Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8c2421a7-aed0-38f0-8398-80b20002570a.roa
File:                     8c2421a7-aed0-38f0-8398-80b20002570a.roa (raw, json)
Hash identifier:          /+XJkSwh98RWHubxVWWOucy/trK0qUyW54EiS1IbfVc=
Subject key identifier:   5B:F5:EB:16:42:75:D5:E8:9B:1B:7B:15:16:85:E3:20:B5:1C:22:FC
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584F497CA1A7F366E03A93C0B06C
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8c2421a7-aed0-38f0-8398-80b20002570a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        104.134.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:a1:a7:f3:66:e0:3a:93:c0:b0:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=94e31bae-8397-470b-a9f4-5ce7de6d74a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:73:91:05:a6:5b:e9:89:22:c1:ed:67:64:2f:
                    03:77:b5:2d:38:41:cf:65:98:6c:1a:22:02:81:45:
                    82:b2:30:ef:9c:f6:57:c3:c1:81:cc:26:f7:5f:52:
                    ce:f0:e5:e9:50:90:05:cd:f7:ee:c6:91:47:09:a9:
                    80:77:03:cf:55:ff:f4:56:91:a2:42:94:4a:6e:6c:
                    35:96:2e:34:ac:c0:be:26:0b:6e:54:6d:44:1d:f5:
                    2a:8d:76:20:73:78:2a:2b:22:a7:64:5a:90:c9:16:
                    80:a1:42:bf:6a:c9:13:3b:b0:bb:ca:56:c3:95:4b:
                    58:30:fa:c7:73:4d:89:53:2d:bd:f2:b6:df:e7:3e:
                    ce:e0:63:9a:af:16:cf:66:0e:aa:95:02:47:21:e3:
                    5c:b1:73:6a:6d:c6:2c:d5:89:fc:80:19:e7:11:35:
                    0a:5c:75:69:d0:b3:6b:65:38:5c:e5:66:f2:da:1b:
                    73:49:b3:6c:2f:ba:1d:22:ef:fd:69:e7:c6:c6:c1:
                    87:10:4a:5f:b5:b1:e5:60:7f:e5:82:2a:ad:c1:9f:
                    66:e5:4e:77:0f:04:c5:4b:64:c9:57:3c:23:e8:be:
                    f0:5e:4e:57:cd:76:74:cd:e8:27:e1:25:79:73:8a:
                    34:dc:a9:78:a9:38:0a:8e:85:5d:21:07:76:29:bf:
                    ff:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F5:EB:16:42:75:D5:E8:9B:1B:7B:15:16:85:E3:20:B5:1C:22:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8c2421a7-aed0-38f0-8398-80b20002570a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:fa:a4:f5:31:8b:03:8e:0c:31:5c:18:33:28:f0:d9:f1:58:
         32:43:6c:94:c2:f6:e2:a8:91:95:89:53:d3:59:f6:37:1d:0d:
         a6:89:a1:9f:03:ff:c7:bf:85:1a:5d:b3:9e:23:e3:a6:f1:3c:
         a5:76:19:7f:78:fc:b9:db:9f:1b:ea:43:3c:df:89:a5:b8:d4:
         68:6e:ff:b3:e3:10:36:cc:a4:49:f2:b7:ce:e9:cc:2d:d3:36:
         ac:86:0a:1a:2e:2e:6e:1e:36:ee:2f:e4:a5:ee:69:6e:fb:66:
         c8:27:7f:c3:c1:ca:33:af:37:23:c2:4d:cb:bd:25:a3:70:5e:
         ff:e9:90:b3:a3:dd:c7:74:aa:5c:12:a0:10:36:14:db:2c:96:
         f2:8f:a6:f0:8e:f8:51:94:5a:6e:c9:c4:7e:ab:72:92:46:a2:
         e8:86:90:88:ff:0b:cc:1d:86:b4:47:6b:e6:64:1e:1e:7c:a3:
         04:e0:1f:fc:f6:95:d9:0b:d4:34:01:9d:8d:c4:85:bb:c8:7f:
         4d:aa:41:ad:10:43:fd:21:41:90:d6:28:c8:b7:c2:d3:26:24:
         7f:44:35:33:a6:39:3f:26:11:1d:c2:64:9c:ae:74:70:5d:0d:
         00:37:26:7c:f3:e1:3e:ac:31:ba:81:5a:0e:73:19:73:fa:90:
         6d:fd:6d:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfKGn82bgOpPAsGwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OTRlMzFiYWUtODM5Ny00NzBiLWE5ZjQtNWNlN2RlNmQ3NGE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunORBaZb6Ykiwe1nZC8Dd7UtOEHPZZhsGiIC
gUWCsjDvnPZXw8GBzCb3X1LO8OXpUJAFzffuxpFHCamAdwPPVf/0VpGiQpRKbmw1
li40rMC+JgtuVG1EHfUqjXYgc3gqKyKnZFqQyRaAoUK/askTO7C7ylbDlUtYMPrH
c02JUy298rbf5z7O4GOarxbPZg6qlQJHIeNcsXNqbcYs1Yn8gBnnETUKXHVp0LNr
ZThc5Wby2htzSbNsL7odIu/9aefGxsGHEEpftbHlYH/lgiqtwZ9m5U53DwTFS2TJ
Vzwj6L7wXk5XzXZ0zegn4SV5c4o03Kl4qTgKjoVdIQd2Kb//BwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFv16xZCddXomxt7FRaF4yC1HCL8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOGMyNDIxYTctYWVkMC0z
OGYwLTgzOTgtODBiMjAwMDI1NzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIbsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALT6pPUxiwOODDFcGDMo8NnxWDJDbJTC9uKokZWJU9NZ9jcdDaaJoZ8D
/8e/hRpds54j46bxPKV2GX94/LnbnxvqQzzfiaW41Ghu/7PjEDbMpEnyt87pzC3T
NqyGChouLm4eNu4v5KXuaW77Zsgnf8PByjOvNyPCTcu9JaNwXv/pkLOj3cd0qlwS
oBA2FNsslvKPpvCO+FGUWm7JxH6rcpJGouiGkIj/C8wdhrRHa+ZkHh58owTgH/z2
ldkL1DQBnY3EhbvIf02qQa0QQ/0hQZDWKMi3wtMmJH9ENTOmOT8mER3CZJyudHBd
DQA3Jnzz4T6sMbqBWg5zGXP6kG39bYU=
-----END CERTIFICATE-----
Generated at Sun Sep 27 00:22:07 2026 by rpki-client