Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6de5d762-aefc-36bc-827f-4c17794569a8.roa
File:                     6de5d762-aefc-36bc-827f-4c17794569a8.roa (raw, json)
Hash identifier:          0LS7O5OAfFNbkMrqv0tPIe3WDPlKoNDrDsQ3OeS+gIk=
Subject key identifier:   A8:2F:11:85:EA:39:2C:C5:37:23:EF:2A:CD:AA:E8:DA:86:46:6A:32
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584EDB2C8DC3C6C01446737B2098
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6de5d762-aefc-36bc-827f-4c17794569a8.roa
Signing time:             Sun 16 Aug 2026 13:00:12 +0000
ROA not before:           Sun 16 Aug 2026 13:00:12 +0000
ROA not after:            Sat 14 Nov 2026 14:00:12 +0000
asID:                     15169
IP address blocks:        104.134.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:db:2c:8d:c3:c6:c0:14:46:73:7b:20:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug 16 13:00:12 2026 GMT
            Not After : Nov 14 14:00:12 2026 GMT
        Subject: CN=170fc0e9-372d-4c57-b87e-4246d8bb7129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:38:5a:3d:fd:ce:26:f6:1b:d9:cc:ed:15:db:
                    54:98:d9:f1:68:26:bc:12:a3:51:7d:a7:a1:51:84:
                    f8:5e:7f:d3:aa:5e:54:da:6a:66:ca:74:06:b8:91:
                    c7:19:34:11:9a:34:5c:4d:b1:b6:8a:94:22:0f:09:
                    50:3d:c5:fe:54:62:5c:91:4c:85:39:82:43:84:0a:
                    1e:55:57:59:a8:b9:18:dd:d2:d5:bd:9a:cb:b6:c5:
                    3e:3c:4a:67:bf:c7:2a:7e:c8:67:c8:79:0d:80:f3:
                    b6:f3:25:9c:84:49:85:92:9e:1b:62:0c:5b:0b:37:
                    fa:fe:65:ff:d1:55:6c:7f:8b:be:4b:9f:cc:b5:3b:
                    3d:5a:e4:8f:6c:0a:65:38:4c:4b:b6:4b:7e:30:17:
                    90:5a:ff:ef:31:4a:6f:63:49:d8:6e:f5:71:0c:3b:
                    fd:3c:13:10:0e:14:0b:d6:da:c0:d9:7b:23:21:cc:
                    8a:b7:77:52:89:c9:8a:ef:3a:49:17:2c:fa:2e:c4:
                    f4:ae:73:36:af:33:63:fc:78:99:0e:d8:48:da:02:
                    6a:67:dc:a1:fb:3a:8c:81:d4:82:c5:bb:46:66:d5:
                    0a:c1:0b:1f:bf:8d:b4:7f:c9:20:0c:32:e1:bc:2f:
                    02:11:71:fd:99:e4:85:3e:f3:30:4d:b6:33:a5:35:
                    eb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:2F:11:85:EA:39:2C:C5:37:23:EF:2A:CD:AA:E8:DA:86:46:6A:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6de5d762-aefc-36bc-827f-4c17794569a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:9b:ac:47:4f:9b:55:4c:eb:f4:6f:dd:f2:d2:05:4a:f3:d2:
         ec:c8:20:00:3d:a3:13:83:1d:2e:87:99:44:8c:ff:77:2a:07:
         64:4b:54:b3:d6:d0:72:c9:20:79:18:f5:89:78:5f:ff:aa:63:
         c0:a5:4d:f7:4f:f1:4b:7e:85:14:7b:64:ea:51:a2:bd:6a:f8:
         12:b8:74:af:75:57:43:44:81:09:fd:5b:78:be:3a:0c:01:fa:
         82:1a:74:23:8e:9e:0a:b6:3a:2c:6e:ab:1a:5a:ce:0b:68:53:
         3e:fd:fd:19:cf:7a:55:f0:b3:dc:4f:35:5e:4d:4f:28:92:c4:
         7c:05:ba:16:48:0e:41:15:c4:43:b8:cc:33:3c:66:2b:9f:e4:
         88:27:bc:3f:65:c6:6f:1d:a8:a4:60:7c:ce:67:2c:b1:6d:b0:
         a1:aa:f8:6f:b9:5e:c4:ef:10:cc:73:8b:2e:a6:e8:02:c9:e4:
         20:79:79:bd:c4:ad:f9:7d:e0:31:0d:5d:99:cb:ca:2a:c2:c5:
         fd:67:59:47:27:19:ec:c4:82:4a:f0:a8:46:7e:3c:fb:88:a3:
         54:f5:20:10:02:af:6e:cf:a0:ef:e4:b1:31:ed:e5:35:27:4f:
         25:1a:18:32:d1:68:5e:d8:ae:2d:a0:46:c0:35:bf:a6:7d:8f:
         5c:7c:72:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:58:50 2026 by rpki-client