Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/30bec6c7-921a-30e3-ad65-03b4098f34f4.roa
File:                     30bec6c7-921a-30e3-ad65-03b4098f34f4.roa (raw, json)
Hash identifier:          UyvN19Tn+kM3KdTx0fNhVIvGhs/sk89Af0/w3lgIMOQ=
Subject key identifier:   7E:C5:01:30:B2:07:F8:35:B6:1A:6F:C2:DB:48:3C:EF:B2:ED:04:DA
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584F4984919E4F820196BCED5D80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/30bec6c7-921a-30e3-ad65-03b4098f34f4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     41264
IP address blocks:        104.132.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:91:9e:4f:82:01:96:bc:ed:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f1baea37-b250-429c-ab60-0b6ddcf1d159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:71:51:4b:3d:43:88:87:7b:30:cc:e0:eb:e6:
                    60:3f:3a:74:26:43:dd:65:d6:6e:3d:ff:18:e4:7b:
                    68:54:ef:e8:b3:2a:4a:67:49:1c:b4:ef:24:24:ab:
                    65:5a:5c:be:d9:a3:34:20:27:f6:6b:73:1a:7a:49:
                    0c:81:c7:1c:1c:b3:0c:a1:76:bc:a6:71:3f:c3:d3:
                    f4:61:84:22:c5:db:2d:29:1c:b9:3c:3d:f2:1f:92:
                    98:20:99:b0:18:73:95:15:76:96:f0:7f:24:ef:84:
                    b2:5f:9c:02:99:cd:ba:df:6b:84:fd:5d:27:e8:5d:
                    11:39:53:ea:6d:26:db:6d:3d:2e:3d:63:56:e2:8a:
                    78:53:dc:45:5e:09:a9:8a:a2:fe:75:87:0a:b3:c8:
                    c5:bf:c2:53:04:59:41:7c:08:29:5b:66:b6:fe:c3:
                    84:28:61:86:e8:20:ad:46:08:13:a6:53:00:fd:61:
                    5a:28:86:82:29:1b:2b:7d:10:b6:d7:02:2b:f8:12:
                    db:40:34:72:2a:a7:08:92:e6:8f:75:f8:35:a4:89:
                    5b:5f:5d:3c:66:30:6e:75:e4:43:b0:8d:5f:a0:f5:
                    2b:72:fb:f4:54:79:a8:ea:e0:2e:7b:8a:48:37:0e:
                    2f:55:d1:92:2c:44:70:3e:61:48:5b:a9:87:33:b0:
                    a1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C5:01:30:B2:07:F8:35:B6:1A:6F:C2:DB:48:3C:EF:B2:ED:04:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/30bec6c7-921a-30e3-ad65-03b4098f34f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:33:6a:83:d2:91:a9:ba:3e:0b:57:83:94:fd:25:80:be:a2:
         1d:25:2e:0e:0d:4f:b5:41:a8:34:9f:f3:1a:ce:78:25:b1:74:
         3f:d8:55:b0:45:32:f4:5e:3e:c6:03:19:54:7a:7d:4e:6d:09:
         d1:e9:49:24:df:b3:42:d3:a1:a7:d5:6e:4a:4f:e9:17:bf:a9:
         46:4d:29:7c:0c:bd:59:4d:f2:2e:6c:f4:84:67:4b:96:78:cc:
         f3:04:95:8b:df:e8:13:ad:82:b5:0e:9b:5e:7e:9b:96:60:fe:
         ef:6e:37:57:40:8c:5e:45:db:bc:9c:39:7a:11:cb:e0:c4:67:
         4a:df:22:4c:4d:af:aa:95:24:0c:2d:aa:85:90:ca:08:da:d2:
         92:6d:5d:ed:7c:d6:d8:92:45:17:a3:3e:1f:ef:fe:3f:b6:e0:
         45:d9:80:4c:9a:a4:a0:ac:0f:f4:13:4a:c0:6d:e8:0e:75:2f:
         ed:14:40:9d:7c:35:59:e9:c2:fc:78:fa:6e:84:90:d8:b6:c0:
         6a:3c:0a:24:18:03:96:7b:6c:5c:30:05:c3:ef:f5:1c:2d:25:
         3b:93:14:93:10:50:2a:26:3e:d2:09:00:e5:d7:a7:5e:bb:1d:
         82:30:f5:57:43:af:de:81:16:44:80:66:36:82:14:bc:62:7f:
         ee:ee:b0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:11:43 2026 by rpki-client