9a:2c:
         76:71:52:27:10:b2:73:52:e8:6d:32:7d:cc:6d:0e:d8:aa:78:
         86:2d:98:72:48:00:2e:fa:f9:94:7a:cb:95:1b:37:3e:f6:77:
         55:32:c3:4e:99:8b:d2:d2:ae:a6:2f:44:3e:be:df:f3:3c:90:
         b7:c3:f4:2b:bd:7d:f9:18:6b:a1:2b:00:8d:1f:0b:31:dd:a1:
         34:ee:8e:24:f2:22:a0:5f:77:5b:d9:f8:72:16:83:ae:2f:c1:
         10:2c:f5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:54:56 2026 by rpki-client