Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ae43273c-3272-3c44-8061-d922ad832252.roa
File:                     ae43273c-3272-3c44-8061-d922ad832252.roa (raw, json)
Hash identifier:          OKQYSiHitytEgh0zaf/3sJLVLe47qeJuGCJaQjnFHEs=
Subject key identifier:   C0:C2:0B:71:6A:5F:D1:BE:B5:4A:1A:4A:8B:4A:17:1A:92:36:BF:28
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D60E50ECE6ED7607B83E59E00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ae43273c-3272-3c44-8061-d922ad832252.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     395973
IP address blocks:        104.134.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e5:0e:ce:6e:d7:60:7b:83:e5:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=3af19bf1-389a-4721-be3f-f2c3917d275a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:22:99:e6:01:d1:92:97:cb:d2:c7:c9:0e:31:
                    ea:ce:83:61:a3:89:c0:5b:0f:98:c3:d1:ac:c6:45:
                    60:aa:a0:a8:69:09:9f:6b:c3:09:69:c1:76:1d:ab:
                    ba:1e:81:ae:65:ff:b9:5c:5f:d9:c0:b5:e3:2f:2a:
                    6c:c3:9f:0e:d5:45:9a:87:5e:3c:7f:1a:f6:5f:21:
                    4c:bf:dd:ee:7b:0a:f7:97:76:07:b2:8f:d3:ff:03:
                    fb:e2:ae:1e:d9:d3:26:49:58:96:a3:f3:5b:0c:1e:
                    fc:46:48:22:4d:99:8b:fb:7e:78:33:da:1c:6d:4f:
                    aa:17:3b:fa:89:1d:ae:fe:6a:b8:c8:9f:3a:d6:fc:
                    94:5c:72:1b:6a:ea:01:68:d3:07:0f:74:fc:44:c4:
                    bb:6e:63:e4:2a:e9:a7:f6:e1:ca:93:93:51:d8:7c:
                    2f:47:11:67:1d:60:1d:f7:9f:29:71:a4:21:86:b1:
                    92:cc:ea:1f:13:8c:c2:21:31:6d:38:66:be:af:03:
                    d4:cd:3e:25:7f:0e:61:83:17:1a:5a:cf:a7:3a:6a:
                    a8:7f:e7:bd:75:86:cb:71:f8:f6:36:c5:60:f1:4b:
                    3b:a6:0b:90:3e:26:2d:2f:4c:0f:b7:f3:5f:9f:e5:
                    90:61:0b:cf:52:0e:88:60:e4:e5:c1:79:8e:e9:ab:
                    81:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C2:0B:71:6A:5F:D1:BE:B5:4A:1A:4A:8B:4A:17:1A:92:36:BF:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ae43273c-3272-3c44-8061-d922ad832252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:85:b2:fa:23:f3:32:05:5b:28:bc:9b:27:ba:49:09:00:7b:
         5f:4b:c0:30:c3:2e:f1:32:d5:24:26:22:84:44:e7:f7:30:cc:
         e8:86:e7:25:2a:11:b7:51:6d:fb:a4:17:23:c5:00:7e:81:d5:
         45:e3:37:bf:7b:ea:8e:2b:fb:d4:2d:2d:e3:f4:47:f0:b0:74:
         81:1f:f0:e8:90:85:89:9f:09:a7:4c:d8:fc:3f:ce:02:30:c1:
         38:23:e6:c3:68:45:c6:63:fb:9b:37:dd:8a:e5:81:2c:6b:24:
         85:ff:3f:62:ef:c1:38:d5:0d:51:01:a4:0e:9b:ec:b9:0e:2f:
         48:25:4a:80:ff:fd:73:08:74:55:c0:e4:2d:b6:40:80:02:83:
         ef:11:60:6d:7a:d7:1b:8f:68:7d:19:63:63:a4:2d:69:a6:5c:
         84:c9:de:64:8c:71:a6:35:67:4a:fb:65:d6:3c:15:e3:6f:75:
         83:67:84:27:d4:d3:8c:19:70:87:69:47:14:bb:1b:1e:2c:08:
         d3:0e:24:49:1b:99:b8:2a:48:88:80:dd:22:e5:e1:87:e5:67:
         50:40:91:fb:c0:3c:8b:1d:76:f9:e6:9e:4c:af:04:c0:b2:98:
         8e:f8:98:f2:47:cf:3e:5d:c3:73:1f:87:c8:2b:c0:bd:40:74:
         a1:ee:75:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:52:46 2026 by rpki-client