Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/998f51a9-1a6d-37e3-8548-1119e6ef3a88.roa
File:                     998f51a9-1a6d-37e3-8548-1119e6ef3a88.roa (raw, json)
Hash identifier:          uIV0SYpDPcPqajC9LwFLY7cFntGu+a/cT+shhxVU7VA=
Subject key identifier:   3B:44:0B:8C:B3:BC:37:EC:47:F4:79:54:22:EB:76:E3:2B:60:BE:ED
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584EA7955E1E83EEDE4A32DD8B80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/998f51a9-1a6d-37e3-8548-1119e6ef3a88.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     41264
IP address blocks:        104.132.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:5e:1e:83:ee:de:4a:32:dd:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1fc1c07b-f8dd-4204-99a4-178391306dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:37:a9:f5:08:75:1f:9a:fe:2f:f1:a8:e5:5f:
                    69:89:11:46:ec:72:6e:e3:9e:da:d6:9f:3b:d4:82:
                    bf:d2:fe:de:bf:ed:6b:6e:a1:ac:d7:2d:29:4b:30:
                    99:fc:ed:b6:c8:6b:57:6c:e5:e9:d2:fc:46:10:5e:
                    e8:01:1e:fb:02:ec:54:e5:9d:43:a9:a6:5c:63:25:
                    db:0f:2a:aa:a7:4d:c6:63:5c:d3:01:96:d9:ec:bb:
                    b0:bb:16:e4:c8:af:54:cb:98:ad:31:06:e4:55:26:
                    27:03:bd:73:c7:1e:e0:b4:05:f6:da:4b:82:da:4a:
                    9d:1a:c3:19:d7:64:99:59:d8:be:54:c5:0c:89:53:
                    03:7b:af:dd:23:c1:6f:7e:95:4c:bf:91:fb:42:b0:
                    d5:a9:77:86:73:c8:4f:d6:c2:df:64:a8:5a:7c:9d:
                    e8:cb:c6:56:c0:b8:4f:0b:a1:15:2b:4b:77:f9:78:
                    fc:be:96:16:7e:76:ea:0a:ed:75:8c:17:92:d9:85:
                    15:65:c6:80:a0:2f:b2:2a:4d:f2:43:a6:ef:27:3a:
                    61:e9:f4:07:70:8d:68:ec:6b:e6:f8:a1:15:51:39:
                    b3:73:8e:5a:5c:42:e5:21:55:0e:dd:72:23:19:c8:
                    3d:09:dd:c9:17:f8:df:12:95:e1:ff:5b:5b:83:f0:
                    d4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:44:0B:8C:B3:BC:37:EC:47:F4:79:54:22:EB:76:E3:2B:60:BE:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/998f51a9-1a6d-37e3-8548-1119e6ef3a88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:f4:b6:d4:95:70:55:9a:86:73:c3:1d:57:4f:c2:28:2e:76:
         f6:71:f1:d2:54:1a:ac:b9:d3:57:36:da:16:bf:2b:fe:00:04:
         d8:25:5a:17:db:fe:76:b4:11:11:84:7e:bd:7b:2b:7b:b1:9b:
         50:63:98:fa:1e:17:6e:66:84:eb:23:c1:4a:93:51:3e:62:b4:
         2d:de:a0:85:ac:29:d8:ba:84:58:1c:2f:dc:d0:35:bb:48:ce:
         4a:9d:5c:47:64:4a:82:ad:cd:13:3a:33:6e:43:8b:31:1d:f9:
         b3:de:64:52:17:d2:93:7b:18:6a:d8:2d:5d:df:9e:45:a6:6e:
         0f:23:84:b8:bc:2f:d5:b4:3e:6e:3a:fe:21:af:3f:16:60:b1:
         00:67:8a:b3:10:39:1a:92:c6:bd:9c:03:6c:aa:88:7c:77:0c:
         93:cc:c4:63:9f:15:f3:53:46:26:27:b0:8e:84:05:37:2b:73:
         56:7b:cd:b7:ee:9b:74:e8:ad:4d:6c:23:dc:6d:7a:d2:94:b0:
         b8:e8:18:50:25:86:54:95:6a:b3:e5:26:c4:7b:5a:cc:b1:09:
         9c:53:d6:ec:d1:77:a5:f1:91:06:4e:08:f0:86:2e:1b:fe:82:
         0c:e8:f5:5f:3c:f1:ea:25:6a:69:5b:ca:e5:66:50:aa:33:10:
         95:08:b3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:38:02 2026 by rpki-client