Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7990dd7e-37be-3b92-95fe-a0e5fb10cac9.roa
File:                     7990dd7e-37be-3b92-95fe-a0e5fb10cac9.roa (raw, json)
Hash identifier:          XtFVID6ZahAp+D3pvm/y1Eqw9zbtTliY3cC6wEIcbA4=
Subject key identifier:   6B:A4:F3:52:2C:85:2D:0F:34:A4:F8:D3:E0:FF:70:4F:CA:A9:CB:50
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584EC0A73813A4073BE417CEC4C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7990dd7e-37be-3b92-95fe-a0e5fb10cac9.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        104.134.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:38:13:a4:07:3b:e4:17:ce:c4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=23b6c0af-6bcf-4ad6-9e79-d4877fac0430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c3:56:78:c2:a6:10:b8:5b:f8:42:b2:11:b6:
                    cb:89:74:92:73:2e:d2:27:01:53:0a:d9:5c:74:89:
                    02:93:16:8e:d5:f4:ec:88:08:b0:22:c7:41:02:9b:
                    9d:a3:db:f0:18:51:ee:2e:f3:b1:c2:b1:59:73:d7:
                    a3:07:05:28:52:ea:09:d7:b2:cc:6e:2f:d6:4e:12:
                    19:4d:4b:b5:ea:51:a6:77:d0:02:cb:92:32:d9:34:
                    e4:ac:c1:9e:86:63:e1:ce:54:51:68:d9:32:b5:e9:
                    38:7e:91:34:9b:e1:cf:bc:04:e4:a7:0e:57:d8:b7:
                    00:2f:15:a5:e3:0a:83:6a:2d:5c:61:53:46:44:da:
                    f7:a6:b1:d3:0a:17:07:dc:f8:dd:4f:c3:1e:da:94:
                    78:ca:d6:f0:36:9d:97:63:83:b1:59:ba:24:3f:db:
                    11:c5:64:83:31:67:93:cc:04:80:11:f6:59:a3:b2:
                    65:8a:1e:a0:98:0a:e9:e5:90:e6:a1:99:7d:68:35:
                    6f:90:7c:0e:75:79:45:8d:b0:2a:d7:15:37:00:25:
                    1a:ca:22:3b:37:ae:a8:f3:d9:a8:8f:9f:bb:03:4b:
                    af:f6:c7:16:df:44:11:36:03:8c:2a:87:96:3e:8c:
                    5c:a3:ff:2c:5a:16:ed:4b:06:dd:44:7c:68:3d:bb:
                    62:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A4:F3:52:2C:85:2D:0F:34:A4:F8:D3:E0:FF:70:4F:CA:A9:CB:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7990dd7e-37be-3b92-95fe-a0e5fb10cac9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:4f:6b:fa:20:7f:fa:ee:53:8e:85:5d:71:31:13:30:6b:84:
         85:81:48:2c:99:67:1e:36:a9:0c:f8:39:34:0a:07:b3:a2:77:
         82:09:f2:d9:d9:02:33:ab:dd:1d:fe:a2:10:bf:98:cc:72:34:
         c1:79:97:e9:3a:35:0f:34:f0:a8:b4:59:02:5c:b3:c0:ac:47:
         fc:72:e8:50:d2:7c:8c:dd:b7:1f:22:56:d6:22:c6:2f:f9:eb:
         62:fa:1b:f4:a8:c7:a6:ce:32:aa:03:d2:c5:83:9a:7e:be:64:
         c0:d4:98:b6:35:25:25:e5:1e:06:2d:48:49:aa:50:91:fd:68:
         0b:e1:0e:7c:f8:e0:ab:d1:55:da:88:47:75:df:2f:36:d0:4d:
         b6:50:80:f2:6e:3e:fd:b9:c3:fe:4d:38:52:9a:43:f4:9d:03:
         8d:8b:26:19:7b:f3:1f:16:65:60:dc:9f:f9:e2:14:98:96:f8:
         44:ce:ab:1c:0e:32:f0:8d:36:1c:59:b5:be:c5:b5:e6:24:cd:
         0a:bc:e5:ab:b9:6b:79:0e:c2:6a:b7:34:0c:ab:09:f9:21:cc:
         6c:ab:0d:ac:4c:5a:85:fa:00:e1:5a:f3:6b:ce:37:05:92:34:
         ce:ba:9b:8f:71:94:36:67:3b:2c:8f:95:6b:0d:63:ed:87:a3:
         77:7b:89:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:59:56 2026 by rpki-client