Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9331c24f-fb06-3c1c-aab8-8836787a7f8e.roa
File:                     9331c24f-fb06-3c1c-aab8-8836787a7f8e.roa (raw, json)
Hash identifier:          7jMMyLTHu1CjOs+mz+SRtPAdPiFt2pjl5f30B0lEZM0=
Subject key identifier:   E9:AE:50:03:D9:2E:7E:33:DC:BB:3D:61:B4:B1:FB:83:D9:CE:04:B5
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584EA79A8481C7AAD6434D6C4F80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9331c24f-fb06-3c1c-aab8-8836787a7f8e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     41264
IP address blocks:        104.134.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:84:81:c7:aa:d6:43:4d:6c:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e9ad92a8-a0fe-4419-b33d-d757ac8104da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:56:55:09:d4:a8:d3:34:21:33:6d:ee:fe:ef:
                    84:9f:39:da:24:da:70:60:e3:c7:48:fa:f8:bb:06:
                    0a:0a:d0:7c:de:ed:a8:86:b6:3a:be:88:a8:e4:84:
                    0c:d0:5e:2b:bb:a9:ef:b7:05:4f:88:90:c7:91:0e:
                    32:03:80:85:e3:ae:5b:53:a4:ff:cb:d7:5e:61:df:
                    b0:14:90:b1:f4:47:e5:37:f4:10:14:28:40:73:66:
                    9f:62:bc:66:89:1f:20:da:61:16:36:69:72:ec:f4:
                    e9:6a:19:04:82:a6:3d:f4:dc:47:ae:e7:90:ba:9c:
                    7e:c5:09:4d:17:d0:29:6d:08:0d:e8:59:02:7b:df:
                    16:6f:ea:98:3d:08:30:3c:d7:f9:6f:d8:89:58:15:
                    b2:e9:3a:e1:67:18:21:21:e8:70:2c:31:cd:d2:34:
                    fa:0e:6a:78:f0:4d:59:2a:22:3b:47:5b:ff:a3:39:
                    5b:d4:c9:48:a3:cb:1d:3e:84:a3:18:21:cf:9c:43:
                    e1:81:00:9c:e2:a1:8a:52:60:e3:15:1f:36:ba:b5:
                    8d:4e:88:a0:fc:94:43:5f:d1:fc:9d:28:e5:5a:24:
                    b9:94:09:6b:8e:d7:60:43:5c:95:fd:51:33:72:b1:
                    de:c8:70:9e:88:68:d4:59:93:96:2c:c5:78:80:5e:
                    e7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AE:50:03:D9:2E:7E:33:DC:BB:3D:61:B4:B1:FB:83:D9:CE:04:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9331c24f-fb06-3c1c-aab8-8836787a7f8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:e3:90:2f:03:42:53:5e:be:5c:0f:40:ab:77:0c:ea:2a:77:
         45:7c:2c:dc:00:4e:76:cb:c2:65:2b:98:6a:d1:90:53:89:4f:
         5a:bf:16:de:c0:e3:9b:ec:11:24:8f:c6:5e:b4:26:15:02:d4:
         e1:d5:7f:ef:e5:99:0b:2a:a0:82:4b:1c:59:e2:7a:ed:b6:25:
         c1:c0:de:42:37:45:d2:2e:df:5e:31:ba:c9:af:a6:03:3f:3f:
         0c:ed:a0:1f:68:9f:b8:fd:74:e1:ac:dd:ba:96:fd:91:02:8c:
         59:33:64:31:c3:93:5f:48:66:d8:d2:4f:15:ab:fc:4e:f1:3c:
         a5:59:07:4d:f6:0b:d9:1b:3d:11:eb:73:79:37:f5:4b:0b:f0:
         96:b8:ca:32:76:7e:83:72:35:e3:38:e7:cf:75:9b:fa:df:f2:
         c8:c9:46:a2:4d:7c:f4:b6:84:f0:b6:46:97:f9:b6:bc:39:a3:
         c2:7d:2a:a1:39:c7:7d:2c:ed:54:8d:5d:ce:96:c5:9c:93:3a:
         0e:92:93:8f:d0:37:f5:35:1c:32:bd:02:54:2b:f1:29:c5:e1:
         4b:68:2f:03:4b:ed:88:c9:2a:37:f1:55:15:04:e4:11:56:e8:
         ed:10:68:a9:7f:38:18:ea:f9:92:17:0e:86:31:82:ef:24:7b:
         01:b2:03:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:59:45 2026 by rpki-client