Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9067c3c2-e74f-3c0a-8079-cf6db54bd612.roa
File:                     9067c3c2-e74f-3c0a-8079-cf6db54bd612.roa (raw, json)
Hash identifier:          xZnmyNHYOl/dghGVXXSqLB7mVKFPVhfl2Qd7R593byo=
Subject key identifier:   C1:4B:A0:C5:A2:3B:7E:CC:94:E1:9B:1F:CA:29:BD:1B:C7:D9:25:F9
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584F5A32D2C5AE80D1D12286B000
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9067c3c2-e74f-3c0a-8079-cf6db54bd612.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     36383
IP address blocks:        104.135.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:d2:c5:ae:80:d1:d1:22:86:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=6d782bef-0b4b-464c-b136-e6ebafe0d291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:39:6a:01:36:de:02:e5:04:84:9a:e7:29:41:
                    d9:bd:08:ff:c6:30:75:86:b5:e7:07:7e:35:ae:2c:
                    97:d7:f4:2b:42:fc:9c:a3:8a:ce:cb:d0:0d:fa:d5:
                    0f:ff:3e:c7:ca:13:db:72:a9:54:9f:28:70:87:1f:
                    cc:70:ac:9d:a7:91:ee:a6:bb:fb:f3:c5:4f:b0:59:
                    92:a7:91:34:a4:1a:15:fb:f6:1c:38:41:d4:d0:d3:
                    af:bb:95:c4:75:38:d8:b4:9d:89:70:a5:39:33:bc:
                    e8:35:54:c6:c7:d4:46:39:81:f1:3b:32:68:aa:1d:
                    e7:92:e8:b2:59:47:14:4e:9f:ec:fa:c9:df:1d:d8:
                    cf:e1:40:fc:cf:28:eb:f4:3c:31:d8:79:73:3a:42:
                    a6:0a:22:bb:76:69:38:02:df:c4:b1:18:8c:33:a0:
                    32:cb:db:88:f5:b1:97:30:20:60:44:7f:3a:4d:da:
                    38:8d:64:28:25:65:91:5a:17:e3:cd:e6:74:81:13:
                    a1:83:83:43:87:cc:6b:2b:f1:51:c3:30:3e:db:36:
                    5b:c6:b1:79:bf:0f:01:3c:cc:35:08:b0:57:d9:d4:
                    a5:9c:23:37:19:27:c9:7a:ee:2c:20:55:c9:39:6b:
                    60:55:7c:9e:39:b9:99:ca:67:8d:ea:e1:cf:a8:02:
                    42:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:4B:A0:C5:A2:3B:7E:CC:94:E1:9B:1F:CA:29:BD:1B:C7:D9:25:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9067c3c2-e74f-3c0a-8079-cf6db54bd612.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.135.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:da:33:b2:f8:df:02:92:97:cf:2a:28:ea:96:7f:fd:4b:3e:
         6e:4f:f6:f2:f7:5e:92:ee:16:7b:d4:68:af:a7:52:26:84:ff:
         84:78:3b:c4:ef:26:82:64:1e:d5:bc:1f:f9:cc:0f:07:88:84:
         07:fc:95:44:18:96:b9:0f:55:b8:47:dd:b4:e0:11:38:19:78:
         9b:6d:eb:d1:11:a4:54:7d:4c:c4:80:89:94:ca:d3:76:35:c8:
         76:b0:bd:59:28:34:15:1a:7c:7f:2f:35:48:7f:82:ed:a3:86:
         95:40:35:65:98:96:d3:04:9f:8e:55:a4:e2:dd:20:d6:c2:a1:
         db:2b:7a:84:68:6f:1d:f7:b4:61:c6:55:15:2d:54:04:0b:56:
         73:b4:43:f4:a0:58:87:c0:02:31:c8:29:28:dd:bc:d8:82:90:
         dd:2e:f6:22:6f:65:ea:5f:47:1f:10:1f:a1:58:cc:1a:5a:9d:
         85:51:88:88:4f:37:58:ca:95:d5:9b:91:b0:29:56:ef:2f:1f:
         03:4d:9c:37:7d:ca:05:8e:78:0f:a4:db:83:1d:36:4c:2c:1e:
         dc:29:13:de:e4:21:3f:91:26:6c:fd:e6:e8:c1:4a:07:4c:2a:
         eb:c3:2e:85:dc:32:dc:7b:4e:3f:fe:b8:d9:15:bb:fc:3d:81:
         99:46:79:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMtLFroDR0SKGsAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk
NmQ3ODJiZWYtMGI0Yi00NjRjLWIxMzYtZTZlYmFmZTBkMjkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzlqATbeAuUEhJrnKUHZvQj/xjB1hrXnB341
riyX1/QrQvyco4rOy9AN+tUP/z7HyhPbcqlUnyhwhx/McKydp5Huprv788VPsFmS
p5E0pBoV+/YcOEHU0NOvu5XEdTjYtJ2JcKU5M7zoNVTGx9RGOYHxOzJoqh3nkuiy
WUcUTp/s+snfHdjP4UD8zyjr9Dwx2HlzOkKmCiK7dmk4At/EsRiMM6Ayy9uI9bGX
MCBgRH86Tdo4jWQoJWWRWhfjzeZ0gROhg4NDh8xrK/FRwzA+2zZbxrF5vw8BPMw1
CLBX2dSlnCM3GSfJeu4sIFXJOWtgVXyeObmZymeN6uHPqAJC9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMFLoMWiO37MlOGbH8opvRvH2SX5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTA2N2MzYzItZTc0Zi0z
YzBhLTgwNzktY2Y2ZGI1NGJkNjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIf/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFbaM7L43wKSl88qKOqWf/1LPm5P9vL3XpLuFnvUaK+nUiaE/4R4O8Tv
JoJkHtW8H/nMDweIhAf8lUQYlrkPVbhH3bTgETgZeJtt69ERpFR9TMSAiZTK03Y1
yHawvVkoNBUafH8vNUh/gu2jhpVANWWYltMEn45VpOLdINbCodsreoRobx33tGHG
VRUtVAQLVnO0Q/SgWIfAAjHIKSjdvNiCkN0u9iJvZepfRx8QH6FYzBpanYVRiIhP
N1jKldWbkbApVu8vHwNNnDd9ygWOeA+k24MdNkwsHtwpE97kIT+RJmz95ujBSgdM
KuvDLoXcMtx7Tj/+uNkVu/w9gZlGeVs=
-----END CERTIFICATE-----
Generated at Sat Oct 31 05:44:59 2026 by rpki-client