Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ee555de6-d117-34c9-a85f-5f2680d75736.roa
File:                     ee555de6-d117-34c9-a85f-5f2680d75736.roa (raw, json)
Hash identifier:          H4dHZ50macKh3/5MYvAjJoYLatCTD0Gk9isufvk/z2E=
Subject key identifier:   74:0A:A2:7E:52:D8:07:EE:E4:2D:A7:3A:67:48:66:A4:BA:91:79:E0
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D143D8F6C42CCF0B5392F0000
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ee555de6-d117-34c9-a85f-5f2680d75736.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     15169
IP address blocks:        104.134.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:8f:6c:42:cc:f0:b5:39:2f:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=62bbdefe-9dce-422b-94c1-94ae0f4790da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e1:d8:68:1e:53:b3:7b:af:7b:5d:38:39:54:
                    4b:44:46:f6:70:16:ac:03:87:f7:59:14:b9:44:ba:
                    e8:30:65:21:61:4f:ce:70:a0:0c:47:45:64:a8:5e:
                    52:b6:ca:ae:31:c5:79:e7:9c:b3:3a:7d:19:48:0c:
                    e9:cc:e6:0c:5d:fb:c2:a9:07:f5:74:28:bb:fb:97:
                    fb:74:06:6c:62:3a:33:23:7f:c7:70:a5:c1:73:9c:
                    12:58:4f:39:f6:d5:55:a5:5c:a8:5b:4f:37:5a:89:
                    1b:ef:c4:9f:90:37:53:f2:fa:64:12:af:60:c4:0c:
                    58:90:0d:33:0f:e4:d1:68:18:b7:72:c5:7f:55:5c:
                    c1:6c:30:9c:9b:a7:b3:5b:e3:90:26:23:6d:d2:04:
                    db:ac:70:30:06:6e:7e:dc:7f:51:aa:70:aa:42:d3:
                    7f:9d:95:2a:70:17:a5:7d:89:22:b1:09:fc:c2:93:
                    ab:37:af:3d:c8:4e:6b:44:c4:15:6c:02:0e:c3:4a:
                    cf:30:d6:03:cd:df:2c:db:15:74:5d:d8:9b:b0:a6:
                    85:f3:d5:65:64:60:cd:22:c3:5b:30:a4:4e:13:a2:
                    8d:0d:50:4a:a5:93:e0:9b:5a:f5:1b:d7:dc:c6:e9:
                    fa:d6:3c:d3:83:6b:f3:c5:ff:b5:80:7c:df:37:e9:
                    9d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:0A:A2:7E:52:D8:07:EE:E4:2D:A7:3A:67:48:66:A4:BA:91:79:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ee555de6-d117-34c9-a85f-5f2680d75736.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:de:ff:69:2a:c9:c9:2e:a0:51:49:fd:76:04:1c:63:40:a5:
         c1:1f:db:2c:11:1c:01:2b:a6:60:bd:1a:e4:4e:14:2a:80:70:
         4f:06:e9:4a:f2:5c:d5:7d:89:dc:da:d5:96:94:73:f1:94:8f:
         f2:0a:2f:f1:fa:f0:eb:30:36:38:44:ba:46:ca:64:1c:36:cf:
         b2:fa:8b:46:f0:3f:97:19:43:ca:2e:10:4b:fc:e7:87:e2:1b:
         8d:96:a1:8b:68:46:02:cf:5d:3c:1f:17:a6:f7:e3:38:b6:18:
         ea:f1:01:3a:31:d5:38:5e:4b:cb:22:64:eb:e4:ec:d7:9c:df:
         b3:d7:9f:cf:97:85:29:5e:83:4a:50:05:15:ed:a6:16:13:65:
         f7:0c:a9:f3:19:9d:97:57:67:9f:a2:40:df:37:59:7a:f6:4a:
         09:27:3a:db:d8:54:bf:50:c5:eb:38:dd:47:76:ce:81:56:49:
         cb:17:7f:56:dd:01:9f:b9:59:b4:b7:41:18:e6:c1:0c:95:f1:
         4b:ab:6f:5c:b2:76:83:01:6f:5f:44:ee:c5:d7:e2:5c:5d:db:
         b6:ca:fc:99:f4:60:ab:4d:c6:2a:87:f8:bb:93:4e:f2:1d:31:
         c8:74:1c:e1:ab:f3:b2:1b:45:7e:38:bf:8f:b6:09:1f:17:76:
         21:b0:28:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:15:26 2026 by rpki-client