Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/618d1465-50a3-3c38-9fb8-67232b8d814a.roa
File:                     618d1465-50a3-3c38-9fb8-67232b8d814a.roa (raw, json)
Hash identifier:          MDwf+9RooPTzQmNlOPfjlpD14pEY9Owbh4k27JE73Uc=
Subject key identifier:   9E:67:B8:2C:D7:41:6F:F0:E5:99:0B:2C:25:A9:90:95:56:16:55:B4
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584EA79AF5F3BB2004CF627995E0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/618d1465-50a3-3c38-9fb8-67232b8d814a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15169
IP address blocks:        104.134.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:f5:f3:bb:20:04:cf:62:79:95:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6ee40cd4-893c-4ec5-8422-bb36667ebc96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:47:01:87:87:ee:5e:f3:15:e2:88:88:6a:65:
                    e4:23:ec:91:80:78:07:31:50:af:e2:89:67:8e:17:
                    91:ee:de:1e:51:5f:1d:06:f0:51:fa:e0:26:e7:16:
                    cd:b6:61:41:c5:b0:79:8e:d2:25:37:3a:e7:05:66:
                    4a:79:93:79:ed:75:78:21:18:9e:37:dd:b0:b0:a5:
                    57:7f:ab:bf:7f:fe:64:5c:85:fd:79:89:29:dd:a4:
                    65:34:95:eb:77:a5:da:29:9c:d8:3c:f2:25:41:09:
                    f4:32:65:22:cd:6b:de:2e:bf:f0:4a:34:64:ad:af:
                    c3:14:a9:c7:32:c0:5a:f8:83:cc:a3:d2:46:08:21:
                    d6:a6:e4:11:67:01:02:ff:25:a8:02:46:6b:06:2b:
                    83:58:a7:1c:df:42:a3:63:af:16:85:56:72:f2:ab:
                    0c:20:27:9e:59:fd:b5:ef:3c:bb:3b:dd:49:bc:c1:
                    77:0a:f0:a2:fa:bc:3b:56:13:49:a0:bb:17:78:f6:
                    2d:cc:80:6d:36:78:1e:d2:5c:be:cf:4b:fb:1d:3b:
                    18:15:4e:10:ce:db:e2:be:01:3d:17:cc:75:7f:a3:
                    04:74:55:ac:e8:5c:87:1e:0b:64:78:ad:22:e0:4b:
                    9a:a1:91:39:ee:50:9b:81:54:bd:15:6f:fb:71:20:
                    4e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:67:B8:2C:D7:41:6F:F0:E5:99:0B:2C:25:A9:90:95:56:16:55:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/618d1465-50a3-3c38-9fb8-67232b8d814a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:c7:42:9b:6a:be:f3:70:c5:94:f7:7b:16:9d:a6:2b:09:e8:
         63:9c:09:dd:b2:c0:88:1f:32:d9:7b:97:5a:6f:3b:fa:4d:e7:
         56:57:be:a9:1c:c3:02:49:09:bd:9e:69:c4:d7:96:1c:9a:23:
         65:72:1e:e2:de:60:c1:12:07:53:29:9c:48:c2:7a:24:03:bc:
         b4:6d:18:89:ec:e5:09:1f:bb:2d:1e:db:57:01:3b:b2:de:5e:
         84:61:40:92:b8:90:14:0d:2b:82:db:be:87:1b:33:73:1f:c4:
         10:c0:45:be:83:c8:35:ca:aa:fe:0b:0d:0f:18:9e:13:9b:5d:
         6c:48:a3:5d:ee:c1:fa:c9:42:66:97:e8:b5:fc:da:65:f0:3b:
         eb:38:1a:a0:1c:ca:1e:09:6c:4d:65:bb:28:18:be:75:50:46:
         df:19:37:73:b9:06:07:ad:b3:03:49:9b:6c:27:08:bb:88:87:
         e5:e9:32:52:fc:b2:8d:bb:93:78:0d:54:03:b4:bd:5d:c3:96:
         db:c7:64:b9:ed:61:69:20:81:27:f8:a8:90:7d:3a:2f:c3:5a:
         ac:0e:15:dc:82:99:38:91:de:27:ba:b9:bb:e2:e9:f3:96:8e:
         00:25:c4:6f:4e:48:18:fb:fa:d0:61:b1:63:7c:87:15:a1:45:
         12:2d:6e:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmvXzuyAEz2J5leAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NmVlNDBjZDQtODkzYy00ZWM1LTg0MjItYmIzNjY2N2ViYzk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEcBh4fuXvMV4oiIamXkI+yRgHgHMVCv4oln
jheR7t4eUV8dBvBR+uAm5xbNtmFBxbB5jtIlNzrnBWZKeZN57XV4IRieN92wsKVX
f6u/f/5kXIX9eYkp3aRlNJXrd6XaKZzYPPIlQQn0MmUizWveLr/wSjRkra/DFKnH
MsBa+IPMo9JGCCHWpuQRZwEC/yWoAkZrBiuDWKcc30KjY68WhVZy8qsMICeeWf21
7zy7O91JvMF3CvCi+rw7VhNJoLsXePYtzIBtNnge0ly+z0v7HTsYFU4QztvivgE9
F8x1f6MEdFWs6FyHHgtkeK0i4EuaoZE57lCbgVS9FW/7cSBOiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ5nuCzXQW/w5ZkLLCWpkJVWFlW0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNjE4ZDE0NjUtNTBhMy0z
YzM4LTlmYjgtNjcyMzJiOGQ4MTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIb4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADzHQptqvvNwxZT3exadpisJ6GOcCd2ywIgfMtl7l1pvO/pN51ZXvqkc
wwJJCb2eacTXlhyaI2VyHuLeYMESB1MpnEjCeiQDvLRtGIns5Qkfuy0e21cBO7Le
XoRhQJK4kBQNK4LbvocbM3MfxBDARb6DyDXKqv4LDQ8YnhObXWxIo13uwfrJQmaX
6LX82mXwO+s4GqAcyh4JbE1luygYvnVQRt8ZN3O5BgetswNJm2wnCLuIh+XpMlL8
so27k3gNVAO0vV3DltvHZLntYWkggSf4qJB9Oi/DWqwOFdyCmTiR3ie6ubvi6fOW
jgAlxG9OSBj7+tBhsWN8hxWhRRItbqw=
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:58:12 2026 by rpki-client