Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/06d6faa0-7be4-3e9f-8bf9-606c40bd73f7.roa
File:                     06d6faa0-7be4-3e9f-8bf9-606c40bd73f7.roa (raw, json)
Hash identifier:          Hj60OrwlJszFvuAQtGf7IRRNFxgjN92G8CZBgp6UAIU=
Subject key identifier:   65:74:AF:7C:8B:F2:93:58:19:8F:AD:F9:01:41:9C:EF:1A:E7:AA:C0
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584F497CABB440E0333B9ED80480
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/06d6faa0-7be4-3e9f-8bf9-606c40bd73f7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     395973
IP address blocks:        104.134.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:ab:b4:40:e0:33:3b:9e:d8:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=79d87a9a-3b05-4c39-b510-f918ae72d2c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c3:34:ec:c3:ca:15:f7:17:8c:00:57:29:eb:
                    3d:94:db:62:ad:53:62:c1:5d:76:5a:af:64:34:32:
                    c3:a2:5a:0d:e8:32:69:2d:68:99:56:a5:9f:98:67:
                    29:6a:3a:00:d5:2f:d3:3d:80:ba:bb:5e:fc:dc:2f:
                    25:1c:fd:32:28:99:94:67:95:90:72:14:fd:cc:be:
                    dd:2b:62:bc:17:0c:6b:8c:ee:ef:bf:42:f3:16:66:
                    28:31:cb:89:d5:73:80:c4:eb:d6:55:75:d0:5c:8d:
                    91:f9:e2:1c:20:83:aa:70:ea:3d:a1:74:0f:42:f4:
                    17:31:2e:66:5e:f9:3e:d2:8c:3c:9a:87:84:05:9f:
                    37:e3:c9:42:73:31:36:30:be:b3:1b:92:8a:2b:a3:
                    35:12:d0:27:3e:04:61:b6:0f:0a:32:9e:16:5f:ae:
                    a7:61:c2:c3:36:28:32:30:c0:9e:a4:00:5b:57:4d:
                    d1:40:bf:53:9b:d9:5d:c8:5c:e4:e9:6a:05:f8:15:
                    93:4d:3d:8d:bd:3b:eb:2b:f0:99:97:50:6c:65:21:
                    6d:d4:db:6b:79:a4:6e:93:85:2e:3b:20:d2:aa:b7:
                    4a:8a:2f:4a:cc:31:aa:67:cc:26:67:4f:8a:06:d4:
                    60:80:4f:0b:80:7a:3f:fc:d1:cd:e4:47:ad:a7:60:
                    63:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:74:AF:7C:8B:F2:93:58:19:8F:AD:F9:01:41:9C:EF:1A:E7:AA:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/06d6faa0-7be4-3e9f-8bf9-606c40bd73f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:45:16:13:16:11:39:86:c1:9f:96:f8:04:67:11:1a:43:36:
         55:50:1c:71:ed:b2:77:fd:d4:f4:8c:35:c7:25:15:37:e2:9f:
         af:7a:43:59:92:38:7f:21:7a:1d:b0:8b:33:f9:73:b6:d8:df:
         65:30:f4:be:c8:ec:f6:0c:c7:da:e5:64:e5:7c:a4:75:a3:3f:
         6b:d1:40:1d:7d:de:cf:d1:9f:0e:de:8f:f8:60:98:6c:40:7c:
         81:1c:47:22:a9:4c:dd:29:37:79:22:ef:b5:1d:ed:2a:0e:14:
         93:17:9d:f0:5a:7b:d8:a2:f5:ef:0a:56:f4:96:c4:e5:08:b1:
         a6:77:c3:53:36:23:61:e6:1c:1a:66:25:09:d8:a0:9e:ab:9b:
         da:3d:e6:a8:4c:6f:1f:47:d3:d1:86:19:d6:d7:d1:02:51:3a:
         84:08:ef:f9:bf:ed:f2:37:f1:15:a0:28:0f:e2:f6:61:2d:b7:
         6a:f8:c5:7a:bb:21:10:9b:39:39:e0:1c:b3:b5:f4:dc:cc:12:
         42:6d:ba:64:ba:07:c9:8e:13:b2:87:de:2c:23:a9:b6:3c:ef:
         b8:64:f6:77:87:c2:0b:ce:a4:b2:9c:e7:72:b8:44:4f:fc:f2:
         a9:50:f6:c6:10:15:93:18:ad:7e:8f:5b:0d:1f:61:c2:fc:a7:
         35:bc:e1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:02:11 2026 by rpki-client