Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/291a0ab2-bb94-342b-9988-78abf1c8dfcc.roa
File:                     291a0ab2-bb94-342b-9988-78abf1c8dfcc.roa (raw, json)
Hash identifier:          7FltRk2XLOi7uGGTOkeuGTzCyXzRCuwzMg8ZIwuGJGc=
Subject key identifier:   4A:37:FA:16:0B:7C:05:80:49:0D:03:E4:B6:FB:5E:B0:16:B3:BE:F7
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584F497C64331EB2B3A21FFEB2C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/291a0ab2-bb94-342b-9988-78abf1c8dfcc.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     41264
IP address blocks:        104.132.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:64:33:1e:b2:b3:a2:1f:fe:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2e0287ae-99f1-4a39-b413-df5edab5d359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ad:90:47:0a:3c:22:df:9e:80:29:6b:fc:5b:
                    fd:20:a4:99:9a:cf:e1:70:75:cf:a3:a7:29:5f:bd:
                    1b:bc:03:eb:f5:fd:26:8d:a6:30:ec:7a:ff:b6:9f:
                    48:a8:5b:cb:53:1d:99:d2:dc:f0:5a:b6:2e:34:f0:
                    a6:8b:f7:03:2e:1f:43:af:2b:49:e7:b1:1d:5c:52:
                    8b:8d:e8:c9:d4:18:cb:90:a4:35:8f:1e:1f:fa:a2:
                    7a:e3:c0:cb:06:42:82:94:44:e1:25:5c:a0:da:2d:
                    af:f4:d6:df:4e:d9:7d:34:62:30:6b:51:5d:73:96:
                    47:c2:e6:16:bb:16:98:c7:e8:03:37:ce:0a:7f:90:
                    f1:20:67:1c:61:ac:17:aa:4d:1c:3b:e0:b3:b4:f9:
                    92:ff:58:1e:73:eb:d5:93:1c:26:24:5a:19:6c:97:
                    76:51:a7:90:20:16:c0:84:a4:24:22:05:70:59:2f:
                    15:e6:f8:51:56:f7:89:c6:78:33:46:54:26:c3:c2:
                    f8:56:81:8b:c1:ef:74:68:60:db:df:62:5b:b1:fa:
                    a5:36:47:b7:d7:ee:ed:80:b0:b2:4d:6d:1d:cb:4c:
                    e2:65:57:6c:18:62:63:b1:f3:27:49:0c:5b:f7:a8:
                    56:d1:86:d3:ec:b4:49:87:cf:a8:b6:1a:c5:e6:a2:
                    22:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:37:FA:16:0B:7C:05:80:49:0D:03:E4:B6:FB:5E:B0:16:B3:BE:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/291a0ab2-bb94-342b-9988-78abf1c8dfcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:4f:d5:71:35:2e:2c:7c:b2:9f:8a:44:46:08:e2:3c:8a:30:
         86:b7:f2:39:01:d7:a6:e3:24:ac:5f:76:87:88:ad:31:b8:50:
         fe:69:1c:33:91:78:16:e0:d3:be:74:e4:51:a4:65:29:c4:b8:
         ee:cc:26:66:88:48:0a:3b:43:b8:a2:cd:f0:66:6e:f5:2f:59:
         97:87:85:53:f4:a0:87:19:14:a7:a6:8d:c5:58:d5:25:89:dc:
         03:2a:ad:5d:f8:37:be:c2:08:86:9e:6c:05:7e:6a:b3:60:16:
         84:8a:bd:09:9a:e5:19:55:da:18:61:18:24:a2:c1:61:6a:aa:
         bf:52:d9:29:a5:ff:65:c4:55:36:5f:7a:14:e1:dc:b0:bd:75:
         ad:35:36:50:09:e3:16:5e:ba:c8:1c:c1:b5:94:d5:4b:45:71:
         dc:28:61:a7:cd:e3:1d:7e:45:a9:6f:02:ba:c0:d8:14:9c:81:
         af:93:8a:08:f7:48:6d:85:8f:02:f8:00:24:09:a3:4d:ef:35:
         e3:03:88:0c:6d:ac:e7:01:cc:4e:7e:26:69:05:16:cc:c0:ef:
         59:ac:e7:9d:93:3d:1f:40:46:d0:fc:4c:d2:49:de:af:76:60:
         0e:2f:0c:ac:20:89:69:b1:41:23:c0:65:7b:0a:d3:8f:0f:eb:
         f2:9f:46:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:47:42 2026 by rpki-client