Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/91d0b9d4-bd76-3490-829f-915161b6da9e.roa
File:                     91d0b9d4-bd76-3490-829f-915161b6da9e.roa (raw, json)
Hash identifier:          03KggVRFT+mIDQEAn7b6vqYoIIxEWmLoAwIervSQw9U=
Subject key identifier:   D9:4D:FE:CB:AA:8F:08:11:73:29:97:77:79:AD:D2:57:EC:EB:7E:37
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584F4984929945A41F4746AD08C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/91d0b9d4-bd76-3490-829f-915161b6da9e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     41264
IP address blocks:        104.132.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:92:99:45:a4:1f:47:46:ad:08:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5e036e59-4f17-48e6-8e96-a495ccd3cd62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7b:f1:81:b0:7f:94:44:fa:dd:5a:8f:3f:d8:
                    f2:c2:0f:77:4e:d1:43:ea:d6:7a:f0:c1:ac:ea:90:
                    9a:58:4f:39:70:f4:73:01:73:22:2c:5e:6c:42:49:
                    ef:aa:5b:d7:fe:28:48:df:55:10:23:4e:fd:88:aa:
                    3f:be:0f:0c:76:97:f5:f4:f1:a6:07:10:e7:48:0b:
                    da:41:56:bc:c9:c7:da:06:71:51:c5:15:d9:6d:5a:
                    20:5c:13:0c:f7:82:40:47:1a:6f:08:f9:89:48:2e:
                    7c:72:8e:50:0c:9d:63:6d:db:a0:0a:92:d1:0d:70:
                    df:f1:c2:c5:ec:16:70:9d:02:e0:69:93:05:d9:09:
                    fa:7c:6e:11:d4:8f:a9:42:b9:db:e3:10:19:00:99:
                    43:ab:2b:6b:92:5f:91:d8:87:a9:86:a2:48:f9:fb:
                    f8:da:5e:74:27:c1:25:aa:9d:e6:da:8a:b5:43:91:
                    9f:9c:99:de:a1:01:1a:1b:d6:55:99:d7:cc:ec:91:
                    6e:1b:4c:58:7e:65:a2:2a:60:b5:17:bf:fd:39:d0:
                    cf:47:f2:36:e8:30:33:f0:65:d4:a9:5f:3e:66:c1:
                    c8:b5:b1:6a:13:79:1c:35:c2:ce:7b:6f:e5:c2:3b:
                    d5:ea:44:04:9b:f6:21:22:d1:7f:ee:fd:72:3c:3e:
                    2f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4D:FE:CB:AA:8F:08:11:73:29:97:77:79:AD:D2:57:EC:EB:7E:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/91d0b9d4-bd76-3490-829f-915161b6da9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:68:e0:97:c5:8b:6f:a0:46:93:eb:e8:eb:d8:26:53:d6:f6:
         40:f8:16:90:d7:5e:2d:3a:61:73:b8:85:46:71:e2:2e:84:59:
         64:44:59:fd:e9:26:c5:d3:fd:a2:bd:60:06:00:bf:fd:cf:91:
         43:ae:8a:d7:a7:53:2d:84:e6:0c:0f:04:e3:1d:7c:3e:e0:53:
         2d:77:19:52:31:85:39:81:cc:e6:56:9f:41:1c:41:d4:43:b9:
         55:f5:c3:fb:d2:b6:a9:40:38:7a:b1:ad:39:3c:12:9f:67:0b:
         7b:20:ac:e1:e4:69:18:91:ab:22:b5:c4:21:da:bb:52:5f:0b:
         f2:60:4f:af:cb:e5:28:4e:9f:79:b4:25:88:e0:2e:89:ea:50:
         f2:eb:b0:0f:a0:32:b9:21:8c:fb:38:b8:f4:a9:84:e7:f5:dd:
         d5:33:62:49:a4:a3:67:3b:7a:89:13:1a:97:b6:3b:47:46:e6:
         28:71:9f:b7:86:06:86:37:09:e5:d8:cd:8a:76:83:0d:a2:4d:
         13:db:e2:19:dc:74:38:c9:3c:67:dd:bf:15:ee:88:d8:c2:ff:
         91:7d:6a:15:18:39:a4:87:c4:b5:99:de:7b:2f:70:5d:3e:72:
         09:ae:b0:86:04:77:66:d1:e0:c7:cb:1e:2a:4c:4d:cb:4a:73:
         17:76:7c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:00:52 2026 by rpki-client