Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6e71f7f6-1874-3623-9d1c-fe8383f37047.roa
File:                     6e71f7f6-1874-3623-9d1c-fe8383f37047.roa (raw, json)
Hash identifier:          Sj97W+Ykkav+4oB9QK49LhEm2YwgyVZQdcTrjzI7N98=
Subject key identifier:   DC:25:F9:01:35:8D:70:4B:6E:34:8B:C3:F9:25:6F:37:E1:50:DE:01
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584D6C0FAF9BD8684555C7FE2880
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6e71f7f6-1874-3623-9d1c-fe8383f37047.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     19437
IP address blocks:        104.254.236.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:af:9b:d8:68:45:55:c7:fe:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=efce2e1f-483c-4197-861e-f9479fe74cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e9:b0:fd:65:37:2d:af:29:29:fe:95:f3:67:
                    7a:06:20:bb:73:c5:75:9b:26:78:15:d6:b4:6f:e6:
                    89:35:83:ee:eb:3e:90:3c:64:63:8f:94:db:b8:df:
                    5c:4f:b6:bc:85:8c:6c:db:7b:d9:28:1e:87:c0:af:
                    dc:49:ab:d3:a5:1f:c7:92:df:9f:09:5f:eb:9f:aa:
                    a5:7a:53:fd:6e:33:cf:ad:0f:16:e6:32:93:4a:e5:
                    72:f7:6b:b0:f7:08:96:fe:42:53:e9:5e:87:69:64:
                    f7:1d:33:8b:19:47:1f:84:38:1f:41:60:ae:48:13:
                    68:a9:c4:92:ac:37:51:9f:5a:3e:5a:15:d1:39:41:
                    e7:af:46:a5:f3:2b:94:87:33:82:fe:9e:6a:dd:40:
                    61:d5:c2:ca:fc:b0:08:82:7f:a4:85:63:ab:22:e4:
                    d8:3c:b6:39:10:df:84:c3:13:41:a6:fd:3a:fd:87:
                    28:4d:51:30:58:02:5d:96:72:6e:82:04:03:3a:b7:
                    78:56:08:03:f3:1a:58:a7:f7:fa:72:f4:f6:a6:ac:
                    94:69:94:6a:b4:9d:e1:81:6d:0a:84:df:67:27:60:
                    20:83:b7:29:68:e3:25:16:ba:c0:bb:df:02:a4:ee:
                    49:d9:c3:00:4e:98:f3:ad:47:e0:58:29:19:d8:e1:
                    a6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:25:F9:01:35:8D:70:4B:6E:34:8B:C3:F9:25:6F:37:E1:50:DE:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6e71f7f6-1874-3623-9d1c-fe8383f37047.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:ae:d6:92:57:91:95:41:c4:16:67:4d:4d:4a:d0:2a:e9:ad:
         ab:db:6d:c3:40:3f:7e:e3:75:b2:3c:0f:c4:59:ea:4f:e6:22:
         c2:4b:d8:16:11:05:05:1d:6f:ea:7e:58:fd:02:e9:32:09:cd:
         63:23:6d:76:06:ab:09:a5:6f:87:9c:4f:f6:2a:5a:b6:87:e7:
         a8:0d:2b:5d:60:a0:c7:8e:9b:8c:e2:1c:6b:71:15:dc:06:46:
         92:b2:e8:11:f7:78:a1:8d:93:a7:d0:eb:3c:4a:d8:20:36:8d:
         6c:98:4c:4c:d9:55:fb:c0:9f:8e:73:40:91:cf:72:13:b7:3d:
         d7:66:08:c7:97:ed:1b:ef:e2:cb:9f:74:80:ac:2c:95:2b:b6:
         a5:2b:27:a9:07:17:56:61:b8:07:fd:db:11:0c:5f:52:73:cb:
         4a:d9:ff:c2:52:86:f9:e0:fa:8a:fc:a6:98:26:5e:64:50:88:
         2e:9a:1e:af:67:05:53:c6:ec:c7:00:e9:c0:2b:4a:fa:f0:7a:
         aa:36:a3:34:8c:26:8c:6f:84:b8:bc:ae:1f:cf:71:c0:0e:9a:
         bc:45:06:f2:7f:53:28:b1:85:b8:96:95:29:ad:45:c2:0b:b5:
         c3:bf:2f:0c:89:c2:37:79:bb:63:78:9f:88:6b:eb:29:90:86:
         6c:2f:c7:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD6+b2GhFVcf+KIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk
ZWZjZTJlMWYtNDgzYy00MTk3LTg2MWUtZjk0NzlmZTc0Y2I2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlemw/WU3La8pKf6V82d6BiC7c8V1myZ4Fda0
b+aJNYPu6z6QPGRjj5TbuN9cT7a8hYxs23vZKB6HwK/cSavTpR/Hkt+fCV/rn6ql
elP9bjPPrQ8W5jKTSuVy92uw9wiW/kJT6V6HaWT3HTOLGUcfhDgfQWCuSBNoqcSS
rDdRn1o+WhXROUHnr0al8yuUhzOC/p5q3UBh1cLK/LAIgn+khWOrIuTYPLY5EN+E
wxNBpv06/YcoTVEwWAJdlnJuggQDOrd4VggD8xpYp/f6cvT2pqyUaZRqtJ3hgW0K
hN9nJ2Agg7cpaOMlFrrAu98CpO5J2cMATpjzrUfgWCkZ2OGmXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNwl+QE1jXBLbjSLw/klbzfhUN4BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNmU3MWY3ZjYtMTg3NC0z
NjIzLTlkMWMtZmU4MzgzZjM3MDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP7sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGyu1pJXkZVBxBZnTU1K0CrpravbbcNAP37jdbI8D8RZ6k/mIsJL2BYR
BQUdb+p+WP0C6TIJzWMjbXYGqwmlb4ecT/YqWraH56gNK11goMeOm4ziHGtxFdwG
RpKy6BH3eKGNk6fQ6zxK2CA2jWyYTEzZVfvAn45zQJHPchO3PddmCMeX7Rvv4suf
dICsLJUrtqUrJ6kHF1ZhuAf92xEMX1Jzy0rZ/8JShvng+or8ppgmXmRQiC6aHq9n
BVPG7McA6cArSvrweqo2ozSMJoxvhLi8rh/PccAOmrxFBvJ/UyixhbiWlSmtRcIL
tcO/LwyJwjd5u2N4n4hr6ymQhmwvx4s=
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:18:36 2026 by rpki-client