Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6f0c809a-d35e-304e-a1ea-c59893c159c6.roa
File:                     6f0c809a-d35e-304e-a1ea-c59893c159c6.roa (raw, json)
Hash identifier:          wrTDL1JT/eDw8n1rrW4kDjQlnO9ECoOuIQvnmZeftF8=
Subject key identifier:   D4:56:5B:4F:18:BE:E2:60:2D:A8:FE:D0:23:E7:D7:32:B7:2C:67:B0
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584EA787E89FD0A8EC89603AB200
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6f0c809a-d35e-304e-a1ea-c59893c159c6.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15169
IP address blocks:        104.134.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:e8:9f:d0:a8:ec:89:60:3a:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c926fb6c-e217-41ee-9a8e-3c38330afa66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:24:be:89:67:9e:6d:fb:88:b6:f5:98:9d:bc:
                    8a:e6:f2:9d:c2:30:04:91:f9:05:72:a4:e3:94:8f:
                    fd:6b:a3:8d:83:ad:54:07:78:20:d6:65:19:f0:b7:
                    9a:b0:89:ec:16:cf:62:e7:f0:52:d8:77:a5:d7:ad:
                    36:65:fc:24:8d:a9:3e:9b:2e:c6:d7:10:61:f7:c2:
                    b1:77:1e:b7:ad:5a:97:76:4e:2c:2d:ec:d9:a0:8b:
                    d3:84:8d:23:45:5f:1e:d5:0f:1a:fb:2f:fb:6f:b8:
                    95:03:31:27:82:2f:9f:10:d7:77:81:82:a9:a6:af:
                    aa:1e:58:ba:31:9d:76:4f:c6:28:20:2b:7a:43:e6:
                    a4:ca:89:97:39:e3:d8:dc:73:9d:a6:fb:7a:a9:38:
                    6b:62:4a:9b:3f:72:2d:fe:ff:4a:80:ae:68:ad:48:
                    19:c6:8c:b0:35:50:b4:e3:8f:34:78:b5:2a:fe:11:
                    f1:18:ea:38:06:46:48:f1:8a:d6:74:26:02:ab:4a:
                    b3:cf:2c:fb:24:57:e8:f3:d3:cc:b0:14:8c:03:6c:
                    ce:bc:25:eb:05:ff:85:69:1f:98:32:b7:e6:93:b3:
                    5b:32:69:e0:13:56:1f:65:a7:a8:45:e6:f6:e5:e8:
                    2c:2a:89:ab:1b:90:7f:de:ed:18:1f:68:a4:77:9c:
                    7b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:56:5B:4F:18:BE:E2:60:2D:A8:FE:D0:23:E7:D7:32:B7:2C:67:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6f0c809a-d35e-304e-a1ea-c59893c159c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:a5:fc:ca:4f:23:ee:b4:53:ef:a5:a3:9b:c6:4c:9a:85:9d:
         3e:81:b7:80:d1:7b:0d:bf:19:c9:68:9d:c2:eb:e2:fa:5c:76:
         6b:1f:77:5c:af:c6:d2:6a:1a:1c:43:89:96:3b:e3:3e:a5:12:
         12:06:45:bc:7e:43:25:72:df:da:83:d7:9f:5e:d6:4f:f8:1e:
         52:6a:7f:69:04:71:ad:90:b9:49:3e:91:58:cc:13:f8:e4:bc:
         0e:fb:70:ab:e0:6d:6f:91:f0:fd:d4:3a:c1:db:ea:63:38:3f:
         71:7c:5d:dc:0f:a4:3d:a6:e2:d1:db:48:62:94:09:df:ae:cc:
         cd:fc:a6:2f:28:44:ea:bc:82:58:8c:bd:50:48:a1:7a:f9:87:
         66:5f:c2:83:ac:e9:fb:b0:30:20:13:13:4d:6e:38:0c:ea:80:
         0a:56:e4:33:9d:1d:e0:61:b6:0d:10:6d:bf:0d:57:43:f1:34:
         35:ce:bd:04:b1:2f:3a:90:02:f0:fa:da:42:d1:0b:dc:ed:1b:
         c9:9b:67:c8:cd:bf:65:ed:c0:96:be:b7:2f:ff:c0:79:55:25:
         88:07:d5:0c:67:2e:46:b2:7f:42:80:aa:79:6a:5d:02:71:41:
         ee:16:18:20:b6:6e:c3:f8:7c:be:e6:76:04:9f:2a:49:67:b8:
         3c:41:df:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 07:39:18 2026 by rpki-client