Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4bbe06be-8c9c-3f62-bdb8-f0fc765c86fd.roa
File:                     4bbe06be-8c9c-3f62-bdb8-f0fc765c86fd.roa (raw, json)
Hash identifier:          U8jx4DeGdhb/9Qp7BuXF1mKxTwDDJ7px5T0zTuzS+Ms=
Subject key identifier:   78:59:C5:51:CE:9D:DC:14:C5:B7:F0:CC:82:57:C3:25:0B:ED:DC:85
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584EA7968D4042693808ADB6EE20
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4bbe06be-8c9c-3f62-bdb8-f0fc765c86fd.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15169
IP address blocks:        104.134.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:8d:40:42:69:38:08:ad:b6:ee:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=68f7199b-ce50-4caf-a480-5856a8220a43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bb:64:e8:17:d9:3e:80:5a:df:0a:d5:43:10:
                    85:ee:22:9b:0d:3c:eb:50:c9:6d:ad:bc:17:38:b5:
                    c2:d6:c7:f8:63:50:6a:89:b3:b4:4f:ba:20:64:a4:
                    24:ab:e2:c7:32:8e:00:78:c1:87:42:ae:49:d3:6a:
                    09:14:a0:48:ad:e2:50:be:76:7c:cc:76:37:77:0a:
                    51:bb:5c:b5:9b:63:d2:b5:fc:26:ce:79:e5:a4:8b:
                    d8:df:c8:d2:f1:8b:ff:bc:b2:c6:13:90:0c:66:95:
                    e6:c0:ae:b9:f6:17:42:e2:5f:78:96:ba:fa:f2:5d:
                    6f:a9:17:13:20:44:ba:f1:d9:e3:39:b2:c1:d4:09:
                    20:7b:6a:88:b0:35:66:99:f2:52:b7:0d:12:66:b3:
                    0d:7c:72:c5:85:20:e5:f3:2d:fc:79:61:35:de:e4:
                    8e:d3:cf:71:65:19:27:79:b7:af:7b:2e:fb:0e:89:
                    56:e3:f5:c7:bb:6a:2f:02:dd:63:c1:e9:46:53:db:
                    44:77:f2:d1:b3:3f:26:8d:ee:84:78:1e:50:04:46:
                    ab:11:d3:39:d1:94:0c:cf:89:2c:31:e1:cd:66:59:
                    a5:4c:c5:de:21:aa:a2:3a:d5:c8:b2:1e:a4:39:64:
                    55:5c:4f:97:ca:5d:c8:44:b1:09:2b:2d:a9:e0:ae:
                    7c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:59:C5:51:CE:9D:DC:14:C5:B7:F0:CC:82:57:C3:25:0B:ED:DC:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4bbe06be-8c9c-3f62-bdb8-f0fc765c86fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:1e:e7:93:f1:7f:b4:d7:6c:45:39:65:70:16:16:11:83:35:
         5d:28:df:dd:eb:cc:79:0d:53:59:40:91:f9:76:d7:7c:83:f6:
         2c:8a:19:85:d8:d1:91:50:de:b0:18:f9:69:37:50:9c:22:fb:
         b8:da:10:fb:34:d3:91:0a:02:4f:d4:77:32:cf:5f:4c:44:bc:
         94:1d:6b:5a:0b:2c:69:7e:f3:67:42:1d:f9:25:a5:57:ff:aa:
         46:8b:26:7a:f4:54:6e:e3:30:b3:10:a1:bf:02:9a:17:68:13:
         03:56:34:26:be:1c:7a:52:31:78:f9:a4:c4:97:c0:8c:01:ef:
         88:da:dd:52:4a:53:70:13:35:fc:69:89:78:d1:5d:80:38:00:
         59:bd:ef:03:3f:1c:ad:f2:f4:de:2f:c3:bc:f4:0b:e3:49:84:
         02:99:87:76:22:c4:b1:30:27:38:1d:0c:b6:03:1f:dd:6b:c4:
         15:9c:46:ed:b4:e7:2c:98:3c:22:b7:6d:a6:f8:c5:12:07:d6:
         dd:88:08:89:7f:15:86:e9:4d:6d:0d:25:f4:ce:78:b6:d6:77:
         6f:07:19:1a:e7:c0:c3:16:38:b4:b4:1d:4d:73:8d:2d:5c:e3:
         4c:b4:dd:e3:4f:c0:f3:79:a8:39:86:6f:3a:ec:c6:e2:19:a1:
         1d:87:6c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:38:52 2026 by rpki-client