Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d8360590-26b4-3778-a9f4-30f26b485917.roa
File:                     d8360590-26b4-3778-a9f4-30f26b485917.roa (raw, json)
Hash identifier:          I/CoDsOl840835P5xBljAwytOKHPFVFXrfNqExBoJVY=
Subject key identifier:   37:FD:2A:3E:B7:86:A0:37:82:8A:CA:69:1B:24:F8:F1:94:63:3E:DB
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584F49848703FB4DFE63AE08F000
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d8360590-26b4-3778-a9f4-30f26b485917.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     41264
IP address blocks:        104.132.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:87:03:fb:4d:fe:63:ae:08:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=eadd2a25-e62e-4d41-9712-3d16cbeeed08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3c:18:9e:57:87:89:5f:15:11:4f:69:1b:33:
                    2a:e9:c0:40:fd:93:96:5b:15:ee:37:58:30:62:67:
                    55:c6:ff:46:a7:ab:bc:68:ce:ba:ea:0e:9a:2a:e3:
                    db:1d:be:7f:53:1d:77:4e:73:0b:3f:0c:68:90:df:
                    c2:ed:48:b5:4a:53:15:54:5d:ad:f6:73:1a:d7:49:
                    33:16:93:31:35:80:3f:9b:ac:b9:3f:6d:50:c7:ff:
                    fd:8a:bd:18:68:4b:f1:1b:82:22:86:be:8f:11:c2:
                    15:74:d2:8e:5b:5f:c3:d4:1d:36:aa:e4:88:88:cc:
                    b7:eb:ce:8c:82:1e:9e:76:fd:5c:2e:2a:1c:f0:05:
                    03:0a:5a:12:a6:c0:af:4f:e8:98:c9:ef:80:33:93:
                    fe:a1:e5:78:a8:74:78:83:b6:91:5e:35:07:2c:24:
                    84:1b:da:6a:95:f0:ec:02:5d:39:02:0f:db:07:d1:
                    f9:ce:c9:f8:27:07:a7:c7:0f:9e:d1:40:49:b5:eb:
                    db:73:ab:c4:92:e9:f9:99:8a:5b:38:ba:97:2e:de:
                    92:82:d9:7e:c2:e4:d9:32:0b:8f:42:28:32:40:02:
                    e2:28:87:62:6b:a9:e7:b9:06:e7:40:33:2a:12:a2:
                    12:43:51:9a:f0:4d:bc:bf:73:94:de:74:25:a2:04:
                    56:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:FD:2A:3E:B7:86:A0:37:82:8A:CA:69:1B:24:F8:F1:94:63:3E:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d8360590-26b4-3778-a9f4-30f26b485917.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:a0:48:b9:c4:9a:75:55:b0:96:a9:b5:8a:b3:41:f4:f3:24:
         26:b1:d1:da:40:52:8a:76:9d:0d:59:3f:0c:b6:f9:0c:81:f7:
         b3:38:90:fe:5e:52:a5:43:65:68:66:a5:df:3e:b3:c5:a1:6e:
         a7:96:d3:b2:4b:5f:9d:cc:c5:3b:34:89:24:91:60:b3:00:8d:
         d8:50:15:ad:36:e2:68:d5:03:39:6e:e2:b9:82:e5:3a:af:87:
         18:cf:5f:c1:33:34:26:ca:78:53:5c:d5:bb:64:53:f0:bb:11:
         3e:6f:c1:ac:5b:b3:71:c7:4f:dc:0e:2a:9d:98:eb:a4:5a:d5:
         fe:5d:60:1a:ee:e6:3a:12:30:e8:ad:af:0e:df:7c:58:d5:df:
         5f:be:16:bc:80:71:39:20:49:6d:ad:86:a9:bb:34:2c:83:61:
         d5:ce:43:7f:f0:0b:e1:0e:d5:b8:2b:84:17:dd:d8:c8:46:07:
         61:c1:f4:20:c5:56:04:39:4c:38:29:14:59:37:2a:2d:9b:54:
         77:c6:7d:d7:3f:1d:86:84:9a:a5:27:6f:32:8f:76:46:45:db:
         6d:8f:5b:d6:76:db:0a:58:20:46:64:30:d2:7f:b5:2c:fa:a5:
         eb:7a:a8:55:d3:91:55:7e:90:20:c3:ee:4d:cb:e8:0a:ec:b9:
         a9:ce:3a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:24:52 2026 by rpki-client