Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/697911ec-12af-34f1-bc13-42e5be022e19.roa
File:                     697911ec-12af-34f1-bc13-42e5be022e19.roa (raw, json)
Hash identifier:          +ZAe9ipuQRyT1JMriMfW+ziVtCKT/WLIL+7jA4OmxiI=
Subject key identifier:   31:59:DE:0D:46:69:0F:9A:E0:BD:44:AD:6A:57:3A:25:59:28:94:D7
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584EA79687351B631402EF6097E0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/697911ec-12af-34f1-bc13-42e5be022e19.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15169
IP address blocks:        104.134.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:87:35:1b:63:14:02:ef:60:97:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=03e233a6-ff0f-4f7f-a562-085934bacf7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:83:20:c3:3f:b4:b6:e1:aa:82:29:fb:35:da:
                    46:3f:a3:00:cc:01:39:4c:9a:d7:8b:dc:c9:b3:dc:
                    9c:5e:23:81:17:f5:e1:3a:66:f2:95:20:dd:ce:c3:
                    fa:b7:76:44:ca:05:6e:90:72:07:2e:7d:e4:d4:6c:
                    9b:bb:e7:9b:3a:1c:8c:b1:dc:42:91:1a:01:8c:5a:
                    33:e0:1d:42:00:26:4a:e5:2d:84:ab:c9:0a:02:68:
                    b1:51:55:3d:ab:11:1f:21:f4:4e:8d:0d:0a:19:82:
                    2b:41:6f:6f:62:40:01:be:74:77:d0:18:27:ff:53:
                    11:2a:56:48:67:b7:d5:c2:44:6e:98:5b:01:81:b6:
                    7d:ca:66:ce:04:07:69:3e:ba:ea:f0:07:53:4f:44:
                    dc:6d:12:7b:c6:d8:6e:0c:b2:1e:f1:c3:82:3d:c9:
                    7e:5b:7d:07:13:8b:7c:b7:32:bf:9f:26:ce:7d:f6:
                    b7:25:79:1f:e0:86:06:ca:5a:49:72:b1:0f:d2:82:
                    11:db:19:a4:b3:49:fe:03:58:e0:32:6c:1c:6d:91:
                    00:d2:fc:28:26:6f:17:f3:7e:7b:de:6b:2c:79:81:
                    5e:fc:17:82:73:9a:7f:ea:b3:b1:99:f7:ea:e7:d8:
                    9a:aa:c6:47:a4:29:85:45:e3:0c:24:87:d5:e8:6b:
                    fa:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:59:DE:0D:46:69:0F:9A:E0:BD:44:AD:6A:57:3A:25:59:28:94:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/697911ec-12af-34f1-bc13-42e5be022e19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:5d:41:64:fd:d2:9c:bf:3e:03:60:cc:30:f5:d0:e4:89:50:
         e3:f3:8b:96:a8:30:e0:8c:f7:b0:b5:d4:ae:48:c0:7e:80:d0:
         32:61:f1:69:b1:a5:55:e0:06:49:7a:22:ef:51:ab:70:7d:e4:
         1d:a5:6e:58:f5:b4:c2:07:fd:da:6a:19:22:cd:26:55:6a:66:
         4d:a2:e9:ac:45:d0:de:67:44:47:16:41:62:fa:10:ab:15:53:
         0e:08:c3:a8:b9:66:39:45:15:8c:ab:50:c0:a4:c8:fe:2d:96:
         b9:9d:31:60:9f:bf:be:5e:1a:b5:b7:f5:6d:70:71:89:f4:e7:
         c7:b2:00:b2:31:74:c6:12:d1:84:17:2d:c3:e5:fe:d4:db:0b:
         f7:71:36:32:a5:e8:5a:24:8e:13:07:e4:ce:76:5e:10:b3:e3:
         8f:0f:d6:82:e8:5d:ac:16:8f:d9:de:0e:a2:bb:cc:be:5d:fe:
         d6:94:b2:18:84:c8:6f:70:4b:e3:a2:28:85:ff:4c:8c:57:62:
         46:da:eb:a7:97:34:2e:fa:f8:4e:ce:cb:b4:4a:e7:52:19:8d:
         28:e1:83:c0:f9:4e:84:51:b2:48:f0:15:17:72:95:c7:d4:aa:
         e5:a1:22:dc:d5:34:f0:bb:09:4b:d6:de:1c:a6:b7:ef:f2:24:
         6f:5a:c0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:38:10 2026 by rpki-client