Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cca17815-0d39-3ae9-b15c-ff473606cf2a.roa
File:                     cca17815-0d39-3ae9-b15c-ff473606cf2a.roa (raw, json)
Hash identifier:          kSxWP01EwS2FSId/oWAlGYxqOJd/EOBo0XhX1tQWBkg=
Subject key identifier:   E7:28:28:BE:F5:B5:BC:F7:80:34:7D:89:1A:C6:C4:59:83:BB:6A:C2
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584F497C9C21A141A34FBB362B00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cca17815-0d39-3ae9-b15c-ff473606cf2a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        104.134.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:9c:21:a1:41:a3:4f:bb:36:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7604d92e-ca16-498c-b024-161047532541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0f:93:cc:e0:d6:5b:36:a2:ca:45:fa:e6:87:
                    40:3a:56:a7:9f:4a:3b:83:9c:bc:44:46:35:1f:e3:
                    3c:82:e4:35:66:4e:b0:ee:fc:ec:be:39:a8:07:f7:
                    ed:1a:83:c6:f5:3f:66:43:df:07:d1:17:b7:0b:fc:
                    a4:30:e3:f7:85:07:77:b3:08:57:e4:41:3c:c9:3b:
                    72:77:04:1b:f1:8c:9d:24:2b:61:e4:da:10:a3:b6:
                    e4:b7:85:1f:78:0d:d3:4f:69:d5:2a:dc:69:f9:d9:
                    46:0f:ed:1b:8f:6b:a9:1e:6c:05:24:f6:22:19:ed:
                    4d:f1:dc:0d:71:4f:fa:ca:3b:63:76:06:fa:83:94:
                    b5:47:fc:ac:ad:41:d5:f9:7e:7a:83:cc:40:26:33:
                    58:d4:ba:46:38:84:16:ed:3a:f7:a5:c3:14:f2:91:
                    a1:a8:33:95:5b:be:a8:0e:af:0b:8f:67:aa:6d:70:
                    20:5e:c1:a0:52:36:bd:da:f9:bd:46:8a:e7:f2:27:
                    bf:c2:61:48:90:68:77:da:7b:78:ea:e4:bc:be:99:
                    da:ab:51:1e:6c:ea:20:36:4f:3f:80:f8:d6:1b:be:
                    b6:8a:45:90:d3:3c:8b:4a:2b:b3:32:15:98:19:e9:
                    00:73:04:e5:5a:98:07:5c:01:9d:70:f4:91:c1:79:
                    6a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:28:28:BE:F5:B5:BC:F7:80:34:7D:89:1A:C6:C4:59:83:BB:6A:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cca17815-0d39-3ae9-b15c-ff473606cf2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:30:3b:44:77:7a:6c:d9:09:42:b5:7c:59:c2:87:d9:97:46:
         cc:dd:6e:cc:21:6e:10:9d:2f:47:c9:ed:20:21:fc:ae:d5:27:
         bd:32:7a:ea:cc:62:c3:71:bc:b6:bc:8f:7b:79:58:1c:2e:27:
         75:dd:db:64:6b:f4:6d:4c:88:c1:60:60:5a:cf:99:95:dd:6e:
         39:90:69:5b:1b:28:18:a5:ab:96:30:f8:e5:87:d8:03:65:ee:
         43:81:51:4a:db:de:1f:f3:89:92:a0:b0:16:40:0f:ce:ea:c3:
         f5:80:f8:d2:5d:78:23:f6:cc:6e:8a:de:22:d2:73:07:61:45:
         19:e7:d5:6d:ba:d8:0e:58:1b:cb:f1:d7:db:ad:12:42:e2:18:
         60:99:2b:cc:06:e6:da:76:c8:13:d3:21:5f:8f:5d:9c:95:c6:
         1c:7d:c3:f3:de:ab:0f:0c:e2:f7:d9:66:50:32:95:d0:87:ea:
         3d:f0:94:b3:5a:48:3d:91:bb:1c:c1:a7:84:ce:32:43:2d:03:
         89:a4:2c:a9:e5:a8:94:70:6e:1e:b8:1e:43:2a:0c:90:5b:f9:
         a8:91:8e:da:d6:2c:80:71:89:a7:37:90:08:d8:fd:ea:31:fe:
         03:43:60:05:d3:c6:07:b3:8f:26:17:a1:5f:c0:0a:b1:f3:01:
         f8:96:7d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:09:55 2026 by rpki-client