Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5a427fe7-45e2-38c6-9b94-3c92bbe312ee.roa
File:                     5a427fe7-45e2-38c6-9b94-3c92bbe312ee.roa (raw, json)
Hash identifier:          GSjDB18DZqXdpUTb9BbMpYZ/i4p5TGt7FTa/7aS2Q9s=
Subject key identifier:   7B:60:DF:2D:75:4E:40:CA:22:54:4E:C2:E4:D2:84:8A:F1:00:38:09
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584F497C9F084ABCCB2A7AD77490
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5a427fe7-45e2-38c6-9b94-3c92bbe312ee.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        104.134.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:9f:08:4a:bc:cb:2a:7a:d7:74:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=39b797f6-63da-48ed-ac7e-ab0da03a7d15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b0:e7:4c:e8:4a:d4:4b:43:b2:0e:43:ed:2b:
                    ca:83:33:a2:f3:68:f3:fc:c0:23:e8:ac:7c:24:5e:
                    df:43:d0:83:71:6a:6c:25:6d:44:c3:42:3e:29:51:
                    75:2f:ea:d5:90:0b:91:98:57:6d:85:53:38:75:25:
                    2e:55:88:1d:82:3f:b4:69:43:02:30:3f:32:fe:2f:
                    bd:e3:f7:4d:c3:70:6f:5e:8e:7b:3e:b9:8a:8b:0c:
                    76:b3:52:05:2e:82:4e:75:25:9b:25:3e:af:8e:8a:
                    0c:1a:34:95:b3:e1:47:bf:16:f0:2e:27:1a:1a:ce:
                    b7:96:d2:c7:50:5c:71:e8:44:31:07:5f:9b:dc:dc:
                    ce:94:c6:da:64:72:dd:a0:5d:08:18:1d:6d:a8:ff:
                    60:61:5e:18:02:c1:ff:f6:76:f6:f4:c4:f3:fb:ff:
                    7f:4f:47:bb:08:74:47:a4:21:ca:c6:46:ff:05:4f:
                    ea:f8:d1:c8:4e:cd:f0:a0:65:d5:7a:e7:53:af:fe:
                    bc:76:b1:e1:52:b8:fb:7a:44:bb:40:16:64:20:9d:
                    06:3e:ac:31:0a:98:e0:ef:5f:f7:96:99:fc:10:6b:
                    5c:45:23:7f:3b:bd:52:44:33:e3:4a:18:36:1d:d2:
                    44:06:e7:75:91:01:03:f9:84:60:3b:f6:f9:61:9e:
                    f3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:60:DF:2D:75:4E:40:CA:22:54:4E:C2:E4:D2:84:8A:F1:00:38:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5a427fe7-45e2-38c6-9b94-3c92bbe312ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:63:0c:94:a9:e1:47:85:57:53:dc:7e:51:1c:9c:20:4a:e6:
         e9:a6:5a:a5:f5:92:56:08:5b:40:6e:af:e9:64:f6:a7:96:25:
         db:78:66:3e:4a:bf:8d:c2:fd:e4:67:8c:6a:c8:68:46:34:8b:
         fd:57:d5:92:d6:a3:e2:cb:be:92:f6:52:44:c3:b9:b2:5e:e9:
         18:eb:8a:7c:2a:4e:92:55:d6:78:68:73:94:95:63:30:6c:aa:
         18:c3:c2:86:cb:d2:0f:ad:41:ed:9d:1d:b6:60:77:b7:18:62:
         7f:50:e1:c2:e8:e9:e0:de:34:d3:24:e5:38:d3:27:3f:40:bc:
         ac:a8:b7:ab:f6:e8:0a:9d:f0:55:30:99:a8:cb:c9:9a:49:fa:
         81:e4:57:16:2d:f6:d6:35:cd:5a:7f:99:a1:46:2d:d1:e2:3c:
         29:2e:16:8e:ed:e0:e2:99:4c:1c:68:5e:94:7b:70:c1:72:4b:
         c8:70:99:6d:3f:1f:f4:d7:35:cf:f9:12:50:9b:ae:7e:98:6d:
         5b:4e:e4:30:d7:89:98:91:2f:d5:57:35:1e:d4:fe:86:c0:00:
         48:3c:3b:37:03:1c:04:5d:5a:d1:92:dd:62:79:72:b0:95:3a:
         44:77:42:c9:6a:57:0c:e1:5f:6f:31:e1:8d:a1:0d:ae:61:ae:
         09:44:3d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:09:33 2026 by rpki-client