Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3588427b-bba9-3548-84b8-e4c0bb26d466.roa
File:                     3588427b-bba9-3548-84b8-e4c0bb26d466.roa (raw, json)
Hash identifier:          5OB0wXc7GLbp5hg0SBX2nUAsc7DMYzSD5WaVUA9RYR0=
Subject key identifier:   C6:73:C7:63:26:D8:FA:71:F5:82:38:71:7B:28:E4:A9:AD:6C:11:41
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584F497CB85E8F97386B035D4F80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3588427b-bba9-3548-84b8-e4c0bb26d466.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     395973
IP address blocks:        104.134.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:b8:5e:8f:97:38:6b:03:5d:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=39f4c806-aed0-4727-877c-bb62b9188087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:61:2e:76:54:bc:ba:25:6e:05:73:91:64:0b:
                    f3:8d:ba:4e:8d:2d:60:d1:fc:ff:74:26:db:ed:b3:
                    08:43:76:af:8b:d4:aa:03:03:7b:40:36:9f:89:46:
                    27:e6:d2:a5:e4:fa:17:33:da:f7:b6:87:9d:6e:23:
                    69:41:b0:36:c3:e0:7d:27:ba:ab:be:d2:67:00:30:
                    40:3b:62:71:1b:9e:60:68:01:6d:bc:fb:7b:b8:76:
                    79:49:54:b3:21:90:a6:69:fd:e9:aa:77:da:5d:c4:
                    4a:94:a0:9f:7c:9f:8f:ce:5c:29:cd:25:2e:a7:08:
                    f7:bf:f6:0d:4e:67:d6:3f:10:b9:38:1f:2b:26:e2:
                    59:e3:e3:4b:ef:63:ba:c4:82:46:76:1d:6d:ca:bd:
                    23:36:10:0f:90:a3:fb:aa:5f:ae:6f:3f:e8:e4:96:
                    ba:1f:04:d8:62:ae:a7:e3:bf:78:c4:34:f2:7a:d6:
                    a1:f1:0b:06:f3:c7:ad:ee:00:82:0f:3c:e9:19:b4:
                    8b:0e:7c:6d:7a:1e:5a:be:27:a4:1b:c4:75:01:d8:
                    2a:dc:c1:b9:ad:42:80:f8:03:c7:30:f0:f9:ae:f8:
                    ff:a6:66:05:ed:66:d6:58:81:a2:ba:af:ef:a5:5b:
                    e5:a9:92:83:81:a1:cb:99:27:99:cf:ab:6a:61:91:
                    44:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:73:C7:63:26:D8:FA:71:F5:82:38:71:7B:28:E4:A9:AD:6C:11:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3588427b-bba9-3548-84b8-e4c0bb26d466.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:59:44:09:86:af:9f:9f:a9:a3:dd:1c:4a:8e:4c:c8:ae:58:
         a6:68:75:eb:80:a5:94:11:af:e9:5c:48:a6:4e:8b:42:4b:4c:
         b4:b3:4d:e6:4a:92:27:2d:3e:12:ab:25:13:49:c8:42:70:6f:
         75:14:96:59:0d:60:74:6c:83:3b:f8:f6:f4:3b:54:9b:b4:79:
         85:ef:49:77:eb:75:5b:42:04:f3:55:ac:6a:e5:cf:cc:14:22:
         56:c0:89:73:7d:e9:d3:b8:b1:50:42:e9:26:da:bd:ff:a1:f1:
         49:cc:06:5a:f1:fd:f4:eb:8f:a2:e3:df:2e:d7:4c:fc:cf:57:
         d0:59:5f:ab:18:e7:fb:2d:ce:0d:37:90:93:41:3d:03:ac:76:
         a8:da:cf:db:d8:b8:43:1a:ab:70:e9:ab:ba:89:ff:86:ad:99:
         95:4a:0f:d7:a8:f5:c2:02:29:28:83:77:c8:82:d5:55:01:08:
         16:1d:ad:05:60:eb:80:89:05:0b:23:90:d2:7d:ba:15:c8:99:
         5f:31:d6:09:3a:8c:59:c4:ed:3a:94:07:7a:1d:45:51:6f:3f:
         09:cc:e6:83:7b:06:88:b6:04:3a:db:e4:d2:cf:0a:21:31:55:
         f0:52:63:c3:04:80:18:e9:25:57:bf:9a:28:8e:cb:5c:bb:4b:
         16:4d:25:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:25:27 2026 by rpki-client