Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9d62a239-940a-33bf-b5b3-1eced0745d57.roa
File:                     9d62a239-940a-33bf-b5b3-1eced0745d57.roa (raw, json)
Hash identifier:          OINH5d5QE8Aeojpg+T5XhHRRM8EM0pYBw77ytimCdIo=
Subject key identifier:   BC:F3:93:8F:7D:54:7B:FA:6E:2F:D1:D0:06:F9:94:6F:13:9A:59:45
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584F497C816B9117D7247E4AD140
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9d62a239-940a-33bf-b5b3-1eced0745d57.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     41264
IP address blocks:        104.133.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:81:6b:91:17:d7:24:7e:4a:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a7365ddb-cd83-4262-baa7-890c25f9af75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d6:08:5a:b8:36:f3:08:66:fa:49:4b:9f:43:
                    2f:a6:69:8c:4a:3a:5c:94:8f:31:6b:64:41:c9:c1:
                    27:74:c4:cb:96:6f:0f:f4:4d:16:bd:09:73:55:d6:
                    65:21:a1:30:15:61:6f:c8:cd:38:02:82:6c:bf:c7:
                    a8:92:77:05:86:ab:7d:99:9c:5e:28:aa:d9:bc:1f:
                    d1:b8:6f:25:f0:1b:7a:f0:7a:24:da:d1:1a:a3:b3:
                    83:71:71:b3:28:4d:34:18:33:80:c3:2e:30:50:26:
                    19:bf:67:4a:05:9e:4b:28:b1:54:80:4e:b5:f6:ab:
                    56:cf:83:38:ec:d2:47:40:94:58:a1:b7:ce:80:f5:
                    04:48:76:bd:aa:5f:5d:0c:f5:f4:37:ba:7e:1a:50:
                    29:89:9f:c8:a6:9a:33:25:9b:3e:34:87:56:29:2a:
                    57:ac:a9:9f:db:60:ca:5d:64:b5:77:03:06:81:a3:
                    b5:ed:a9:39:a0:05:37:56:41:a3:a0:14:24:8f:5e:
                    41:01:19:86:2f:74:6c:5a:09:49:4f:ce:2e:3d:62:
                    33:0d:85:ea:b2:83:e2:0d:0b:ec:fa:d0:d8:0a:e9:
                    2f:13:51:fc:4f:76:fa:fd:35:e4:26:29:30:a8:9f:
                    f0:b5:47:e8:a3:c6:7b:2a:0d:47:0e:e3:96:2c:ab:
                    af:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F3:93:8F:7D:54:7B:FA:6E:2F:D1:D0:06:F9:94:6F:13:9A:59:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9d62a239-940a-33bf-b5b3-1eced0745d57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:67:29:94:50:83:23:d1:55:ef:3c:44:b4:5f:b9:5c:59:1b:
         10:c5:43:3e:f2:dd:ba:60:00:f7:3e:21:4e:f2:f2:eb:15:a9:
         02:84:42:90:eb:f4:e4:95:63:44:11:d3:43:45:db:3c:a3:07:
         5d:42:aa:86:32:57:51:45:cb:af:dc:e1:ec:b2:85:61:a5:d5:
         e7:4f:5a:85:2f:32:23:07:88:17:7f:47:c7:d8:85:30:33:47:
         de:0b:9c:cc:cb:b4:cb:72:a1:7a:4a:85:40:a5:b6:ba:9a:11:
         30:3e:cb:35:9e:3d:3f:48:95:57:60:41:88:20:d6:fc:1f:06:
         cc:bf:44:10:ee:8e:97:84:5f:12:d1:ee:c5:82:8f:29:77:a3:
         21:42:e8:8d:79:a8:14:a3:15:fb:95:4d:e0:4b:6a:2f:ef:f4:
         9d:d5:73:2f:0f:b5:9a:a6:25:bd:5d:d8:e3:ca:e4:77:2e:06:
         ed:54:09:dc:ef:3c:19:d2:89:af:2c:92:57:4a:db:de:47:e2:
         0d:3d:60:5f:e4:6f:2a:d0:b2:6b:8d:da:bf:95:7a:c6:54:f6:
         ea:83:af:ae:f3:d7:41:15:a1:a5:35:73:ca:6c:02:ab:75:4f:
         5f:4a:66:2f:81:9e:11:0c:6b:12:51:0b:e5:79:02:9f:a8:48:
         9c:0b:59:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:41:04 2026 by rpki-client