Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/83c450cc-3e54-3c73-98a9-5550187b1d91.roa
File:                     83c450cc-3e54-3c73-98a9-5550187b1d91.roa (raw, json)
Hash identifier:          +ufRRVDlea3c8ySEv5uJQXh6H1PSpGetggN+MjYCU+Y=
Subject key identifier:   E6:2C:D6:48:00:41:95:E4:5F:06:74:C8:C5:2D:41:5D:8B:1B:75:F0
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584EA794A755703994B7E0228980
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/83c450cc-3e54-3c73-98a9-5550187b1d91.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     41264
IP address blocks:        104.132.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:a7:55:70:39:94:b7:e0:22:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=70983883-5ec1-4462-afa3-09c076b37107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9e:1e:cb:8e:a3:9e:d5:89:44:95:89:70:27:
                    08:46:62:21:00:91:d6:ef:d0:f6:57:e0:4b:05:dd:
                    c8:32:f7:5a:c9:7e:9f:4c:1b:17:78:c6:9f:5a:fd:
                    fa:ab:4f:8a:c5:7c:c5:31:36:2d:a1:bb:97:d9:a4:
                    07:7c:37:8e:e2:d0:dc:22:0a:46:9e:71:ae:ba:26:
                    3a:c3:ef:af:64:48:4f:13:7e:f2:c3:29:60:c1:79:
                    cb:71:d1:6e:07:bf:c9:a0:9d:62:53:d6:38:7c:de:
                    08:9d:e1:a9:4c:62:80:41:3e:63:8c:1e:3f:ad:8e:
                    01:78:ef:d4:0a:85:71:13:fb:fc:1a:04:4b:9c:18:
                    a8:10:0d:e3:1e:ce:ec:bc:39:bb:ba:27:e1:36:3e:
                    9c:b8:6c:51:0d:b6:6d:8e:38:9f:46:a4:fb:9b:0b:
                    b1:39:88:a3:10:2d:f7:90:2b:af:6d:fb:b5:d8:64:
                    bf:a2:9f:27:dd:90:e8:31:26:57:f2:8c:eb:a6:26:
                    43:a4:aa:91:11:bc:f1:84:70:cc:6b:86:15:65:09:
                    81:0d:74:83:c5:24:43:75:89:7c:fc:4f:2e:26:a3:
                    05:b7:ef:69:87:ee:6b:57:e4:06:ac:b0:70:7d:69:
                    92:6a:68:03:cb:c8:37:aa:6c:c9:e2:e8:d3:f5:b0:
                    a5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2C:D6:48:00:41:95:E4:5F:06:74:C8:C5:2D:41:5D:8B:1B:75:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/83c450cc-3e54-3c73-98a9-5550187b1d91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:17:27:1a:12:5e:59:36:e4:d7:9e:b4:ca:f9:e6:c1:47:e4:
         fa:5a:7d:ad:ef:22:d4:7d:7d:72:01:f8:20:5f:2a:bc:cf:3d:
         6d:c7:1b:c0:52:63:be:59:24:97:dc:8b:00:8c:fc:72:4e:98:
         d9:f6:93:df:4a:a5:63:5b:51:32:22:8a:33:32:0f:c0:5a:9a:
         27:f5:c9:61:68:b9:4a:fd:a5:78:70:2e:70:ab:b6:29:78:0c:
         d4:ef:db:0e:bc:a5:c1:8f:1a:59:c2:e8:4e:6b:ac:d5:a4:86:
         9c:c0:ae:dd:f0:32:c6:07:af:cf:dd:79:35:a2:65:1e:95:99:
         9e:4d:0a:ed:9f:7d:88:98:48:fa:e5:e1:39:ea:c1:4d:1f:f9:
         a2:a4:f6:e2:04:e8:d5:19:d8:a9:96:7a:76:75:cc:f6:9d:c2:
         5c:83:02:6e:36:d8:38:0a:42:87:ec:78:20:5a:5f:c9:16:b7:
         5a:a8:56:73:7f:dc:a3:17:0b:95:82:ed:45:e2:78:b9:60:bc:
         67:ec:c5:53:e1:ad:1b:dd:8d:99:19:45:38:cc:24:f6:d3:9b:
         7f:46:bd:1c:39:cd:56:e6:06:b1:41:ba:b9:76:5c:0b:7e:5d:
         33:12:95:18:65:f8:cb:0d:2b:5d:60:74:f4:d3:bf:c5:bd:10:
         b5:8a:07:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:58:56 2026 by rpki-client