Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9158427a-1d04-354e-adfe-4f9895288e0a.roa
File:                     9158427a-1d04-354e-adfe-4f9895288e0a.roa (raw, json)
Hash identifier:          ybSQaAI3vpY729b+eVIREaGpw87/UjiMVHFlYlo5Xdk=
Subject key identifier:   AE:98:CD:4F:50:AD:76:3B:C5:BC:8B:D7:9B:D3:50:9B:B5:31:B9:25
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584EA796BCD890AD5157D14F1E00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9158427a-1d04-354e-adfe-4f9895288e0a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     41264
IP address blocks:        104.133.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:bc:d8:90:ad:51:57:d1:4f:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=edf573af-29ce-4243-b083-b1997e3252d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9e:d6:a6:62:d6:6c:fd:bf:3b:95:f0:5c:0c:
                    2c:10:82:1d:db:2b:aa:cb:51:fb:5f:ec:8b:25:5b:
                    32:47:5c:69:45:91:bb:5c:18:56:80:1b:14:5b:71:
                    49:b5:28:e9:25:77:80:77:c0:5e:ad:32:6d:b9:c5:
                    d9:e3:e2:cc:ea:2c:44:da:46:c8:b2:11:da:64:e9:
                    98:26:4f:c9:c4:fe:b9:b2:85:1a:18:83:37:9f:93:
                    a3:5c:01:5b:55:a5:9a:a6:00:65:e4:66:15:5b:a0:
                    95:91:56:b1:83:c3:b2:b0:df:81:cf:76:96:dc:dd:
                    3f:d5:ef:f8:a6:ce:66:e8:e6:0f:47:a3:f1:fc:3f:
                    4d:f4:57:e8:9a:87:db:70:b1:4a:36:62:4f:31:dd:
                    8f:d4:73:db:a9:4d:8c:c9:be:52:62:81:34:f7:17:
                    a3:ae:79:6d:a1:4a:66:d8:1c:96:0d:4f:04:d0:54:
                    7c:95:10:1a:9a:2f:32:80:a3:fb:ad:18:b0:99:52:
                    91:87:86:c8:e5:ee:f5:4d:e0:f4:0a:47:df:87:aa:
                    6b:ea:1d:84:36:3a:72:89:bd:fd:15:b7:3a:62:0c:
                    7e:83:48:d1:fb:2e:74:ac:f1:67:57:c0:e5:f4:b3:
                    01:2c:f5:b5:00:15:88:04:0f:d0:4e:23:6e:98:97:
                    82:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:98:CD:4F:50:AD:76:3B:C5:BC:8B:D7:9B:D3:50:9B:B5:31:B9:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9158427a-1d04-354e-adfe-4f9895288e0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:43:36:22:57:a0:13:87:be:3d:d3:12:1a:18:a1:4a:ea:3b:
         cf:42:57:cd:26:e4:a4:e9:36:bb:01:c7:bf:8b:9f:90:d5:79:
         f1:30:e3:32:cc:54:05:f1:f1:74:87:91:3d:ea:3a:80:53:18:
         c1:8c:03:66:9a:43:80:c9:06:72:7e:5c:a9:22:10:6f:4c:fb:
         5a:82:55:19:3f:c4:e8:23:0d:c9:f1:02:ca:6d:32:24:9a:c8:
         2f:bc:38:12:e3:f0:c9:f1:14:30:ed:39:aa:40:3c:45:d9:98:
         7c:f2:04:85:d2:fa:2f:78:07:40:55:8c:2b:5f:f4:82:92:1c:
         dd:ac:37:4e:48:c3:b5:d0:ac:83:94:82:6e:fa:86:7a:f6:d1:
         48:2d:90:13:91:a4:e5:3c:6a:14:75:1b:f7:aa:e4:e8:0a:08:
         a0:76:97:a6:f2:ca:07:ae:ca:a8:ef:de:fe:20:5e:fc:c9:3e:
         6a:6b:49:4d:79:62:75:15:10:54:3c:3c:20:91:b2:16:a3:90:
         09:6a:1b:8c:a8:03:b5:b0:e5:b8:0c:5a:b4:c9:a2:71:21:59:
         2e:8f:39:de:37:8a:6e:ba:00:c2:f6:6a:8d:04:89:0a:ff:c4:
         d8:e3:a8:c5:7e:42:14:b0:64:1a:48:48:7c:60:50:af:6f:5b:
         f4:b0:4d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:59:18 2026 by rpki-client