Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2b833caa-5cfa-3031-9461-2d71cb837600.roa
File:                     2b833caa-5cfa-3031-9461-2d71cb837600.roa (raw, json)
Hash identifier:          RzbV7LmDZH1Kcht6ZjPD9WCUJ2YN5sEZaq98bQlRhlc=
Subject key identifier:   86:10:B8:81:C7:54:19:52:8D:4C:34:09:A6:2C:CD:9D:4C:B4:24:AB
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584F498488A2B10873456F086640
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2b833caa-5cfa-3031-9461-2d71cb837600.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     41264
IP address blocks:        104.132.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:88:a2:b1:08:73:45:6f:08:66:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=536a57b0-7242-43f6-96b1-1152e6d40f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ee:70:82:00:dc:ae:29:4d:95:ff:a7:e3:63:
                    0c:2e:07:a3:19:c0:ef:4c:55:ec:48:52:9f:eb:4a:
                    34:f6:ca:ab:05:7b:cd:76:50:9b:21:31:f6:a0:2c:
                    3c:5e:92:71:4d:0e:67:6b:3f:a0:4e:e4:d5:c8:a2:
                    93:e5:2f:69:71:c2:22:76:7a:4a:cb:2a:4a:80:1e:
                    c1:d5:b3:50:5b:b2:4d:00:3c:22:3a:e8:40:4b:ab:
                    9f:10:dd:df:86:49:3a:33:1a:aa:fa:6b:2b:39:1b:
                    74:de:69:c1:d5:3e:91:e9:ea:6d:c4:0d:85:b9:c4:
                    bb:73:9f:b7:14:0b:29:f3:8d:60:30:f5:d9:93:b7:
                    b2:a9:18:96:0f:50:70:a7:a4:00:83:37:74:0e:e0:
                    23:19:73:17:7e:18:60:15:23:72:e3:2a:dd:5b:88:
                    f8:f9:7f:6a:56:4b:30:58:ff:80:34:ed:c8:0e:4d:
                    82:df:4b:20:bf:14:f7:10:b9:ff:07:c9:13:74:47:
                    a1:55:4a:25:ee:33:c6:40:7b:a6:90:08:0d:c4:56:
                    57:a4:ea:38:92:93:37:82:67:d0:cc:59:5e:cf:55:
                    c2:f9:21:ad:8a:6e:44:0e:eb:f7:10:c4:d0:71:8b:
                    d2:c8:ed:2c:a9:c4:17:68:7a:80:af:3f:3f:ef:e5:
                    a3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:10:B8:81:C7:54:19:52:8D:4C:34:09:A6:2C:CD:9D:4C:B4:24:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2b833caa-5cfa-3031-9461-2d71cb837600.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:94:19:8b:56:33:20:e4:e7:e5:fd:30:ec:b3:37:ba:ae:c5:
         62:ee:8f:88:c2:8f:20:00:52:dd:72:31:fc:77:c5:c2:e2:95:
         f6:9c:30:43:68:99:17:f4:21:ba:82:0d:59:34:63:69:59:95:
         94:c7:bc:a6:e6:2e:a4:ba:d1:aa:f7:3b:01:e6:01:34:17:5c:
         ab:51:f4:eb:0b:49:64:46:5e:4c:21:3b:70:45:ec:5d:95:b3:
         a7:90:be:f1:8b:0b:ad:29:d6:90:b2:c8:34:4d:d2:69:c0:c8:
         f1:90:1e:1a:c5:02:6d:ef:f3:00:fc:8f:c2:35:3e:f7:61:63:
         44:39:b8:9b:42:e1:ee:74:42:43:fb:ed:11:0b:57:93:a8:47:
         47:4c:38:d0:08:93:dc:f6:d2:13:92:93:a8:08:31:61:dd:94:
         63:19:28:d9:05:5f:e6:a7:7d:ee:a0:79:13:9a:c7:df:a3:da:
         86:7b:68:1a:e9:44:73:6d:86:c6:b7:9e:69:45:07:06:dd:64:
         b1:7e:3a:c1:5b:d6:f3:50:90:49:10:83:61:40:96:26:ff:f3:
         e6:e1:e3:6d:e4:1a:87:4e:69:e7:0c:10:ab:98:bb:7e:61:53:
         22:1d:a2:79:d9:bd:f9:a3:cc:c0:ab:98:19:8b:99:dc:97:b6:
         a9:26:e0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:23:34 2026 by rpki-client