Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2c2462db-9830-37e5-b3c0-b743a8d54064.roa
File:                     2c2462db-9830-37e5-b3c0-b743a8d54064.roa (raw, json)
Hash identifier:          Vm4QMTDUWdU72HLyQuMcqD+8080vKn2hJvUMtavp80c=
Subject key identifier:   A4:F9:63:FD:39:FD:67:59:3E:86:4A:16:8E:30:04:38:C6:97:B8:FB
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584F5A32C4DF5572F9835B205280
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2c2462db-9830-37e5-b3c0-b743a8d54064.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     36411
IP address blocks:        104.134.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:c4:df:55:72:f9:83:5b:20:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=cc77b3df-ef53-4a66-906a-703a512c01b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:85:52:46:b6:ea:dc:f2:8e:de:3e:43:98:22:
                    bb:d5:4e:11:40:6c:ce:a5:54:8c:a3:32:56:dc:50:
                    f5:b9:34:6f:f6:6e:c4:c1:1d:99:4f:48:ea:e9:cd:
                    56:e3:74:c0:36:22:19:3a:34:30:dd:59:a7:43:89:
                    8e:eb:89:b8:d0:bf:c7:54:b2:71:4b:1e:97:3b:30:
                    2a:17:62:5e:c0:f3:fa:9d:f5:72:54:c0:87:7f:60:
                    0d:ec:4d:41:19:9d:18:f4:73:28:4c:27:8c:99:28:
                    c8:ed:3a:72:a5:08:64:ea:42:0c:48:92:2e:1e:13:
                    37:35:cf:9a:d3:22:bb:e0:13:e4:b2:7c:82:7d:bc:
                    05:93:da:ba:a8:8c:66:38:68:34:ca:08:4d:04:c4:
                    12:38:36:b6:12:d2:e7:26:d6:5e:29:d3:d1:d7:c9:
                    5c:41:06:ea:cd:c8:53:92:60:54:c3:fc:0c:d8:d9:
                    a7:72:79:17:65:21:da:a3:20:26:da:21:06:01:7b:
                    90:c8:8e:33:dd:12:aa:21:f5:59:a6:4a:c6:f2:e3:
                    a3:f2:bc:1e:41:b9:70:6a:88:cc:0d:03:6a:d9:a9:
                    3b:7b:4c:a5:dc:22:58:e8:88:ee:60:9c:fd:4d:76:
                    cd:a5:fe:52:33:fd:d7:28:26:5b:d1:be:45:81:49:
                    a8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F9:63:FD:39:FD:67:59:3E:86:4A:16:8E:30:04:38:C6:97:B8:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2c2462db-9830-37e5-b3c0-b743a8d54064.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:17:2c:36:f4:3f:6c:2a:73:3e:ff:87:89:9e:52:65:52:1e:
         14:3f:29:47:a5:6a:ef:bd:d1:9d:59:95:59:c3:5c:50:75:e2:
         e7:d0:62:4a:35:00:96:0e:7f:af:e4:06:f7:b9:52:c8:aa:7c:
         07:0d:b6:d5:bc:bb:5c:ef:37:9b:c4:74:62:96:4c:3b:2c:36:
         ff:b7:5a:24:9c:96:fa:e0:3e:62:83:2c:ea:55:2e:3c:7a:89:
         b5:ec:91:24:32:d6:86:ae:c6:3f:26:17:65:50:9e:c2:6e:40:
         ef:26:ce:ad:71:3d:2a:8d:f5:8b:b5:f6:fb:a5:9f:8a:28:1f:
         33:8f:65:13:ad:54:54:b6:6f:e1:31:b1:e2:c4:a0:81:4a:72:
         b7:0b:02:0a:50:d5:b0:c2:8f:ff:0c:5f:16:a7:b1:24:5e:a2:
         29:27:d4:fe:90:ea:aa:19:fd:00:af:bc:e1:70:f0:48:8e:a5:
         69:89:9a:df:f5:79:a9:58:59:a7:05:9e:98:b8:ff:0e:90:82:
         6c:48:d5:df:28:6b:31:f3:3d:47:46:85:f0:21:f1:34:f2:b0:
         74:21:60:7a:f8:73:11:7a:28:01:28:2e:08:73:95:2c:86:43:
         9d:0d:05:c9:fe:ef:2a:4b:72:6e:db:b9:ce:dc:ce:8f:c3:c4:
         7a:10:ed:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMsTfVXL5g1sgUoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk
Y2M3N2IzZGYtZWY1My00YTY2LTkwNmEtNzAzYTUxMmMwMWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoVSRrbq3PKO3j5DmCK71U4RQGzOpVSMozJW
3FD1uTRv9m7EwR2ZT0jq6c1W43TANiIZOjQw3VmnQ4mO64m40L/HVLJxSx6XOzAq
F2JewPP6nfVyVMCHf2AN7E1BGZ0Y9HMoTCeMmSjI7TpypQhk6kIMSJIuHhM3Nc+a
0yK74BPksnyCfbwFk9q6qIxmOGg0yghNBMQSODa2EtLnJtZeKdPR18lcQQbqzchT
kmBUw/wM2NmncnkXZSHaoyAm2iEGAXuQyI4z3RKqIfVZpkrG8uOj8rweQblwaojM
DQNq2ak7e0yl3CJY6IjuYJz9TXbNpf5SM/3XKCZb0b5FgUmouwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKT5Y/05/WdZPoZKFo4wBDjGl7j7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMmMyNDYyZGItOTgzMC0z
N2U1LWIzYzAtYjc0M2E4ZDU0MDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIZ8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHAXLDb0P2wqcz7/h4meUmVSHhQ/KUelau+90Z1ZlVnDXFB14ufQYko1
AJYOf6/kBve5UsiqfAcNttW8u1zvN5vEdGKWTDssNv+3WiSclvrgPmKDLOpVLjx6
ibXskSQy1oauxj8mF2VQnsJuQO8mzq1xPSqN9Yu19vuln4ooHzOPZROtVFS2b+Ex
seLEoIFKcrcLAgpQ1bDCj/8MXxansSReoikn1P6Q6qoZ/QCvvOFw8EiOpWmJmt/1
ealYWacFnpi4/w6QgmxI1d8oazHzPUdGhfAh8TTysHQhYHr4cxF6KAEoLghzlSyG
Q50NBcn+7ypLcm7buc7czo/DxHoQ7Tk=
-----END CERTIFICATE-----
Generated at Fri Oct 30 18:10:55 2026 by rpki-client