Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/918ca67e-3f23-30cf-b980-a9d1cf95d1fa.roa
File:                     918ca67e-3f23-30cf-b980-a9d1cf95d1fa.roa (raw, json)
Hash identifier:          TJ9Y1zG7nlBx3cZXFA4J6uACVj39a+2eu26864vRuQE=
Subject key identifier:   28:7E:ED:F2:B2:5D:95:69:C0:BD:B5:24:F4:29:87:6C:46:6E:9E:8F
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584F497C9C011964EB95F82F3AC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/918ca67e-3f23-30cf-b980-a9d1cf95d1fa.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     41264
IP address blocks:        104.133.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:9c:01:19:64:eb:95:f8:2f:3a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=88fb39a5-af86-4081-a09b-dab0446655a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b2:f7:39:70:9d:cb:a6:a4:56:fe:50:7c:bf:
                    b5:e1:a5:e6:0d:84:a5:20:96:be:6f:4e:39:17:bc:
                    99:c7:69:14:85:5b:7e:c9:35:be:7d:5b:b9:31:35:
                    6d:e4:ee:a6:6f:b3:fa:44:ab:3d:21:b9:29:a1:bf:
                    e4:95:8a:62:b2:4f:72:2e:f5:99:8d:40:45:f4:0e:
                    26:a6:88:07:a6:3e:03:a0:32:e7:dc:2a:cb:5d:91:
                    f3:b4:45:a8:f1:20:a4:59:8a:2c:40:03:b8:7d:fe:
                    c9:2b:db:e8:f3:8f:b9:12:d2:15:c8:eb:99:dd:d1:
                    ae:a0:b0:fa:93:79:b9:04:81:6a:04:a5:12:6b:2c:
                    ba:13:4d:3a:6b:ea:ce:df:15:00:19:b9:3e:14:aa:
                    6e:f0:97:03:aa:b7:44:e8:d3:16:18:bc:72:6c:f5:
                    fb:7e:ce:80:d8:5a:22:5f:9f:7e:6a:b3:1a:d0:ea:
                    79:a9:b5:e9:26:4c:af:b6:f1:95:a8:74:ad:9f:16:
                    d9:9a:0e:b7:7e:38:e2:0b:dc:ba:d6:4f:96:1a:0d:
                    33:c2:52:a5:8f:42:8a:60:88:59:1a:01:b1:0b:89:
                    2f:16:71:3a:e6:7b:95:7c:f8:40:54:bb:b6:b3:80:
                    d8:12:57:4d:27:a8:69:3e:4e:25:8c:93:a6:12:08:
                    67:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:7E:ED:F2:B2:5D:95:69:C0:BD:B5:24:F4:29:87:6C:46:6E:9E:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/918ca67e-3f23-30cf-b980-a9d1cf95d1fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:7e:2d:67:5d:30:2e:0f:b2:6f:0a:b8:c5:fa:03:35:22:c9:
         66:03:ed:5b:89:7c:26:ca:9d:d2:7b:d7:9c:b2:8e:b3:46:d1:
         6d:c8:45:08:19:43:a1:3d:90:09:66:f7:f5:2c:a4:8d:b8:54:
         c1:08:4e:a3:95:e2:42:85:25:ec:14:50:af:a4:5f:3e:f7:d8:
         c0:61:58:ce:c3:80:11:74:d3:ef:30:e7:21:48:2b:73:bd:ef:
         1e:21:3a:1b:9d:6e:1d:80:2a:ef:b8:44:f2:d0:c1:0e:1f:ed:
         7e:0f:45:f6:d3:54:b1:e2:2a:96:3a:84:60:31:a3:d7:ec:3f:
         a0:82:b2:8e:d9:15:59:f0:61:16:a2:07:1b:9b:6a:76:e9:9f:
         f1:3e:79:fa:43:43:71:38:8f:f3:1b:1a:53:22:96:57:91:b4:
         6d:99:e7:75:36:8f:50:bf:50:b2:8a:76:57:bb:c0:4b:d2:88:
         13:e4:5f:dc:01:a0:fb:7d:86:55:bb:28:83:7c:6c:92:7d:6b:
         58:f4:07:88:aa:b7:79:ba:fb:90:63:ea:69:95:31:8e:0f:c5:
         04:79:cd:5b:00:fc:a4:91:42:bb:12:56:f6:6b:ff:d5:ba:6a:
         09:71:cc:9e:08:79:f7:28:1c:ce:d8:92:be:0f:c0:a7:9c:6b:
         a6:3e:37:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:56:24 2026 by rpki-client