Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/92af4c41-eadd-318e-a082-32421eec84d7.roa
File:                     92af4c41-eadd-318e-a082-32421eec84d7.roa (raw, json)
Hash identifier:          743ykf/68QPO+T1N/sZUp/5O0LU7cen45WP3nil09hg=
Subject key identifier:   A5:A2:0A:E6:82:E3:63:C4:02:35:83:15:68:40:D8:ED:BE:34:3F:8F
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584EA796B5DC25C47BDAACA50DC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/92af4c41-eadd-318e-a082-32421eec84d7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     41264
IP address blocks:        104.133.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:b5:dc:25:c4:7b:da:ac:a5:0d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ff20a73b-a0ff-4cfb-bcd8-b183f0a4e750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:79:e9:7e:18:d9:49:8f:48:a1:5e:01:f1:5f:
                    8b:5d:c6:57:dc:8f:04:29:bb:3c:87:17:ab:24:47:
                    5b:15:40:f0:0f:fb:08:fe:04:d8:52:76:d8:e5:0b:
                    ec:e6:05:84:95:c6:e3:0d:17:4d:cb:cd:34:38:c5:
                    bb:cb:9f:48:f4:23:38:41:32:35:89:b8:26:2b:14:
                    35:97:a4:ad:2d:ca:4d:3f:fa:0e:2d:64:05:74:32:
                    b4:d4:1c:53:86:a1:ec:a3:e5:9c:b7:90:31:b1:0f:
                    ff:ec:8e:3d:e7:b3:96:a5:87:ce:88:60:9e:8c:4d:
                    65:fb:d3:b5:9e:56:91:98:85:73:21:fb:21:58:bc:
                    81:8e:bf:30:f2:a4:fc:30:a1:f1:e7:45:68:7f:92:
                    37:18:21:4b:ba:52:10:e0:88:fb:ef:63:26:44:21:
                    70:f4:36:04:a9:30:14:a9:01:aa:16:6d:2e:f5:3c:
                    d3:07:c1:ab:ed:e9:48:8e:6f:0b:a2:9a:cc:6f:c0:
                    cc:c2:b8:12:b7:e4:85:46:04:99:69:2f:db:e7:62:
                    85:f5:03:dd:51:bf:43:0a:87:53:41:2f:82:d4:0e:
                    a2:61:05:0f:93:ad:b2:e5:84:15:9b:2e:ef:10:31:
                    2d:25:a2:2f:f4:55:7f:c3:ea:a8:cd:92:eb:ea:f3:
                    d8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A2:0A:E6:82:E3:63:C4:02:35:83:15:68:40:D8:ED:BE:34:3F:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/92af4c41-eadd-318e-a082-32421eec84d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:df:0c:55:b0:c9:28:e6:01:d4:92:76:d1:0f:1f:c3:90:85:
         cf:fe:ca:7c:71:f3:c8:3c:6e:ad:cc:ff:9e:98:e9:aa:20:20:
         4d:3f:ea:81:98:75:14:c8:59:df:17:78:a0:cb:6c:66:4e:1e:
         a3:47:18:e6:8b:4c:5e:7c:50:dd:dc:42:56:49:bb:56:e0:3c:
         e2:a0:56:e3:59:97:06:ca:59:23:e4:fd:8f:f9:d8:67:e9:39:
         97:a8:cd:f5:28:99:a3:81:01:6f:31:2b:21:a6:5e:20:06:d0:
         ed:6e:15:70:63:bf:98:71:c1:4a:37:75:74:bb:53:42:49:0f:
         0a:3e:d6:c0:dd:ae:05:d3:85:ce:5c:e4:22:ff:e1:10:3d:18:
         cf:d5:3d:96:6f:10:a9:c8:cc:a3:76:91:73:b3:17:1b:18:b3:
         7a:dc:52:23:79:c0:b5:99:11:e2:49:ab:f1:f4:5f:bd:e6:34:
         36:cb:4a:6e:31:2a:94:7b:60:a8:1d:33:a8:80:0c:47:73:2f:
         95:47:00:b5:e1:04:56:f5:d1:aa:b2:45:0e:7e:e4:0a:a6:6a:
         cb:bc:17:9d:8b:48:95:ed:ff:de:bf:03:b0:ea:1d:e6:e2:77:
         f2:bb:0b:75:56:85:07:4c:e6:44:53:02:55:9c:07:9b:85:73:
         44:ed:be:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:33:23 2026 by rpki-client