Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a24e5819-c4f2-3640-92e4-06e7215250ce.roa
File:                     a24e5819-c4f2-3640-92e4-06e7215250ce.roa (raw, json)
Hash identifier:          4a0RhgzZajj+Ku3qJhmWPLQJVCt4/D61Eu9TaE0yYJs=
Subject key identifier:   8D:E7:99:D3:32:24:0A:4B:27:0E:A0:C4:D7:F2:DD:29:20:60:9E:D0
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584F497C83314DD4E396377E8240
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a24e5819-c4f2-3640-92e4-06e7215250ce.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     41264
IP address blocks:        104.133.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:83:31:4d:d4:e3:96:37:7e:82:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=20057c00-2202-4b2f-8937-01555f1f8092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:46:b7:53:93:82:dc:65:d9:c8:2a:1e:d3:31:
                    82:08:ef:eb:a2:06:0b:40:58:73:f6:72:c9:36:0d:
                    e9:62:b7:cf:e3:f9:8c:a7:f2:00:05:04:98:48:fa:
                    34:66:b0:fe:d9:1c:fb:fe:8a:d0:5b:2a:57:8f:99:
                    ad:ff:dc:38:5a:2d:92:4c:ea:9b:ec:df:a2:6d:db:
                    14:2c:e8:dc:76:ed:18:35:91:d8:b5:3f:ba:18:b0:
                    21:71:8b:a2:f2:47:e5:ca:6c:16:fc:c2:72:05:f9:
                    19:6d:a3:0a:88:df:e8:ea:d3:9a:cb:59:20:9f:73:
                    65:ed:3f:25:e2:71:37:9b:d5:69:0e:75:74:fa:f2:
                    38:6e:cb:52:dd:dc:56:f6:67:9b:47:d4:04:07:6c:
                    01:bc:41:58:7c:1b:02:99:2a:cf:8b:28:aa:6b:5f:
                    02:69:08:f5:ef:15:5e:55:74:b5:4b:04:64:b6:87:
                    42:d8:fd:09:35:66:3c:3a:3b:9c:c4:16:06:4f:48:
                    d8:9e:a1:bf:dc:b8:6e:54:b8:ad:42:2e:df:46:b0:
                    2b:ae:77:dd:21:83:01:97:51:a7:c5:3e:be:c3:26:
                    88:4f:c5:ba:2e:47:88:c5:6f:fa:76:e4:39:b2:44:
                    90:e5:c4:77:7d:fd:6d:28:ce:56:b4:81:44:ce:b1:
                    36:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E7:99:D3:32:24:0A:4B:27:0E:A0:C4:D7:F2:DD:29:20:60:9E:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a24e5819-c4f2-3640-92e4-06e7215250ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:1d:29:ac:54:9f:0f:76:3c:ce:48:8b:a6:05:df:bd:28:47:
         99:71:11:d3:37:6a:08:66:18:09:f7:65:f9:f8:76:e6:d0:33:
         fc:3b:86:62:0f:e9:b1:6c:9b:b1:d8:1d:09:70:ae:f7:f0:c0:
         9a:82:47:18:bd:38:dc:9f:84:ea:cc:a8:7d:03:21:22:bf:76:
         d7:62:da:81:d4:aa:da:0a:45:75:de:68:0c:46:84:5f:fe:c9:
         91:bf:35:83:46:a1:f1:2c:03:c0:e5:1d:10:78:60:e9:7c:6a:
         8b:34:ec:fc:fa:75:43:43:6c:71:74:d1:ff:1e:72:fb:c1:65:
         6c:81:ff:60:c7:cb:85:a1:d1:37:5d:17:15:76:64:6a:45:97:
         95:23:bb:cc:86:c2:99:43:04:f0:d5:70:91:30:60:ca:6d:57:
         b4:a5:8f:f7:5a:94:7b:8c:f2:18:09:e3:a9:6a:01:7b:8e:58:
         90:1d:59:91:33:15:ff:80:2e:a2:98:5c:58:a4:f9:bf:ee:9a:
         12:55:4b:1b:f6:d3:9e:32:d1:d4:94:44:00:ea:e5:3e:a3:da:
         7c:fb:06:61:da:f6:46:02:96:5d:ab:ce:6c:94:0c:d1:a3:c2:
         06:04:b2:1b:04:7f:7f:ff:ce:f7:3f:c7:82:0d:cb:99:1a:57:
         19:32:4a:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfIMxTdTjljd+gkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MjAwNTdjMDAtMjIwMi00YjJmLTg5MzctMDE1NTVmMWY4MDkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUa3U5OC3GXZyCoe0zGCCO/rogYLQFhz9nLJ
Ng3pYrfP4/mMp/IABQSYSPo0ZrD+2Rz7/orQWypXj5mt/9w4Wi2STOqb7N+ibdsU
LOjcdu0YNZHYtT+6GLAhcYui8kflymwW/MJyBfkZbaMKiN/o6tOay1kgn3Nl7T8l
4nE3m9VpDnV0+vI4bstS3dxW9mebR9QEB2wBvEFYfBsCmSrPiyiqa18CaQj17xVe
VXS1SwRktodC2P0JNWY8OjucxBYGT0jYnqG/3LhuVLitQi7fRrArrnfdIYMBl1Gn
xT6+wyaIT8W6LkeIxW/6duQ5skSQ5cR3ff1tKM5WtIFEzrE2DQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI3nmdMyJApLJw6gxNfy3SkgYJ7QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYTI0ZTU4MTktYzRmMi0z
NjQwLTkyZTQtMDZlNzIxNTI1MGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKkdKaxUnw92PM5Ii6YF370oR5lxEdM3aghmGAn3Zfn4dubQM/w7hmIP
6bFsm7HYHQlwrvfwwJqCRxi9ONyfhOrMqH0DISK/dtdi2oHUqtoKRXXeaAxGhF/+
yZG/NYNGofEsA8DlHRB4YOl8aos07Pz6dUNDbHF00f8ecvvBZWyB/2DHy4Wh0Tdd
FxV2ZGpFl5Uju8yGwplDBPDVcJEwYMptV7Slj/dalHuM8hgJ46lqAXuOWJAdWZEz
Ff+ALqKYXFik+b/umhJVSxv2054y0dSURADq5T6j2nz7BmHa9kYCll2rzmyUDNGj
wgYEshsEf3//zvc/x4INy5kaVxkySt4=
-----END CERTIFICATE-----
Generated at Sat Sep 26 00:03:21 2026 by rpki-client