Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7a53e7c6-331a-3771-aae3-ab05e5fb6e44.roa
File:                     7a53e7c6-331a-3771-aae3-ab05e5fb6e44.roa (raw, json)
Hash identifier:          s6U5QGi5TAbsQVswVFoGzv+o2feRzZgCDBtIbz8v/1Y=
Subject key identifier:   31:06:DB:8E:CF:E3:AC:E3:E7:E8:52:BE:E1:B5:C0:5A:7B:38:5A:AB
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584EA79AFE0861BE4A991CFBBE80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7a53e7c6-331a-3771-aae3-ab05e5fb6e44.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15169
IP address blocks:        104.134.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:fe:08:61:be:4a:99:1c:fb:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e235ecd2-bf46-4d87-99f7-8c59216c9aa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:60:09:81:78:8a:10:9b:d3:aa:fb:21:ef:80:
                    6f:4c:f8:45:ee:84:63:a3:60:2d:26:d9:4f:27:86:
                    6b:58:67:e3:48:d3:f4:56:87:a8:4d:73:e4:57:86:
                    55:9a:53:31:61:cb:47:ba:16:37:ad:cf:fd:c7:a6:
                    fa:16:2e:59:05:ee:48:bd:35:f1:d5:d6:5b:56:96:
                    1c:11:48:39:6f:26:b4:3b:45:ff:ac:a7:07:8b:45:
                    82:94:e5:18:71:0a:d3:72:0b:ce:99:e9:bc:cc:8a:
                    9a:78:d4:a2:5b:7b:57:95:e5:9a:1a:7a:05:24:c8:
                    67:8e:fa:97:f7:ab:21:5f:d7:cb:ad:20:f6:5d:92:
                    cb:1a:ab:0c:39:08:c4:20:a8:9a:ef:67:53:ad:39:
                    9d:02:1d:e2:29:4d:76:d0:48:5d:87:50:a1:15:bf:
                    82:b4:d3:aa:d3:8d:ab:5c:f4:9e:bd:41:a4:a9:9f:
                    b1:90:d7:e7:7e:45:b9:49:05:c2:c6:90:1e:39:5a:
                    28:a6:ab:79:7c:63:80:a4:a7:aa:14:04:a8:df:e9:
                    7b:5b:f1:c2:42:a5:d7:0c:78:49:d9:eb:9e:97:75:
                    2b:93:ea:82:d6:aa:99:49:a6:8f:ea:45:e5:6b:08:
                    df:86:cf:a9:f5:a9:6d:08:cf:61:c3:0d:17:8c:97:
                    bf:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:06:DB:8E:CF:E3:AC:E3:E7:E8:52:BE:E1:B5:C0:5A:7B:38:5A:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7a53e7c6-331a-3771-aae3-ab05e5fb6e44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:82:af:d6:30:3f:21:00:54:5c:74:7d:8c:87:15:e0:79:b0:
         b7:91:47:1f:73:f9:eb:35:f0:29:c3:44:be:20:a3:ee:7c:fd:
         44:96:c2:0c:db:47:7e:cb:0e:94:89:f1:39:0e:79:e7:b4:20:
         06:fb:ca:f8:7b:41:79:6a:a9:5b:b7:9a:b4:98:52:e7:b6:be:
         ce:ca:8b:66:d2:7a:96:a7:18:d8:61:4d:c7:6b:06:6b:8b:2f:
         85:fb:b1:20:b3:50:96:60:b0:68:ea:ad:b2:59:76:e7:84:1c:
         fb:8b:5f:d6:2e:f9:9c:d3:40:70:92:58:4c:0b:58:3c:bb:42:
         5d:7b:71:99:fd:e5:23:4a:c5:01:70:3d:ea:2b:4d:9b:f6:77:
         c3:40:2c:94:67:b4:98:ee:35:6e:29:21:91:25:74:79:d5:23:
         fb:b8:7d:e7:22:f6:9c:f0:d4:e4:1a:ce:18:eb:ce:81:82:37:
         32:0e:22:7f:b8:c1:eb:c5:df:d5:41:7e:a5:80:e3:2f:ed:3e:
         84:3b:7e:a7:c7:c5:d6:a1:20:91:cf:b1:f4:a6:6a:89:38:c4:
         02:b2:b6:21:31:af:02:e5:89:fa:16:11:c6:6b:57:a8:4a:4e:
         39:00:16:ac:a5:f4:c3:d3:4b:c2:9c:1c:5c:ea:98:34:fd:1a:
         af:2e:4a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:38:03 2026 by rpki-client