Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/104cbd4a-65d7-35eb-bfe2-dde4a24d3160.roa
File:                     104cbd4a-65d7-35eb-bfe2-dde4a24d3160.roa (raw, json)
Hash identifier:          abVVcZE3tErMfrUajtEKwdYLybeA9LVTytrv96NcVQg=
Subject key identifier:   B1:D4:67:51:29:C3:E8:98:3F:71:A4:65:41:19:74:4E:3B:83:75:8F
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584EA794A985EED42D47D4619F20
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/104cbd4a-65d7-35eb-bfe2-dde4a24d3160.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     41264
IP address blocks:        104.132.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:a9:85:ee:d4:2d:47:d4:61:9f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=571a8ec7-7f0a-4d83-89f8-2f7145474462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6f:bf:4a:ff:bb:21:fd:c7:87:a3:8e:04:37:
                    f4:80:ee:4b:46:70:5a:94:c9:0e:5a:17:7f:9f:f0:
                    ff:bd:29:50:bc:9b:cd:52:3c:77:68:38:ee:75:58:
                    19:ef:5b:79:8e:ae:52:df:6e:a9:25:80:c9:9b:e3:
                    5a:7a:30:84:bc:fe:df:4a:29:70:83:5e:4d:ee:79:
                    88:7c:05:e3:1a:2a:34:f6:5e:c3:02:10:d8:32:a1:
                    c6:8a:63:72:8c:4a:4d:b6:96:5b:de:d2:b0:7d:09:
                    9e:7b:24:3c:7b:d8:67:8b:43:41:08:2f:47:81:8b:
                    70:e8:5c:3e:83:db:22:33:bd:35:bb:59:73:ec:e7:
                    6f:77:7c:6d:4e:2d:c8:44:4c:a2:5e:b2:7c:c5:4e:
                    ff:d4:bd:f1:7a:b2:ee:90:57:62:35:0c:6a:2d:d5:
                    8a:1b:d0:ac:8e:5a:92:16:b6:1d:86:0a:a0:82:cf:
                    54:40:79:7e:6f:1a:66:22:60:d2:53:57:fb:cc:da:
                    b5:82:37:47:51:09:21:98:c1:70:d5:f0:54:7f:e4:
                    1c:de:79:f3:9b:27:27:7b:b9:65:de:d0:2c:ce:f5:
                    ce:7e:5e:17:64:fa:fb:ef:96:54:db:64:5d:4d:30:
                    ee:e2:d8:12:b3:b1:5a:0b:bd:96:50:f8:79:8d:67:
                    08:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D4:67:51:29:C3:E8:98:3F:71:A4:65:41:19:74:4E:3B:83:75:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/104cbd4a-65d7-35eb-bfe2-dde4a24d3160.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:fc:6e:f7:0c:36:bf:d2:36:53:df:d6:f0:65:a0:2e:bc:21:
         69:87:9b:49:9c:ed:a8:c1:89:05:fb:6a:a5:4b:7d:03:de:ce:
         bd:85:2b:8d:f0:f9:c5:55:1b:d0:d4:48:76:3d:c8:b9:05:2c:
         b4:15:a3:4c:56:38:88:72:bc:06:7a:e7:3d:41:d3:a7:31:29:
         77:cf:af:55:50:fe:e4:cc:0d:73:ac:b5:9f:6a:46:3b:bc:31:
         ae:34:76:c6:2a:67:aa:8c:3c:6b:34:3b:0a:d9:73:49:95:90:
         ac:dc:09:66:18:40:10:ef:c9:12:fc:85:cc:33:80:ba:2d:0c:
         28:13:4e:94:0b:ff:19:c5:86:bc:dc:42:27:fd:9b:6e:1b:a8:
         82:b5:6f:bc:46:64:53:c5:41:40:65:ef:e0:7d:db:6a:35:80:
         35:8c:d1:33:d9:03:da:2a:5f:19:ae:ac:91:24:64:fc:4f:e7:
         cc:2b:53:b9:b0:80:19:b7:60:34:84:d6:ad:69:c7:8e:fa:b1:
         0c:fc:28:6d:a2:7e:30:1a:e9:2b:d8:e5:bb:7d:04:8a:24:8e:
         49:78:ea:75:a4:7d:08:46:6f:b0:c9:53:92:44:15:1e:43:f4:
         dd:db:ba:6d:fc:c8:ae:52:aa:82:97:a4:85:06:af:f7:b7:19:
         eb:c9:35:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:46:06 2026 by rpki-client