Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/50e3f98d-e28a-3077-ac38-6416187b8d24.roa
File:                     50e3f98d-e28a-3077-ac38-6416187b8d24.roa (raw, json)
Hash identifier:          /slzliyx9s3iTDBenNTLbq0XSDiuTLqih9aXtQETPNs=
Subject key identifier:   8F:F0:46:94:8D:54:3A:59:92:21:06:D5:47:F2:76:30:01:70:57:41
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584F6F23178D7879E27A77E55680
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/50e3f98d-e28a-3077-ac38-6416187b8d24.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     395973
IP address blocks:        104.134.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:23:17:8d:78:79:e2:7a:77:e5:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=51ec7caa-af6b-41e2-9091-6f824f6dae6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5e:fd:6d:66:ec:be:37:60:ac:a6:2a:8b:17:
                    84:49:ce:66:b9:b1:be:07:74:bb:b5:c1:a4:68:55:
                    48:bb:f8:10:0d:ab:ea:c4:00:4e:a9:06:22:41:d5:
                    c4:e6:fc:3c:c0:45:aa:26:0d:71:5e:27:5f:ad:11:
                    cf:3b:06:c1:a3:82:a2:0c:54:a5:f9:cb:40:a1:3b:
                    2e:98:b6:c1:ff:8c:27:80:54:de:dd:bf:c2:57:ca:
                    5d:c1:a1:56:63:a6:95:34:77:a7:53:29:32:2a:39:
                    22:7e:cb:a2:d4:bb:96:97:59:3b:28:15:18:b0:8b:
                    1d:31:d3:a6:47:1a:7a:c4:ef:fd:00:47:55:98:fd:
                    f9:89:f9:48:26:87:34:e9:8e:26:5e:aa:27:94:b5:
                    74:7e:6b:e6:b4:20:6d:9e:14:e6:bc:6b:4e:8b:73:
                    dd:ea:67:e2:2a:b6:b5:82:0f:de:68:75:3f:2f:56:
                    a1:4c:e8:03:1b:dc:97:68:b4:6d:2a:aa:6a:f5:99:
                    73:e7:b0:4d:34:a8:8f:03:03:e9:6b:34:04:ee:db:
                    85:d8:da:82:94:15:59:59:84:39:07:aa:f9:a6:5b:
                    af:61:1f:44:26:f6:d3:d7:74:4d:7e:96:b7:ab:16:
                    bb:60:cb:67:88:92:80:50:26:1e:2f:db:48:d6:95:
                    50:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F0:46:94:8D:54:3A:59:92:21:06:D5:47:F2:76:30:01:70:57:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/50e3f98d-e28a-3077-ac38-6416187b8d24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:22:01:4e:5c:59:1e:b7:9f:ac:2c:94:57:79:e2:87:8b:0c:
         73:4c:11:ba:19:11:d6:0a:4b:20:92:b2:c6:58:33:15:64:6e:
         2e:e4:3b:d7:20:dc:ff:9a:0d:ab:39:ce:70:23:49:f8:7c:fd:
         b4:5d:65:0d:27:b1:e4:95:ca:83:16:56:79:e5:e3:f9:f0:47:
         e8:47:4a:ab:55:7b:be:7e:b6:9b:be:c9:36:15:61:44:5c:ba:
         76:17:4a:9c:be:30:d1:f8:b9:c1:a7:96:bd:0a:24:7f:7f:b4:
         2b:2d:e1:aa:85:aa:f8:48:ed:8d:23:84:3d:8d:3f:e2:77:2c:
         20:21:41:39:df:ef:b9:93:13:aa:3c:72:09:35:6d:b1:78:99:
         1b:a9:79:72:eb:54:ce:54:d8:ff:3a:51:91:a0:23:ed:ea:97:
         16:11:99:2e:c3:87:2b:6c:86:27:ba:92:9a:7a:fb:12:cf:62:
         a9:d8:0a:68:9b:14:77:f2:e1:70:b2:2f:2a:c8:56:84:31:d1:
         2c:78:ec:23:ef:94:79:82:d1:bb:44:93:ea:79:7e:14:b6:f7:
         98:4e:50:ce:1c:0e:f9:eb:bc:52:1e:5c:24:97:2d:3d:61:bd:
         35:5e:06:19:10:5b:51:fe:9c:db:38:87:f8:7f:0f:61:31:b0:
         41:bb:ce:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:24:30 2026 by rpki-client