Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7bc3fd98-75a3-37e9-8d9c-5d98472a1f56.roa
File:                     7bc3fd98-75a3-37e9-8d9c-5d98472a1f56.roa (raw, json)
Hash identifier:          dL58P4Ui5uZLOW7QyDSgSwqU1ESymGOnrdfYrvp5Sv8=
Subject key identifier:   00:83:39:80:78:93:A9:63:31:73:3C:62:E9:D3:9F:DD:C2:A4:46:43
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584EA79A80D4B071CBF181C80280
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7bc3fd98-75a3-37e9-8d9c-5d98472a1f56.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     395973
IP address blocks:        104.134.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:80:d4:b0:71:cb:f1:81:c8:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ddeb1de1-16ad-485e-b4ac-95f69541772a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:73:13:7d:cc:13:16:36:98:50:44:f3:80:d0:
                    9e:5c:6c:87:a7:22:08:66:99:a6:8f:35:79:6d:89:
                    f1:67:83:02:f6:d1:a6:09:e9:fd:45:df:c1:ab:98:
                    5b:e2:c0:43:e8:28:1c:62:65:30:f2:c5:ed:06:6a:
                    c1:57:89:e2:99:d3:bf:b2:b6:55:bd:7f:a0:a3:f0:
                    c2:6c:8c:81:a6:a9:8a:dc:4b:1b:08:f0:db:5a:63:
                    26:12:de:93:54:e7:dd:ae:e0:87:ee:24:ca:75:6e:
                    8e:b7:b8:f9:9a:72:b4:b9:9e:3e:0f:2e:c5:69:b5:
                    83:33:79:3e:0f:a4:67:1d:23:f0:c3:a7:68:d7:4a:
                    c2:e2:a2:eb:d6:e2:91:f9:6e:63:df:5d:7c:6b:51:
                    3a:d0:36:fa:0b:21:67:0f:fc:7e:af:67:9a:8e:49:
                    60:95:81:cf:51:4e:1e:00:04:cf:89:78:d0:90:ca:
                    5c:bb:ca:6b:41:9c:e6:d5:10:3d:13:41:e3:0a:33:
                    06:24:40:86:0a:99:36:44:10:71:78:b6:cb:7d:8f:
                    34:d6:53:d4:e5:16:1a:9b:e1:b2:0b:26:02:ac:29:
                    7a:48:74:7f:05:89:16:d6:c8:b3:dc:77:c7:0f:55:
                    e6:71:82:cf:0c:e8:ce:5a:7a:19:99:a1:2b:d7:3b:
                    51:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:83:39:80:78:93:A9:63:31:73:3C:62:E9:D3:9F:DD:C2:A4:46:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7bc3fd98-75a3-37e9-8d9c-5d98472a1f56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:9f:11:47:82:82:1a:13:0c:65:6b:c3:1d:aa:9a:5d:95:10:
         aa:1a:a1:8b:57:dc:65:0f:61:fc:9f:51:f3:04:6c:18:06:c5:
         cb:17:8c:b0:d8:e1:b9:99:74:e1:9e:30:b2:f9:18:c3:71:e4:
         33:a5:03:67:a2:c4:bd:0e:52:ed:25:38:44:f2:bc:ed:2a:19:
         b7:69:b1:9c:3c:ef:56:45:9e:2e:b8:27:76:98:00:2c:b6:4a:
         22:4d:2c:f7:ee:2c:d3:01:b3:c5:ac:f2:59:5c:79:6c:b8:98:
         b7:02:7f:00:c9:35:3c:61:15:c6:77:01:55:1b:0a:fb:92:68:
         6f:b3:77:f9:1b:84:b0:55:f5:28:8d:4a:6c:e7:aa:3c:52:b7:
         bb:a5:3e:d5:84:35:87:e1:f8:a6:eb:45:e6:e8:a0:ae:64:f2:
         a3:97:e1:f3:c8:16:fc:a7:26:9f:8e:e4:80:32:e6:5a:ec:52:
         d4:f1:64:fb:ba:2b:d9:af:e9:72:e0:0d:e8:bd:06:0c:c4:8c:
         75:7d:ea:9f:66:7f:6f:7f:dc:54:d0:fe:02:47:6f:d8:94:40:
         a0:c5:39:47:9b:f2:f5:43:87:71:d5:2b:7d:0c:22:b7:77:fe:
         d1:ce:5f:d2:2c:78:16:db:99:69:88:3b:74:8a:af:c1:fe:8d:
         9a:d6:bb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:13:24 2026 by rpki-client