Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0dd6621b-2623-36b3-af5c-99f07dc59cf1.roa
File:                     0dd6621b-2623-36b3-af5c-99f07dc59cf1.roa (raw, json)
Hash identifier:          4mL4o+toMcySDWPILFppm7H++Yy13imOSsYcu2d6rNM=
Subject key identifier:   68:19:93:F4:6C:8F:99:D3:2B:D3:2D:6E:C8:F8:42:66:24:8F:31:51
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584EA7955E4245186D0B32DBF0A0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0dd6621b-2623-36b3-af5c-99f07dc59cf1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     41264
IP address blocks:        104.132.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:5e:42:45:18:6d:0b:32:db:f0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1c61723c-6eed-42a4-bb27-5bee5e6b10b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3e:3b:f7:32:5e:74:f8:9c:0e:67:66:a5:f4:
                    9d:4d:c8:36:9c:5d:2e:dc:a8:87:d1:b4:86:f1:49:
                    88:36:d3:fa:3f:7a:5e:dd:27:28:bf:5a:9e:9d:74:
                    88:d4:56:77:64:33:87:df:db:db:ac:47:fe:bf:22:
                    dc:06:91:fe:0b:c7:00:b7:63:7a:99:fd:b1:6d:18:
                    00:b3:e4:d6:25:af:02:e8:af:2b:0c:59:00:f0:54:
                    14:d6:bf:df:b1:64:cf:85:0a:47:7d:d2:59:79:cf:
                    00:39:dc:d5:01:92:f7:76:bc:00:58:d9:01:e9:2f:
                    67:7b:ea:27:0f:26:31:55:97:7e:26:ea:12:44:8a:
                    66:f5:8e:37:47:ae:e0:85:06:3b:a4:cb:38:8e:6a:
                    1d:d8:14:14:13:62:78:03:3a:87:03:d8:dc:6a:7c:
                    ab:d8:cb:ac:8f:06:e7:1e:96:da:ef:2e:94:4c:52:
                    c9:35:c0:38:68:df:59:2c:d1:ff:3b:2d:dc:43:6e:
                    30:c2:0a:b9:ae:40:80:73:82:a4:75:37:5b:a0:69:
                    5a:a6:0e:28:6f:38:ee:98:a0:b4:da:00:9a:47:d6:
                    0d:0a:b9:93:dc:05:b8:eb:46:a6:75:1d:1b:ba:c2:
                    b2:64:83:cf:cc:76:e7:16:86:4a:fd:c4:d7:59:63:
                    11:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:19:93:F4:6C:8F:99:D3:2B:D3:2D:6E:C8:F8:42:66:24:8F:31:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0dd6621b-2623-36b3-af5c-99f07dc59cf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:32:3d:ab:41:6e:53:fa:8f:ff:5c:0d:4b:49:6f:7a:72:1e:
         fd:5e:e3:44:f2:66:16:15:82:a9:ab:1f:85:bf:68:6b:44:99:
         9b:d5:a7:ec:81:0d:96:19:db:94:0d:e0:0c:6e:b3:22:20:c6:
         9b:94:d5:cf:12:88:b9:3c:b6:87:c6:02:9d:18:8d:58:b7:c8:
         e0:9a:65:74:7c:4c:f4:52:e0:bf:35:33:43:e9:7a:e4:30:cd:
         ee:32:07:36:a0:01:58:e9:55:c3:b4:c7:3a:c6:00:a8:b3:f9:
         7c:ac:e7:6b:a6:23:34:af:35:53:6a:fe:de:66:27:5b:b1:1f:
         98:ee:c9:44:f6:62:3e:a5:20:5a:d5:60:39:c4:d3:24:de:29:
         dc:d9:3f:11:6f:33:58:5c:63:89:a5:52:f6:fa:20:79:b1:ca:
         4d:02:d1:02:83:1c:8a:47:51:6f:9c:68:fa:f3:2a:e8:ab:b5:
         8b:7b:15:c4:75:85:ab:e9:be:85:da:93:d6:69:a0:1e:93:33:
         e7:fa:f4:bc:f9:94:c2:27:29:dc:3b:1d:b7:7b:d2:6f:ab:5e:
         dc:65:cd:6c:e6:c8:ec:72:63:e8:7d:6c:93:e4:74:f8:68:20:
         e2:cc:3a:69:05:30:60:2b:3a:37:bd:87:bc:94:f6:f8:57:98:
         75:c7:98:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlV5CRRhtCzLb8KAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MWM2MTcyM2MtNmVlZC00MmE0LWJiMjctNWJlZTVlNmIxMGIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz479zJedPicDmdmpfSdTcg2nF0u3KiH0bSG
8UmINtP6P3pe3Scov1qenXSI1FZ3ZDOH39vbrEf+vyLcBpH+C8cAt2N6mf2xbRgA
s+TWJa8C6K8rDFkA8FQU1r/fsWTPhQpHfdJZec8AOdzVAZL3drwAWNkB6S9ne+on
DyYxVZd+JuoSRIpm9Y43R67ghQY7pMs4jmod2BQUE2J4AzqHA9jcanyr2Musjwbn
Hpba7y6UTFLJNcA4aN9ZLNH/Oy3cQ24wwgq5rkCAc4KkdTdboGlapg4obzjumKC0
2gCaR9YNCrmT3AW460amdR0busKyZIPPzHbnFoZK/cTXWWMR3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGgZk/Rsj5nTK9Mtbsj4QmYkjzFRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMGRkNjYyMWItMjYyMy0z
NmIzLWFmNWMtOTlmMDdkYzU5Y2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACcyPatBblP6j/9cDUtJb3pyHv1e40TyZhYVgqmrH4W/aGtEmZvVp+yB
DZYZ25QN4AxusyIgxpuU1c8SiLk8tofGAp0YjVi3yOCaZXR8TPRS4L81M0PpeuQw
ze4yBzagAVjpVcO0xzrGAKiz+Xys52umIzSvNVNq/t5mJ1uxH5juyUT2Yj6lIFrV
YDnE0yTeKdzZPxFvM1hcY4mlUvb6IHmxyk0C0QKDHIpHUW+caPrzKuirtYt7FcR1
havpvoXak9ZpoB6TM+f69Lz5lMInKdw7Hbd70m+rXtxlzWzmyOxyY+h9bJPkdPho
IOLMOmkFMGArOje9h7yU9vhXmHXHmKY=
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:58:27 2026 by rpki-client