Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1bb58749-ba43-3679-b52d-df22c5320431.roa
File:                     1bb58749-ba43-3679-b52d-df22c5320431.roa (raw, json)
Hash identifier:          qtjQllc2uG89lwVshQ/8j9Yd1RpfSRO8QzGKUBXHLMU=
Subject key identifier:   4D:DA:39:3C:4E:06:98:BA:74:0F:E1:71:1C:BE:24:E7:F9:3B:7C:87
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584F497C70AFE1D7704D243D2900
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1bb58749-ba43-3679-b52d-df22c5320431.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     41264
IP address blocks:        104.132.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:70:af:e1:d7:70:4d:24:3d:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ba36759b-8195-4176-be16-d2c8cb895aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1f:9f:6f:e1:02:b3:6c:a0:18:b0:94:1c:51:
                    c3:79:b6:9e:7b:71:ec:d6:b2:1c:6a:6c:cf:c8:b9:
                    2d:58:45:e5:63:c1:fd:45:3f:65:d2:da:42:07:2d:
                    47:b3:44:7b:85:99:53:0d:75:07:38:d8:09:9f:c1:
                    1c:75:71:a5:bc:1a:8c:a2:19:8d:ed:5d:37:79:6d:
                    34:ec:63:16:d5:59:a0:59:d9:2b:c9:18:e9:bf:24:
                    b4:bd:d7:53:4e:2e:63:62:a6:95:6f:e4:c1:b6:ae:
                    43:b7:1c:d1:d8:74:b4:31:48:2d:fb:68:1f:4d:12:
                    f9:c5:94:63:3b:60:b2:bf:44:c4:e3:89:86:f9:b4:
                    1a:18:01:b7:63:05:6d:8b:d9:14:dd:28:06:76:5e:
                    e4:9f:03:a0:ea:6e:b0:39:63:fa:4b:ef:02:ad:f8:
                    0f:9e:2e:a4:c9:9f:84:a6:8d:c7:c1:5a:e0:74:8e:
                    9f:6a:e1:54:dd:e0:c2:0f:2a:39:b2:f7:a4:70:e6:
                    fe:87:64:fa:90:56:13:ba:44:a0:05:c6:f5:74:43:
                    a0:45:ea:e8:ba:55:73:d6:d5:3a:5d:f3:32:89:68:
                    60:fb:7a:e5:55:ab:92:41:f8:bb:69:3b:e9:be:09:
                    66:75:c2:45:44:25:1b:ab:74:f5:23:1b:9c:cc:44:
                    96:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:DA:39:3C:4E:06:98:BA:74:0F:E1:71:1C:BE:24:E7:F9:3B:7C:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1bb58749-ba43-3679-b52d-df22c5320431.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:f9:7a:fb:73:4d:2b:65:5a:17:21:62:e1:b8:84:fa:7e:5d:
         c8:ff:a4:66:49:d5:40:23:04:d0:8c:b4:5b:69:c9:d5:af:f5:
         df:99:f9:0e:11:4d:29:2b:41:36:3a:fe:67:0a:d8:10:8a:be:
         8f:db:57:25:c7:a3:9c:10:94:15:ed:df:66:72:ee:21:78:bf:
         f9:2c:ba:cb:1b:dd:d1:b2:37:65:4d:c8:24:c8:f1:b4:21:04:
         c4:ec:a5:56:f5:1c:11:59:8f:0d:10:59:ca:03:0c:f1:bb:df:
         1b:1f:68:5a:48:82:a4:c9:60:a9:9a:99:5e:51:9a:fc:ed:99:
         4e:ac:4d:3d:3c:d1:3e:68:e1:55:81:95:8e:d7:42:d9:ca:c2:
         79:f5:9c:2b:2f:87:0a:4d:a2:40:60:3b:f5:98:22:c8:bf:8e:
         06:e5:1a:86:fc:4c:4d:74:80:38:22:8f:e4:11:45:92:38:90:
         fd:4e:b1:ea:b1:c8:38:64:b0:4b:a8:b4:4a:70:ab:e9:00:22:
         1c:cc:40:af:03:10:3a:5c:7f:1f:a6:03:8a:01:e5:00:4c:e9:
         a6:2d:92:62:e4:20:20:04:27:77:63:72:b8:6f:5f:fe:4b:a9:
         5c:1f:97:01:78:e3:10:26:2f:11:2b:54:9c:6a:7c:85:fc:10:
         cf:01:46:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfHCv4ddwTSQ9KQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YmEzNjc1OWItODE5NS00MTc2LWJlMTYtZDJjOGNiODk1YWE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx+fb+ECs2ygGLCUHFHDebaee3Hs1rIcamzP
yLktWEXlY8H9RT9l0tpCBy1Hs0R7hZlTDXUHONgJn8EcdXGlvBqMohmN7V03eW00
7GMW1VmgWdkryRjpvyS0vddTTi5jYqaVb+TBtq5DtxzR2HS0MUgt+2gfTRL5xZRj
O2Cyv0TE44mG+bQaGAG3YwVti9kU3SgGdl7knwOg6m6wOWP6S+8CrfgPni6kyZ+E
po3HwVrgdI6fauFU3eDCDyo5svekcOb+h2T6kFYTukSgBcb1dEOgReroulVz1tU6
XfMyiWhg+3rlVauSQfi7aTvpvglmdcJFRCUbq3T1IxuczESWGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE3aOTxOBpi6dA/hcRy+JOf5O3yHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMWJiNTg3NDktYmE0My0z
Njc5LWI1MmQtZGYyMmM1MzIwNDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALP5evtzTStlWhchYuG4hPp+Xcj/pGZJ1UAjBNCMtFtpydWv9d+Z+Q4R
TSkrQTY6/mcK2BCKvo/bVyXHo5wQlBXt32Zy7iF4v/ksussb3dGyN2VNyCTI8bQh
BMTspVb1HBFZjw0QWcoDDPG73xsfaFpIgqTJYKmamV5RmvztmU6sTT080T5o4VWB
lY7XQtnKwnn1nCsvhwpNokBgO/WYIsi/jgblGob8TE10gDgij+QRRZI4kP1Oseqx
yDhksEuotEpwq+kAIhzMQK8DEDpcfx+mA4oB5QBM6aYtkmLkICAEJ3djcrhvX/5L
qVwflwF44xAmLxErVJxqfIX8EM8BRlE=
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:16:19 2026 by rpki-client