Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1b32701f-83a8-3c66-b7ae-56dc9ac0cb01.roa
File:                     1b32701f-83a8-3c66-b7ae-56dc9ac0cb01.roa (raw, json)
Hash identifier:          hdhNnSD7iQBSj4byI4lRT1yVwLin/rn/250aVBWbGcE=
Subject key identifier:   F6:BE:A5:8B:1B:95:42:BA:3E:B5:AC:70:D6:35:61:C7:D5:B5:1A:0A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584EA79AF9DEA675899FAD3E1900
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1b32701f-83a8-3c66-b7ae-56dc9ac0cb01.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     41264
IP address blocks:        104.134.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:f9:de:a6:75:89:9f:ad:3e:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=22fe372d-25d0-4f8e-9b78-62629534198b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7f:af:c2:ff:92:d5:18:2f:68:a2:86:74:03:
                    cf:94:df:90:95:b2:6e:27:5f:2e:de:f7:f2:5b:45:
                    cf:6f:e0:a4:9c:97:72:ec:86:6e:3b:02:bf:bd:8f:
                    c5:3e:ac:05:d6:3d:65:c8:45:f8:8f:71:ce:5e:1c:
                    af:3d:76:08:7a:d1:91:20:56:68:73:84:2a:e7:22:
                    5f:9a:ed:3b:39:7f:0a:f8:53:66:74:cf:94:f2:5d:
                    55:2d:f6:56:ca:f3:e3:60:33:61:dc:22:ee:00:1b:
                    44:24:a0:df:50:70:c7:0f:22:97:16:f7:3b:60:9b:
                    4b:dc:90:68:36:cd:9d:8d:10:fb:e3:83:27:84:91:
                    c6:ac:bf:0a:e5:17:5d:1b:6e:30:45:05:e6:eb:fb:
                    2a:91:4c:3d:09:1b:1f:0a:7e:c2:1f:f7:ee:03:58:
                    2f:85:83:a1:64:20:5c:a6:d7:3b:3a:8a:d7:40:8a:
                    10:d3:2a:65:16:3f:5a:a3:82:d7:c3:be:96:f3:44:
                    a3:f5:3a:06:88:cf:d7:08:d9:cc:0d:56:3e:ae:48:
                    f2:c1:2a:77:35:c2:90:74:8c:bf:4a:58:59:e8:ee:
                    16:3f:c7:75:b9:ab:63:34:f1:2d:d3:34:4e:be:d3:
                    49:15:ea:a7:65:be:e6:a0:e9:e9:2e:a2:d9:08:9a:
                    04:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BE:A5:8B:1B:95:42:BA:3E:B5:AC:70:D6:35:61:C7:D5:B5:1A:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1b32701f-83a8-3c66-b7ae-56dc9ac0cb01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:48:9b:8e:20:d8:be:c3:f1:1e:d9:89:34:5f:ed:93:9d:3d:
         68:fa:9b:76:3b:59:66:da:aa:9f:d3:69:1d:18:f6:ed:94:4c:
         7b:12:12:a3:4d:64:77:e9:e9:e4:8e:0c:2b:36:5f:71:2d:48:
         ad:d6:39:e2:77:b1:f0:12:2a:2e:d7:9f:97:2b:57:0a:f8:78:
         89:2c:65:ac:ee:3a:8e:d5:d7:86:36:72:80:5c:06:dc:19:dd:
         dc:de:f1:c3:c4:8b:0f:18:09:ea:68:d0:94:3e:ed:9f:20:b9:
         ca:af:bf:36:4c:e0:ec:3b:ee:1f:0a:1c:7a:1d:c1:d2:db:86:
         82:96:8d:e6:b7:b9:6f:93:7c:51:ee:87:af:4e:bc:e9:29:e9:
         05:37:51:eb:66:0d:0a:dd:bc:d2:31:ec:ad:46:63:4a:3c:f0:
         f7:92:58:c9:e8:94:e7:8b:e0:f9:fa:ae:48:2f:77:5a:de:c4:
         f8:3b:72:9c:57:6f:97:51:f0:1b:ed:ff:83:41:2f:86:2f:95:
         49:fe:f3:fd:6e:51:af:6e:bb:6d:05:2a:2a:d3:87:0f:08:df:
         ba:50:50:af:b2:98:24:21:82:f9:af:93:df:9b:a6:bb:10:9d:
         30:de:db:85:47:9b:4b:a0:fa:1e:c4:97:61:31:1d:89:67:e7:
         54:33:24:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:26:14 2026 by rpki-client