Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/61d2ee20-112c-3dde-ad10-b128663e53a2.roa
File:                     61d2ee20-112c-3dde-ad10-b128663e53a2.roa (raw, json)
Hash identifier:          FCi15ye17WWN45hEDIJ0aYa1QUrMl9FTAFDG+kwNKSU=
Subject key identifier:   F7:DC:A3:AA:98:EE:67:85:AA:CB:78:4B:E3:4A:AB:ED:B7:A3:0C:D1
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584EA796B09C4411072DD5B2F840
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/61d2ee20-112c-3dde-ad10-b128663e53a2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     41264
IP address blocks:        104.133.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:b0:9c:44:11:07:2d:d5:b2:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f9290727-423d-421e-be37-1fcd23c467e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:eb:41:23:7f:d5:3b:f0:78:a7:40:59:49:9c:
                    cf:fc:44:b6:b6:79:c3:59:45:50:14:c9:4e:2d:7e:
                    27:8c:a1:86:10:e0:68:7c:f5:8d:9e:27:59:f0:6d:
                    57:65:24:fd:b0:e4:0e:13:a6:67:83:af:0e:8e:eb:
                    40:fa:a8:89:6f:18:0c:cc:6b:91:b1:21:a1:4f:ac:
                    4b:f2:14:21:df:a4:0b:ae:b4:29:ac:3b:1a:89:0b:
                    30:65:f1:e5:5c:59:f6:e4:93:d9:21:f8:86:40:50:
                    52:e9:e8:32:44:ce:de:cd:4e:70:96:c8:8b:1e:5e:
                    12:80:46:72:37:dc:61:a0:f6:5c:dc:d5:2d:b9:08:
                    fd:93:fc:17:4d:61:7e:67:cf:e1:49:c2:77:26:42:
                    60:fb:da:9f:a4:b7:87:e3:aa:8e:b9:bf:33:2c:89:
                    9f:e8:1b:0f:31:ea:6a:9e:9e:bd:14:34:d1:a6:51:
                    df:ab:70:53:be:7a:ff:15:0f:30:e9:c5:b4:4c:5b:
                    88:a7:ba:48:55:b6:76:0a:e8:2a:9b:19:84:48:ac:
                    39:5a:77:5d:0f:92:85:c5:76:f7:98:b0:81:82:61:
                    55:3f:8d:23:8d:3d:82:09:6d:c8:2a:9c:ba:d1:f4:
                    71:27:f3:78:68:d4:35:b9:d3:e1:15:ed:be:7e:a0:
                    e8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:DC:A3:AA:98:EE:67:85:AA:CB:78:4B:E3:4A:AB:ED:B7:A3:0C:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/61d2ee20-112c-3dde-ad10-b128663e53a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:0d:5a:5b:ad:da:ea:40:ba:07:82:0f:8c:dd:e0:e5:85:a2:
         47:64:ed:74:56:32:f2:49:6e:77:26:b8:17:ab:d5:06:5b:39:
         4c:25:c5:d0:6f:a1:64:47:5a:d5:68:1d:57:14:6a:4d:ed:d6:
         e9:73:9b:79:a7:97:d4:98:e1:52:47:10:c2:e2:e6:76:b3:4b:
         90:77:69:b0:f3:e8:41:62:79:2a:58:f9:8a:de:56:70:96:e4:
         a9:b8:fa:35:73:46:b2:ea:a8:60:3d:ea:81:1f:8d:f0:19:44:
         22:38:48:d8:b4:0a:93:e3:d0:8e:6c:21:7f:cf:85:80:dd:d9:
         47:ec:b9:26:24:42:bf:10:af:5b:e3:df:4f:60:5c:09:29:09:
         0a:e7:09:61:bd:2c:9b:6f:c8:af:80:0d:d2:93:56:5c:61:45:
         99:84:63:4e:be:72:89:e1:d3:87:45:5c:dc:27:21:65:2a:79:
         0d:91:e1:a1:1c:10:f0:6a:16:8d:44:33:9b:eb:c1:af:c6:aa:
         71:a4:9d:8f:a8:13:f5:9b:7e:c6:a9:1f:8d:4b:53:0f:ed:de:
         c1:3a:4a:7b:2b:2e:fe:0c:53:d7:f9:7d:53:06:72:02:37:0d:
         1b:79:3e:a0:71:e5:8f:31:e9:fb:71:1a:54:88:d7:3e:e1:da:
         c0:fd:97:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 04:16:05 2026 by rpki-client