Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3efdde3c-4fc1-310f-a14a-fcd818d1adbd.roa
File:                     3efdde3c-4fc1-310f-a14a-fcd818d1adbd.roa (raw, json)
Hash identifier:          eZTlRjSzexjBLiE+K76yZyHqXSe7kP3JCXu+/NGCZqk=
Subject key identifier:   5A:A5:07:77:A2:81:48:D6:4C:9E:0F:91:14:8D:E3:EF:57:FF:AC:C6
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584F497C94DA69452197655DFD00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3efdde3c-4fc1-310f-a14a-fcd818d1adbd.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        104.134.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:94:da:69:45:21:97:65:5d:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e0d160c8-4e76-4dea-a9ee-881a23004604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c4:7d:2c:c0:c3:95:ad:35:36:e6:bf:0b:83:
                    5e:a7:12:0a:af:32:c4:cb:7d:80:46:35:97:2d:8d:
                    0e:7f:62:29:1c:2d:e1:87:8d:d9:58:d2:8c:5f:6a:
                    a5:0b:db:8e:24:e6:eb:97:1f:63:0c:ee:e4:db:c9:
                    8c:cb:19:44:a7:80:cc:cf:7a:6d:7a:e4:46:78:5d:
                    80:ec:dc:21:d8:75:ca:df:7c:03:4f:61:44:43:10:
                    3d:c6:90:29:3a:4d:6f:41:3b:f2:9c:fe:6f:8e:e8:
                    1a:21:96:ab:45:86:7c:14:d1:c2:1b:ca:43:75:21:
                    31:28:b7:e9:a0:17:17:78:95:dc:5c:6e:e4:0b:f8:
                    98:6a:1d:32:2a:54:68:9f:25:7a:c7:27:d9:20:7c:
                    13:0e:19:e8:c7:bd:e0:f0:78:b0:0e:9b:a2:95:38:
                    41:b9:7d:d4:b1:d9:8f:ca:25:4a:2e:0d:2e:6e:96:
                    62:45:c0:e4:61:a6:a6:a3:18:5c:6d:8b:33:56:c6:
                    72:dd:ea:32:d8:8d:5d:97:72:07:f0:56:82:f6:48:
                    28:b4:cc:6e:93:48:99:f0:49:de:60:91:be:5b:5a:
                    56:f6:e5:47:90:86:ce:5b:80:65:c3:7b:93:da:dc:
                    2b:ba:a0:17:62:43:c1:b1:4f:49:5a:81:d6:3b:93:
                    a2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A5:07:77:A2:81:48:D6:4C:9E:0F:91:14:8D:E3:EF:57:FF:AC:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3efdde3c-4fc1-310f-a14a-fcd818d1adbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:43:c5:43:64:58:d8:2a:27:24:44:d3:31:4f:1e:ce:7f:8a:
         07:13:57:6e:5e:4d:b0:47:07:5b:11:9c:b3:f6:7a:1f:4f:2a:
         ae:71:86:dc:f9:ef:63:f1:07:77:e4:b9:0a:0b:4e:2c:40:72:
         91:41:cf:80:25:1d:f0:3e:c7:ed:d0:c2:ba:a8:88:b0:ad:f3:
         67:fb:a8:61:37:85:78:9d:60:ea:74:ec:de:e6:6c:83:9c:0a:
         b4:e8:cb:23:0a:33:49:f5:80:51:b6:64:42:36:52:ed:8c:c3:
         1a:a1:95:06:32:96:c9:ef:e3:3d:e5:dd:83:86:21:cc:a9:27:
         31:69:94:b0:d7:ea:9f:d5:cb:f3:cd:ae:c8:12:00:af:01:a5:
         ae:20:25:ca:d6:19:31:38:af:4b:e1:02:ac:41:dc:7f:7c:bf:
         83:89:89:bb:d9:9f:bd:fc:d3:63:33:6c:a1:31:85:12:be:00:
         56:f2:ce:39:e7:02:ce:d7:9b:c0:c2:db:ed:cc:c9:b2:de:f0:
         ab:62:c8:af:5e:11:30:49:29:b5:26:93:ec:cb:5f:f8:8d:6c:
         10:c5:13:c3:a2:e9:21:12:9c:e7:71:7f:20:7f:c3:66:de:8e:
         ec:65:01:89:86:60:dd:c2:d1:e4:3d:9e:7b:24:17:1f:69:09:
         fc:76:72:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:04:14 2026 by rpki-client