Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f2e0bf6c-cef5-30de-ba1e-95211f495167.roa
File:                     f2e0bf6c-cef5-30de-ba1e-95211f495167.roa (raw, json)
Hash identifier:          jVwh4wbSRCCl47apdkLD9SguNJazo5yDPcpwBVFrnLM=
Subject key identifier:   4C:A3:A8:81:C8:5C:CC:B6:05:7E:F7:F0:8F:B9:C9:AE:8C:1E:EE:81
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584F4984E51421E08852F4CCEE80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f2e0bf6c-cef5-30de-ba1e-95211f495167.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        104.134.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:e5:14:21:e0:88:52:f4:cc:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=702b923c-a821-4aa7-9a91-6b8e0aca58a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cd:71:0c:cb:ff:7a:49:8e:c4:01:c3:65:10:
                    46:12:8d:a0:ea:c5:53:67:2e:99:e8:d6:28:c9:4a:
                    ca:e5:24:65:93:77:d5:a5:26:b0:14:a3:40:61:6e:
                    d6:a5:57:52:32:79:6e:25:14:7d:73:77:8b:a4:0d:
                    38:96:3a:42:ae:6c:cb:49:07:be:c1:77:f7:4a:c8:
                    d0:2e:83:8b:11:45:ad:b5:16:32:35:20:d9:6a:bc:
                    7a:0c:0e:91:04:d5:37:6b:0d:ec:5b:db:e6:5a:4b:
                    fe:3b:35:9a:90:ef:3e:85:f3:d5:ea:3c:10:28:42:
                    7a:33:b9:6e:cf:32:53:cc:55:7c:d9:c4:ff:a4:24:
                    ff:53:20:e9:f6:9a:47:df:fc:93:ee:d7:0e:5f:7e:
                    89:88:4d:0c:5e:14:a3:a5:93:ae:5b:81:10:1c:0e:
                    00:3c:2a:ef:fd:65:f7:b7:4c:28:22:49:eb:af:bf:
                    ae:06:15:88:17:a9:30:66:eb:ed:cd:e9:8c:b2:51:
                    4e:85:90:b4:66:b3:a4:46:53:39:71:da:52:cb:23:
                    05:c5:f6:cb:5a:58:92:0e:5f:0e:fe:fc:39:14:63:
                    d3:91:c9:2d:0e:00:0e:dc:f0:3a:57:60:50:39:a7:
                    39:79:dd:7b:51:9a:45:7e:99:1a:7e:74:39:ad:92:
                    a5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A3:A8:81:C8:5C:CC:B6:05:7E:F7:F0:8F:B9:C9:AE:8C:1E:EE:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f2e0bf6c-cef5-30de-ba1e-95211f495167.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:08:fd:fe:a1:db:03:b1:ba:54:f4:06:ee:54:fc:ac:60:5c:
         d3:e0:c1:79:b2:55:8f:5b:52:79:22:d3:de:f1:5d:84:b5:08:
         11:86:85:62:5d:e5:07:7b:74:4d:d0:45:09:7d:5e:5b:e8:38:
         55:a4:4a:47:14:ec:d2:aa:33:22:78:98:41:83:1e:8f:0d:8e:
         d1:4e:f7:e5:d0:9c:4a:91:dc:9c:e3:9e:9d:4e:60:fa:21:56:
         1e:6e:ff:e0:6c:db:a8:0b:7a:1c:88:ba:8e:24:69:91:c9:5e:
         7f:c1:fa:32:cb:85:dd:8a:b4:e4:a7:51:84:93:dd:26:f5:9a:
         8c:48:d0:b2:9c:33:7a:eb:92:a4:70:2e:0a:3b:bc:7e:bf:33:
         69:05:bc:46:45:bf:97:78:9f:e5:8a:00:6b:87:66:bf:46:b4:
         ea:99:ed:e7:5b:79:fd:a8:de:e4:62:ee:58:a5:95:98:75:b7:
         26:d0:d2:7e:91:60:8b:57:98:da:25:af:fd:ad:f8:ad:c5:51:
         7d:c6:72:cc:71:ef:09:5b:05:24:72:ec:51:9e:85:eb:91:01:
         24:56:02:cc:4c:47:6c:34:96:31:a1:20:64:e9:5a:fc:e0:d6:
         99:ac:f2:98:98:86:0b:d3:7b:5d:6f:29:b3:51:bc:32:e3:d2:
         ee:08:3c:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhOUUIeCIUvTM7oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NzAyYjkyM2MtYTgyMS00YWE3LTlhOTEtNmI4ZTBhY2E1OGEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyc1xDMv/ekmOxAHDZRBGEo2g6sVTZy6Z6NYo
yUrK5SRlk3fVpSawFKNAYW7WpVdSMnluJRR9c3eLpA04ljpCrmzLSQe+wXf3SsjQ
LoOLEUWttRYyNSDZarx6DA6RBNU3aw3sW9vmWkv+OzWakO8+hfPV6jwQKEJ6M7lu
zzJTzFV82cT/pCT/UyDp9ppH3/yT7tcOX36JiE0MXhSjpZOuW4EQHA4APCrv/WX3
t0woIknrr7+uBhWIF6kwZuvtzemMslFOhZC0ZrOkRlM5cdpSyyMFxfbLWliSDl8O
/vw5FGPTkcktDgAO3PA6V2BQOac5ed17UZpFfpkafnQ5rZKl3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEyjqIHIXMy2BX738I+5ya6MHu6BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZjJlMGJmNmMtY2VmNS0z
MGRlLWJhMWUtOTUyMTFmNDk1MTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIb6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKcI/f6h2wOxulT0Bu5U/KxgXNPgwXmyVY9bUnki097xXYS1CBGGhWJd
5Qd7dE3QRQl9XlvoOFWkSkcU7NKqMyJ4mEGDHo8NjtFO9+XQnEqR3Jzjnp1OYPoh
Vh5u/+Bs26gLehyIuo4kaZHJXn/B+jLLhd2KtOSnUYST3Sb1moxI0LKcM3rrkqRw
Lgo7vH6/M2kFvEZFv5d4n+WKAGuHZr9GtOqZ7edbef2o3uRi7lillZh1tybQ0n6R
YItXmNolr/2t+K3FUX3Gcsxx7wlbBSRy7FGeheuRASRWAsxMR2w0ljGhIGTpWvzg
1pms8piYhgvTe11vKbNRvDLj0u4IPHs=
-----END CERTIFICATE-----
Generated at Fri Sep 25 13:03:35 2026 by rpki-client