Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ac8a68c8-f73d-3a7b-86e6-c84d48243acc.roa
File:                     ac8a68c8-f73d-3a7b-86e6-c84d48243acc.roa (raw, json)
Hash identifier:          GcksUDHx4cgq5bnDgTwyWVKikwMJsRy/XElUq2g9uTE=
Subject key identifier:   F9:0D:74:42:4A:37:1F:90:43:50:06:20:95:45:1D:95:55:96:8E:3A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584EA7967F30B451CD851AA885D0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ac8a68c8-f73d-3a7b-86e6-c84d48243acc.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     41264
IP address blocks:        104.133.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:7f:30:b4:51:cd:85:1a:a8:85:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9d33442d-0ed0-4d9d-80ba-b0d640901503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:41:aa:62:13:67:ce:fb:96:05:72:b2:a6:ad:
                    23:6a:ec:22:9a:05:2e:14:aa:48:09:44:de:27:c8:
                    5c:db:c1:76:97:28:a4:5d:70:5e:94:94:f8:5e:64:
                    5e:3a:8c:d9:8d:59:56:ea:fe:e4:b3:aa:06:4b:0e:
                    96:a9:45:ed:50:21:ba:98:f8:fe:8c:93:40:e8:c2:
                    b1:32:b5:85:6a:00:38:d2:f9:57:1c:4f:a5:65:25:
                    79:79:99:ee:cf:a9:37:06:3f:98:25:7a:d9:04:ef:
                    24:78:9d:3d:3a:9b:0b:92:71:4e:11:c6:3c:e1:c0:
                    f1:68:cc:53:ae:3a:e9:24:db:65:bf:ce:d5:91:d8:
                    1e:ae:e3:c4:23:b9:f4:ef:d8:c1:62:24:91:13:b4:
                    29:3b:39:c7:88:b5:4a:63:2f:c8:b0:f3:9d:66:25:
                    53:b2:cc:4c:e4:f8:e3:95:06:4b:f5:d9:cf:5c:ad:
                    e9:f1:2a:51:c2:e3:46:e2:fd:79:bf:06:0e:1d:b1:
                    05:40:6d:bd:79:0d:21:43:6c:e7:09:2b:af:01:e5:
                    1e:e2:06:62:be:eb:e7:1c:4e:39:39:90:a7:b6:a3:
                    7c:48:32:54:6b:17:30:11:ed:73:12:d0:c6:b7:78:
                    74:6d:2c:39:3b:90:a4:fe:6d:4a:21:2f:28:94:c5:
                    a3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0D:74:42:4A:37:1F:90:43:50:06:20:95:45:1D:95:55:96:8E:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ac8a68c8-f73d-3a7b-86e6-c84d48243acc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:66:7e:de:1b:e7:69:05:30:95:37:3e:97:14:89:ae:14:e4:
         a2:17:b2:0f:0b:73:07:c2:7e:b2:c4:da:4c:7f:f5:b6:a6:2f:
         97:ae:09:3e:a5:d7:80:31:bc:09:2f:8d:2b:c8:1f:97:2e:a1:
         56:a5:f4:0b:7b:b1:9e:c1:dc:78:fd:12:73:4d:1c:5f:cd:6b:
         4b:2d:c6:81:09:ad:f0:cd:b2:13:f3:53:66:0c:ef:97:c9:f4:
         89:f5:f9:31:89:79:ac:e6:75:42:dd:f8:7e:4e:dd:93:e5:2b:
         e6:4e:07:a1:af:c3:d0:af:94:4d:aa:28:83:9f:33:f6:b0:e9:
         42:af:a4:e2:f2:2b:c5:b3:9f:ac:aa:10:72:c6:fe:68:22:45:
         c4:27:1a:0a:63:cf:ac:f1:fd:6f:fa:5a:a2:de:f2:0b:02:d9:
         ef:84:f3:55:61:d7:aa:bb:12:17:00:e9:2c:24:e7:b9:db:37:
         87:fb:43:7d:ea:7d:c3:56:c7:7d:d1:cc:97:1f:ce:88:3c:39:
         34:3a:88:f6:fe:dd:3b:a0:af:0e:1e:d6:fa:05:f1:b5:47:16:
         8c:6e:0f:79:dc:7f:fb:c5:02:fd:4f:72:a5:2c:44:ef:b2:37:
         f8:80:f0:f8:d1:8c:05:0d:fe:9a:81:47:ea:37:95:7b:82:1f:
         9d:5c:67:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:25:57 2026 by rpki-client