Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/77b6d3f3-3333-3b2b-9664-6caa7c8757ab.roa
File:                     77b6d3f3-3333-3b2b-9664-6caa7c8757ab.roa (raw, json)
Hash identifier:          xJzUgkRCK7DeTPyRiUjbqDMkkYBAYs9zMUVIuwEsKSc=
Subject key identifier:   AF:5D:4C:28:D2:6A:4F:C9:58:57:AF:6B:49:98:DB:36:1E:33:86:EA
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584EA79A88918323A00EEC1C8BC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/77b6d3f3-3333-3b2b-9664-6caa7c8757ab.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15169
IP address blocks:        104.134.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:88:91:83:23:a0:0e:ec:1c:8b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=48cc5453-0c2f-432e-b97a-6a94bdbf1fbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:46:4e:ad:4b:7d:06:48:e4:72:08:69:bc:46:
                    a0:a0:70:51:bb:c7:d5:94:46:ad:01:dd:d4:26:8a:
                    87:75:d4:57:77:ba:60:7f:c9:27:5e:03:fe:fc:a4:
                    7d:14:47:bc:aa:86:a3:97:7d:9c:b1:65:20:f2:02:
                    be:64:71:1b:f2:17:6e:1d:41:fb:25:17:a0:be:88:
                    a2:23:a4:e9:4a:03:42:ad:81:42:0c:5a:9b:18:7a:
                    f4:c3:d9:15:dd:34:30:49:e6:73:2c:bb:24:73:35:
                    2d:d8:fa:34:c2:c3:e9:cd:e9:62:7f:8d:5d:2b:07:
                    ab:3c:25:7f:e2:c4:58:d4:0d:32:96:35:95:46:0a:
                    c8:dd:73:05:00:66:de:37:11:47:7d:a0:33:6b:9d:
                    92:90:3d:f6:b0:a2:b6:29:64:e4:68:ff:60:4d:8d:
                    a3:22:5f:33:3c:ea:33:e5:e4:de:ff:ba:c0:9c:50:
                    eb:30:15:cc:17:ce:04:ee:fe:97:21:2d:0c:b3:d0:
                    70:b0:d4:1d:c6:e0:01:c5:53:20:5a:dc:19:4b:14:
                    ce:30:46:a6:77:72:99:08:74:87:59:cb:31:8d:ae:
                    6b:f6:ad:8a:30:b8:b3:f6:af:66:aa:3c:2e:39:9e:
                    b2:f6:bb:42:14:0e:18:27:a0:02:a1:0c:ad:3b:35:
                    45:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:5D:4C:28:D2:6A:4F:C9:58:57:AF:6B:49:98:DB:36:1E:33:86:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/77b6d3f3-3333-3b2b-9664-6caa7c8757ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:cb:ae:22:5a:bd:2b:b6:a0:85:fe:25:68:23:bd:87:2d:d8:
         63:7e:a2:70:f9:d7:ad:be:e5:cf:fc:9e:53:c7:e4:e6:ff:5c:
         40:ae:02:91:aa:c2:c6:05:82:ee:50:d8:c9:75:ba:ef:1b:d3:
         a4:f2:a0:c8:12:68:15:0e:2e:46:90:0a:f6:1f:72:dd:83:a0:
         56:ef:09:1b:03:b3:e8:e7:99:39:88:30:6a:72:44:3b:74:ee:
         65:33:43:38:68:25:a2:5c:7f:5c:1a:f8:7f:b5:35:61:9e:e4:
         b0:9a:81:e2:86:be:0a:e9:be:d9:6b:af:46:fb:69:a9:7b:15:
         49:27:87:e6:66:d5:e2:c7:62:1a:ed:f1:68:af:cf:16:d1:b3:
         0e:1c:a9:81:e6:d6:11:bb:1a:3a:ce:16:41:12:d8:71:8d:94:
         1e:e7:5d:d6:d0:74:b6:4e:d7:cc:da:99:2d:70:26:e9:36:10:
         e0:fc:24:ac:67:81:3c:92:e6:f6:f2:20:58:02:e4:dd:fb:bb:
         f2:d8:f1:ec:76:60:d8:49:56:7e:db:e0:16:cd:21:f9:21:2f:
         25:30:05:f5:c5:07:55:8a:c0:a0:53:72:93:46:f3:9a:96:3f:
         fa:bc:d8:67:f1:51:d3:de:c7:02:ed:40:f6:53:56:5b:d9:0d:
         91:b4:be:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:38:42 2026 by rpki-client