Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9e110705-abe7-3bb5-ba98-2c8f9a311e9e.roa
File:                     9e110705-abe7-3bb5-ba98-2c8f9a311e9e.roa (raw, json)
Hash identifier:          3eXR6w+vNM9P0he2YOUp/ZcxP8/kDs168J2YW4wZijw=
Subject key identifier:   17:86:01:AA:5A:86:AD:71:F5:B7:A9:BA:C1:A8:39:BC:31:45:F6:FD
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584F4984A0766D566693B56F3900
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9e110705-abe7-3bb5-ba98-2c8f9a311e9e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        104.134.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:a0:76:6d:56:66:93:b5:6f:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=22d5aa2a-8de7-4716-9c90-a534d4145972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3e:f1:c4:8e:fc:17:11:51:ad:85:bf:c5:53:
                    88:17:6f:e7:40:e4:91:7c:c5:f1:f2:00:c9:a6:80:
                    b0:6a:a8:f6:01:df:ca:f2:5a:32:6e:f6:ca:78:a6:
                    70:e7:c4:a8:99:b9:c2:a7:ae:3d:ab:78:0b:8e:cc:
                    f1:48:97:58:e8:5f:38:38:e2:98:5d:95:0d:fc:7d:
                    6d:85:f9:24:31:2f:52:b2:fb:a0:69:c3:5d:41:01:
                    87:20:8f:d0:b7:4c:72:c1:a9:3e:30:75:ad:a9:c3:
                    59:15:7c:9e:f3:5d:b3:b9:ae:92:ee:19:5c:17:55:
                    76:8c:12:78:46:f9:7b:cd:6b:e8:be:8a:40:18:a7:
                    e6:13:68:b2:c2:70:26:9e:91:91:7a:ea:f3:b0:24:
                    44:75:8f:15:94:54:80:f6:7d:60:8e:9d:ab:83:df:
                    80:13:f4:9d:60:47:32:5d:43:34:67:06:41:ac:ea:
                    07:c1:5c:8c:80:4c:dc:50:5a:99:95:53:08:05:e6:
                    e1:e5:fc:ac:73:37:e4:0c:80:da:53:a8:63:de:9a:
                    da:6d:d8:cc:b6:da:2a:07:6a:ff:2f:65:03:08:ac:
                    5f:b8:e7:45:2d:6c:b6:53:31:0f:92:e0:9c:27:41:
                    3c:13:ff:f2:c2:67:a1:03:0a:62:c1:bf:ad:d3:bb:
                    7b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:86:01:AA:5A:86:AD:71:F5:B7:A9:BA:C1:A8:39:BC:31:45:F6:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9e110705-abe7-3bb5-ba98-2c8f9a311e9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:b9:34:6e:08:d1:9a:72:31:88:76:94:63:2e:35:36:7f:71:
         c3:37:4a:60:5f:ee:dd:ea:3b:3f:5c:94:9a:f3:a2:7a:8e:3a:
         70:8d:e4:0b:9c:e6:6c:69:8c:8f:e9:b4:83:30:0f:36:7d:3f:
         27:5c:b5:de:2d:61:5a:51:6a:f3:7c:74:61:10:c9:3c:64:85:
         0b:a5:59:36:50:e3:e8:93:fe:d9:a2:ea:a9:00:79:c1:eb:f8:
         8b:d9:37:e2:f3:be:55:bc:64:5e:e9:75:e7:3e:f5:c4:b0:f3:
         dc:6b:c7:7a:f9:86:4a:8c:bb:d6:2f:7a:d1:62:ba:dc:58:20:
         b1:3b:52:de:38:79:14:15:98:ea:58:72:2b:ea:5e:d5:4b:73:
         7b:bc:7b:33:96:c0:07:7c:17:a6:2b:b1:83:d7:64:78:8b:e0:
         e0:a4:ec:cb:7f:af:32:fe:ba:fc:dc:8b:f9:3d:8e:06:38:3e:
         6a:08:c3:ef:10:b4:63:ae:29:84:94:d5:96:87:e8:46:57:95:
         ec:5f:31:fc:82:93:88:7c:e2:9e:32:d6:c7:7e:19:8e:99:df:
         e9:1f:38:53:de:5c:22:02:29:bc:88:4b:ce:6a:e3:19:8c:a2:
         b5:49:09:9e:16:25:8d:97:f5:5e:90:cb:5a:f4:1c:f8:a3:ae:
         ea:31:a6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:51:24 2026 by rpki-client