Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/934900f6-3393-3f77-a474-3b0867fbee72.roa
File:                     934900f6-3393-3f77-a474-3b0867fbee72.roa (raw, json)
Hash identifier:          Fd40DzlhpmxlMMow1qTuvGA1JbbEhqC/MfbJ+4zFTVo=
Subject key identifier:   E8:5C:12:AF:0F:18:AB:EB:FB:D6:E0:2D:CD:08:C4:5B:B8:F3:03:77
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584F497C6A092D2F9E78DE46CE80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/934900f6-3393-3f77-a474-3b0867fbee72.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     41264
IP address blocks:        104.133.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:6a:09:2d:2f:9e:78:de:46:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=649e0728-754c-48e5-9c2b-f71fb3c94aea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:75:fa:4b:d9:9d:40:c7:66:ec:89:14:a6:04:
                    24:5b:36:cf:8d:89:3c:63:7e:98:ef:53:ec:cd:a8:
                    79:ab:7c:ae:29:ad:07:43:39:b6:62:72:cc:b1:3c:
                    08:ee:fe:d7:b2:fa:af:67:4b:09:f0:b9:41:17:80:
                    e8:97:94:65:d6:b1:83:df:64:37:13:5a:21:66:50:
                    1c:84:ef:24:a1:50:9d:23:8e:cd:34:f0:82:23:94:
                    4a:9d:bd:e3:07:94:18:2b:d9:98:69:5b:ba:f9:19:
                    11:b6:d9:32:24:e1:de:16:be:4d:e2:89:a2:d2:b9:
                    a4:89:00:cb:07:21:ca:22:69:da:51:a4:59:23:49:
                    8b:3f:cd:8d:1d:85:d6:c2:33:26:f3:52:92:08:c1:
                    77:6b:45:22:56:a4:b3:97:77:4f:d7:c1:62:43:ca:
                    99:fc:6c:85:9f:1d:87:8c:41:6a:40:da:74:ad:ed:
                    b1:d2:ab:2a:17:b4:76:90:4c:d2:03:0b:5d:da:41:
                    3d:d7:77:bb:5c:63:8e:df:b0:79:bf:fa:b4:df:9d:
                    de:62:91:01:4e:08:8a:95:86:af:d5:fe:e7:06:df:
                    b7:e5:ce:54:c1:f1:6a:58:30:02:bb:0b:e2:c7:c8:
                    e1:f4:e5:77:e9:a9:90:ca:6e:df:85:4b:09:e9:17:
                    98:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5C:12:AF:0F:18:AB:EB:FB:D6:E0:2D:CD:08:C4:5B:B8:F3:03:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/934900f6-3393-3f77-a474-3b0867fbee72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:2f:47:c9:12:32:39:4a:b0:69:c4:36:f2:76:e8:3c:57:33:
         f2:7f:d9:21:1d:b1:bf:bb:33:c4:af:3c:d7:4a:c3:00:78:21:
         23:40:8d:ae:5b:bf:e2:47:19:7c:57:d1:b0:c3:e5:10:03:35:
         ba:27:8b:24:21:b6:c4:75:96:a9:78:4f:68:46:60:b4:97:54:
         58:ba:fa:e1:84:7e:bd:70:b6:a1:fd:5f:3e:f8:92:fe:77:74:
         42:e9:3c:51:03:c0:b8:d5:f4:bc:0f:19:0e:aa:fd:e1:a0:cc:
         45:3b:fa:4c:4f:ca:d1:26:26:49:17:7f:23:3a:f0:29:43:07:
         9e:b9:d9:c6:e6:f1:4c:e8:c7:dc:80:06:9d:67:86:cc:47:8b:
         e2:50:df:a3:52:63:bd:79:64:8f:0c:63:65:d8:eb:b2:66:00:
         3f:14:73:b9:2a:79:c2:d5:49:7e:55:39:50:e8:43:c9:64:66:
         a5:6d:41:fc:df:d9:23:31:3e:21:25:76:09:ba:e9:2a:3b:fd:
         40:0d:00:61:bb:61:29:78:3d:ed:1d:ba:b5:aa:7a:d9:5a:3e:
         5b:ea:90:4d:62:a0:98:9b:f3:7a:9e:d6:87:b6:e0:c4:1b:e2:
         54:b6:ed:fa:42:b9:36:f3:65:75:c7:6e:85:ae:e5:a7:47:6c:
         0e:a1:8b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 15:08:28 2026 by rpki-client