Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9bf48ac1-703c-3af3-8f05-6803d3f10791.roa
File:                     9bf48ac1-703c-3af3-8f05-6803d3f10791.roa (raw, json)
Hash identifier:          ZlgPkSp6NecswsEacuwkpKRBwygXQyWKptcnV14MvMU=
Subject key identifier:   99:5B:95:51:1B:DE:9D:14:6E:D5:B7:60:21:AB:E0:A3:EB:77:F9:56
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584EA794DEB081812D682D05D280
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9bf48ac1-703c-3af3-8f05-6803d3f10791.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     41264
IP address blocks:        104.132.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:de:b0:81:81:2d:68:2d:05:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b2c746f1-a161-411d-a4b5-bd07e201f4d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e2:39:f9:52:69:5b:6e:67:98:28:ba:40:db:
                    46:3f:ed:16:c8:cf:45:89:38:00:37:a1:fb:0d:32:
                    14:47:65:86:b0:d3:13:3a:a4:ac:5c:e9:3d:e1:be:
                    33:f6:86:57:a8:68:25:5c:da:29:b8:84:50:5d:8e:
                    38:ee:15:37:58:f4:66:de:6d:4d:09:ff:c5:68:e2:
                    41:04:73:aa:1b:da:30:2e:ad:3c:c4:e2:11:4e:32:
                    97:a8:96:f6:f2:99:27:46:df:6a:c1:eb:6f:e6:00:
                    77:a0:60:51:78:ee:50:4e:eb:57:53:31:0b:91:bc:
                    71:9f:01:b6:95:f4:a8:cb:2b:38:d8:df:be:60:b5:
                    48:e2:f3:19:f3:d9:e1:9b:53:9a:80:17:b1:11:a0:
                    e9:39:6e:3a:f7:37:cd:17:78:47:88:7f:2f:6d:46:
                    1d:6d:10:ba:40:df:6d:b0:15:c2:1a:fb:83:be:4f:
                    ef:c2:13:b1:d0:18:f8:e8:c4:b8:e1:cc:1a:16:f7:
                    a0:a5:f7:32:a3:45:28:8f:ec:ae:6d:aa:55:b6:eb:
                    aa:b9:eb:39:2d:25:41:69:7e:db:94:e1:c4:e2:29:
                    77:dc:e9:9f:6c:70:58:66:a7:26:63:b1:57:01:ec:
                    c0:d8:17:7d:77:98:97:24:c6:0c:1c:f6:aa:96:49:
                    05:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:5B:95:51:1B:DE:9D:14:6E:D5:B7:60:21:AB:E0:A3:EB:77:F9:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9bf48ac1-703c-3af3-8f05-6803d3f10791.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:83:89:ef:5a:05:76:15:f0:82:ea:fa:55:91:84:49:7c:de:
         d4:ad:b0:9b:3d:f4:95:df:a0:df:71:d4:c3:b0:41:59:fc:8f:
         2f:02:81:fe:8a:3e:95:31:59:a4:1b:7a:88:a2:5e:be:30:77:
         f5:06:52:78:23:2f:d8:b4:3e:58:9d:07:0d:14:ca:09:d1:44:
         7f:0f:1e:d5:f3:26:d1:32:52:54:a3:1d:31:59:59:32:9f:d4:
         cc:8e:ca:69:e9:96:17:e1:60:b8:7e:80:4b:85:2e:6b:1e:9d:
         d5:86:fc:7a:7b:30:17:ba:93:b3:07:20:84:e8:5d:cb:19:2e:
         1d:0d:da:bc:13:eb:dc:4b:fe:b2:ac:2b:d6:6a:e7:bf:2d:c3:
         98:c5:dc:62:d0:1c:77:c0:ee:bb:74:ac:b3:be:10:bb:57:6d:
         c1:a2:5d:35:7b:2e:a3:75:fe:8b:b8:23:6e:bc:46:71:da:cb:
         ae:14:65:d5:56:fa:2e:9d:7b:bd:c0:d5:6e:99:b6:b2:e1:60:
         5a:a3:91:df:f2:58:cc:9f:75:99:29:46:6a:95:35:01:e2:bb:
         89:e0:6b:1e:4a:5a:23:ee:b1:13:b2:15:67:90:74:76:00:b8:
         61:64:ff:8a:e8:fb:39:ee:2f:0c:93:bd:21:ab:10:93:ee:09:
         10:fe:7b:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlN6wgYEtaC0F0oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YjJjNzQ2ZjEtYTE2MS00MTFkLWE0YjUtYmQwN2UyMDFmNGQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOI5+VJpW25nmCi6QNtGP+0WyM9FiTgAN6H7
DTIUR2WGsNMTOqSsXOk94b4z9oZXqGglXNopuIRQXY447hU3WPRm3m1NCf/FaOJB
BHOqG9owLq08xOIRTjKXqJb28pknRt9qwetv5gB3oGBReO5QTutXUzELkbxxnwG2
lfSoyys42N++YLVI4vMZ89nhm1OagBexEaDpOW469zfNF3hHiH8vbUYdbRC6QN9t
sBXCGvuDvk/vwhOx0Bj46MS44cwaFvegpfcyo0Uoj+yubapVtuuques5LSVBaX7b
lOHE4il33OmfbHBYZqcmY7FXAezA2Bd9d5iXJMYMHPaqlkkFiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJlblVEb3p0UbtW3YCGr4KPrd/lWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOWJmNDhhYzEtNzAzYy0z
YWYzLThmMDUtNjgwM2QzZjEwNzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALSDie9aBXYV8ILq+lWRhEl83tStsJs99JXfoN9x1MOwQVn8jy8Cgf6K
PpUxWaQbeoiiXr4wd/UGUngjL9i0PlidBw0UygnRRH8PHtXzJtEyUlSjHTFZWTKf
1MyOymnplhfhYLh+gEuFLmsendWG/Hp7MBe6k7MHIIToXcsZLh0N2rwT69xL/rKs
K9Zq578tw5jF3GLQHHfA7rt0rLO+ELtXbcGiXTV7LqN1/ou4I268RnHay64UZdVW
+i6de73A1W6ZtrLhYFqjkd/yWMyfdZkpRmqVNQHiu4ngax5KWiPusROyFWeQdHYA
uGFk/4ro+znuLwyTvSGrEJPuCRD+e7E=
-----END CERTIFICATE-----
Generated at Thu Sep 10 20:38:05 2026 by rpki-client