Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba5383e6-ea95-3586-ab25-2ba523d21d63.roa
File:                     ba5383e6-ea95-3586-ab25-2ba523d21d63.roa (raw, json)
Hash identifier:          Zom+0d/YBrtfmPWZG6U2rRIgX69O9r3opjFbbrhisgA=
Subject key identifier:   73:C5:CA:E4:08:3F:2E:0B:78:C0:D5:48:F9:BE:E7:CE:BA:48:EC:6F
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584F498495141783092D57054F80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba5383e6-ea95-3586-ab25-2ba523d21d63.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     41264
IP address blocks:        104.132.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:95:14:17:83:09:2d:57:05:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=da977dc0-598b-47ac-bc3a-4695476c110f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6a:53:e3:75:e3:b1:d4:2f:83:ef:6e:83:d4:
                    b7:71:9f:6d:cc:81:8c:3a:97:f5:6f:2c:8b:f5:ed:
                    0d:25:3f:42:e0:92:d0:8c:f0:ea:e7:5f:2f:2a:50:
                    8c:8d:0d:4a:cb:19:c2:af:13:cf:d4:82:78:40:4a:
                    32:1b:b8:3e:2a:dd:eb:68:a3:91:cc:85:92:51:99:
                    46:19:3b:68:07:33:36:ef:02:78:8b:8e:7d:9d:c5:
                    27:ab:9a:21:2e:39:cc:36:4c:a9:d7:e2:94:ce:f3:
                    d4:b5:cf:7d:92:6a:f5:09:2b:d2:6d:53:a4:c1:f1:
                    f8:c7:de:92:ba:01:5e:a7:7e:6d:25:c6:f5:f9:51:
                    ee:61:6e:66:5e:7b:e1:20:e4:a9:8d:82:e9:5f:0a:
                    45:ef:98:8c:85:f5:57:d0:e0:3c:2f:89:46:22:c0:
                    12:41:1a:f9:8d:01:25:ff:a3:9e:fa:cd:ee:19:1b:
                    e0:2c:b0:55:eb:a5:da:29:13:eb:2a:99:85:3e:ce:
                    16:85:23:4b:e4:33:c3:9c:ae:6c:6d:6f:32:52:96:
                    32:30:22:66:61:97:ba:4a:77:a2:43:fd:0f:db:ab:
                    95:eb:d6:ed:e5:ed:86:25:a6:08:24:5a:93:65:73:
                    8d:d3:32:bd:58:49:aa:40:23:fd:42:71:e8:6d:f3:
                    c3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C5:CA:E4:08:3F:2E:0B:78:C0:D5:48:F9:BE:E7:CE:BA:48:EC:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba5383e6-ea95-3586-ab25-2ba523d21d63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:c9:fa:7b:82:7a:95:0e:74:89:92:ca:f9:da:d9:26:83:5d:
         ec:ac:46:ad:c7:0d:04:9c:de:6c:29:60:35:9e:d8:cc:04:81:
         16:cc:27:37:89:25:ae:cf:c6:e8:b8:72:dc:bb:bf:b7:fb:90:
         e4:41:d1:7c:69:9e:41:36:ea:8b:89:e1:30:2f:b5:5f:e0:4f:
         70:9b:84:25:25:45:b2:93:1d:f2:69:43:15:aa:89:97:85:c4:
         1c:e3:a4:a2:81:2d:8d:c5:f5:cb:f3:78:d2:11:74:c7:76:8e:
         f9:eb:19:4c:76:21:de:ba:b6:89:85:36:b5:86:37:22:13:a6:
         a5:77:63:70:33:94:84:40:c0:7b:f6:bb:cc:0e:38:db:03:f1:
         84:d6:dd:6a:1d:a1:4e:96:4e:f0:fe:ae:32:7d:3b:7d:88:b3:
         6b:96:7c:19:10:5c:75:ba:c4:fd:fe:88:fd:d7:fe:86:1a:7f:
         e6:01:15:cc:65:65:3d:81:01:cc:56:ec:87:af:2b:a1:61:17:
         1a:66:bb:64:55:40:67:8e:be:6a:f2:de:5d:4e:26:11:22:b6:
         d9:24:11:db:a4:fa:72:10:c9:1b:a4:a5:34:b1:d1:15:33:eb:
         f9:90:a2:cf:e2:0b:d8:99:ff:f3:eb:4c:a2:1b:70:b2:b3:f6:
         95:8a:65:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:23:56 2026 by rpki-client