Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a18b44be-63d1-3f1d-9264-564a7e507182.roa
File:                     a18b44be-63d1-3f1d-9264-564a7e507182.roa (raw, json)
Hash identifier:          YYty7B9m5rtQqPFQlxyKKKixvhD3e4o+qI7Hgj93VFA=
Subject key identifier:   EE:F4:DE:B2:59:6F:89:3C:B1:E6:0C:3C:29:EF:E3:0B:A0:09:17:39
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584F4984890CF2D9DD8BF820C6C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a18b44be-63d1-3f1d-9264-564a7e507182.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     41264
IP address blocks:        104.132.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:89:0c:f2:d9:dd:8b:f8:20:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=397ffd75-3298-4d15-92b7-6564ec14a34e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:52:a1:b3:c2:01:66:55:1b:b1:ff:ea:00:61:
                    64:ad:83:12:e5:cc:c4:e1:f8:5f:56:6d:9c:3a:48:
                    b2:12:7f:a1:42:97:ad:26:c5:fc:85:dc:76:c2:72:
                    af:af:0d:e8:b2:c7:8f:c0:28:5f:a7:4e:e0:11:ea:
                    cc:0a:a1:91:f0:8c:b9:0b:e2:40:0c:1c:86:1b:f9:
                    3a:2a:98:62:10:b5:1b:38:0e:af:ed:92:f8:8f:ee:
                    51:97:f9:21:7c:79:af:77:05:2a:04:2e:5b:86:d6:
                    b1:81:b2:6d:d6:cf:97:19:6a:9d:88:b7:a5:2a:35:
                    11:1a:11:71:3e:b0:4e:66:2c:bb:e0:e5:22:7c:52:
                    4a:78:b9:a4:05:4b:fd:0d:ac:bc:09:6a:a9:3c:0e:
                    f4:d7:c8:18:be:e1:37:1c:74:43:7d:22:28:96:75:
                    c7:22:80:00:02:ee:af:e5:23:fb:a3:d3:62:8e:eb:
                    04:32:43:2c:d0:c6:b3:00:90:e4:ad:6d:94:45:05:
                    ab:a0:73:0d:05:37:92:73:8a:a5:a1:6d:a1:10:e6:
                    e2:4a:42:ed:c3:39:8a:8f:24:2d:a2:0b:e4:49:c8:
                    22:0c:b6:4a:f7:9e:c3:29:bf:b8:db:37:1f:a7:7b:
                    3c:51:9e:77:b4:47:90:cd:c7:ec:21:30:2b:2f:8c:
                    44:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F4:DE:B2:59:6F:89:3C:B1:E6:0C:3C:29:EF:E3:0B:A0:09:17:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a18b44be-63d1-3f1d-9264-564a7e507182.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:6c:fd:5a:58:af:0c:a1:bb:aa:63:af:a2:50:97:3a:ba:2f:
         79:da:48:f2:ab:a0:c2:61:35:23:55:ec:a4:2b:43:84:93:e6:
         a2:1c:aa:96:a8:84:af:ec:3a:c0:d9:db:58:75:29:fe:ed:b8:
         2d:62:31:23:ce:08:8e:47:87:f5:2b:2c:06:e4:73:09:25:e9:
         6c:82:df:c1:e1:ac:b0:c6:88:53:14:ab:41:7d:4d:0c:51:80:
         03:bc:d6:89:10:7d:f4:7e:72:56:74:eb:3b:69:29:ba:f5:0f:
         1e:1d:a3:20:62:93:4f:9d:88:73:82:b6:2c:b0:9a:d0:25:2d:
         7f:c2:7c:41:0d:f2:e1:aa:7c:07:39:89:ac:cf:3b:27:0d:29:
         ee:87:88:e4:74:b6:d8:65:d4:23:c8:d1:ee:80:c8:96:74:66:
         df:c6:8b:38:a2:70:9f:be:29:e8:26:eb:92:a5:8e:21:be:bd:
         8b:04:f0:72:6f:a7:6f:1b:5e:0a:00:0b:63:65:67:3d:13:9d:
         b5:98:ac:55:fe:7b:04:4e:46:7f:ec:9a:77:68:e9:a9:63:8e:
         bd:28:ef:77:92:61:a7:4b:a2:2b:37:4c:5b:45:fc:0d:a7:4b:
         21:32:64:52:d8:78:f1:9d:d1:f0:d7:16:df:a0:03:e2:ab:84:
         68:aa:bf:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:43:45 2026 by rpki-client