Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/81f9e063-f092-3f18-8c69-39439fff7771.roa
File:                     81f9e063-f092-3f18-8c69-39439fff7771.roa (raw, json)
Hash identifier:          xzbdm0Fvr94bwJwK8eMnj79k+MPBzg4q1+Rj8kdvMuU=
Subject key identifier:   92:27:38:AF:7E:C8:46:71:E6:84:85:56:4B:DF:64:9E:BA:A7:75:EA
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584F4984DFAB07F61F1A7819D270
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/81f9e063-f092-3f18-8c69-39439fff7771.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     395973
IP address blocks:        104.134.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:df:ab:07:f6:1f:1a:78:19:d2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b22e679b-bd8a-4619-be99-cd61d2a9dbe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:48:34:13:24:54:91:f3:85:62:a3:e4:10:85:
                    3e:d5:f1:66:4f:a8:e6:17:dc:59:7e:15:30:0d:d0:
                    72:55:37:37:4e:12:47:c9:f5:be:45:82:23:1a:b7:
                    1f:28:59:9c:2e:cf:65:3b:35:44:01:98:1d:2b:1b:
                    f7:dc:cc:11:f6:04:55:97:d9:c2:a6:bf:f3:d9:a8:
                    e5:f9:cc:b4:cf:29:dc:70:52:b0:1c:9a:78:96:ae:
                    16:1d:5d:56:a4:93:f3:74:18:ee:d4:b7:a3:78:77:
                    e3:58:be:92:2e:50:2d:40:54:67:41:6f:e1:f6:d0:
                    69:53:8f:70:65:9e:ac:cc:0d:77:ee:bd:1c:ed:92:
                    d7:0d:88:7e:58:a4:df:d3:2f:e0:20:19:83:f6:df:
                    dc:89:1d:a9:4b:5e:25:a7:f3:4f:76:3b:6f:66:88:
                    46:48:aa:d3:96:78:4c:0d:e5:e3:37:e8:2f:c8:dc:
                    a4:a4:8a:89:58:4f:1a:ba:52:e5:80:9e:67:92:12:
                    35:5a:ea:98:66:bd:f2:2b:f1:be:80:c0:5d:7f:b2:
                    b5:5f:36:84:d8:6e:94:0d:1e:5a:f8:d0:61:b4:99:
                    ea:7a:bd:b5:1a:91:f4:87:8c:7a:bb:e2:2f:4b:1d:
                    93:28:9c:12:d7:8b:03:73:0c:d4:33:f3:39:7d:d9:
                    20:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:27:38:AF:7E:C8:46:71:E6:84:85:56:4B:DF:64:9E:BA:A7:75:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/81f9e063-f092-3f18-8c69-39439fff7771.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:4f:65:58:f1:18:12:0f:03:e5:93:ce:54:ab:db:fd:d5:e0:
         b2:b6:92:e5:60:07:f5:e1:fe:98:42:e9:b8:e6:26:02:4a:1e:
         74:0b:37:3e:aa:67:5d:02:82:bd:85:a5:a0:4c:7a:76:bf:77:
         a3:0e:24:af:21:07:a2:5e:e4:5f:a6:17:7c:e0:49:3d:a5:88:
         dd:15:6a:e7:c0:e0:ac:a1:79:24:44:fe:24:88:55:a3:16:87:
         50:04:10:25:3c:87:41:f8:8b:d4:74:93:bf:1b:cc:1c:46:ea:
         83:57:cc:1c:d4:a5:f7:3d:af:75:d2:d1:73:8e:7b:4b:e3:1b:
         0d:b0:fd:f3:22:11:ba:08:73:34:46:02:ed:2b:eb:46:fa:31:
         b1:f5:a3:25:96:b2:64:a6:25:d8:ba:29:e6:78:3f:4c:46:08:
         73:67:7e:61:59:b9:eb:94:86:86:67:32:ae:42:e4:a7:19:d7:
         91:1a:ba:a3:42:ee:39:71:32:37:01:62:b0:32:40:3f:57:55:
         10:84:bf:69:72:04:a9:de:9b:5e:9b:6e:96:39:6c:10:50:57:
         75:05:41:b4:85:fb:ea:a9:ce:9c:d2:83:fc:b3:8b:c6:19:4f:
         d7:12:da:d8:10:49:c8:e6:56:8a:a2:26:3d:b7:7e:44:5c:22:
         e1:37:93:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:48:54 2026 by rpki-client