Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/aee6c5a1-a9fd-36e5-bb13-131792910abe.roa
File:                     aee6c5a1-a9fd-36e5-bb13-131792910abe.roa (raw, json)
Hash identifier:          fJBvRJE1W2yBow6XifesuC50tmw3Eonpq0goFFFc6fE=
Subject key identifier:   35:8D:7D:FC:11:BC:F5:14:C3:EA:D2:70:75:80:1B:E6:89:DC:22:75
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584EA794A0FC2E36C2A822D2108C
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/aee6c5a1-a9fd-36e5-bb13-131792910abe.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     41264
IP address blocks:        104.132.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:a0:fc:2e:36:c2:a8:22:d2:10:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4e1456e9-53e1-46d8-806f-08dc278707ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:05:64:09:64:be:0a:55:ab:51:67:0e:a0:b4:
                    5c:58:c1:a9:e9:dc:fe:43:13:5a:85:02:4f:e3:fa:
                    1e:69:2c:17:b3:bd:c7:fc:c5:9a:54:a8:81:6d:a1:
                    62:85:eb:20:3c:8b:b7:79:33:aa:36:bd:f9:e3:45:
                    01:d5:20:bb:f3:21:59:34:8e:3e:07:4b:7c:bc:19:
                    cb:1e:5f:c3:2e:05:cd:79:15:aa:12:f9:f0:03:4e:
                    3d:4e:fe:59:9d:0e:3b:22:a1:82:4e:5b:cc:d5:97:
                    bd:39:88:f3:b0:a2:34:5b:e1:88:37:aa:85:18:71:
                    8c:62:a9:01:72:13:b6:45:e7:80:a4:91:70:40:29:
                    a3:d5:fa:03:82:cd:a5:91:f2:31:5e:70:98:fe:23:
                    12:ab:ef:c9:ff:c1:34:22:9a:55:5b:60:86:7b:2a:
                    a0:01:42:52:56:64:8f:36:75:db:40:cc:32:56:f3:
                    2c:d6:29:91:b3:23:84:bd:2c:cc:26:ab:0f:57:4c:
                    be:75:dd:5d:a9:08:c4:ec:5f:95:20:9f:e3:b0:5d:
                    cb:6b:51:8d:ef:4a:4e:22:86:fd:b8:54:37:85:eb:
                    0a:1f:00:01:fe:78:38:7c:1c:ef:8b:88:62:40:af:
                    bf:58:6e:46:e8:81:b2:11:cc:b5:1f:6e:ec:41:ae:
                    82:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8D:7D:FC:11:BC:F5:14:C3:EA:D2:70:75:80:1B:E6:89:DC:22:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/aee6c5a1-a9fd-36e5-bb13-131792910abe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:64:d1:71:cb:49:24:e7:50:01:77:06:7c:c2:64:21:ea:01:
         31:fa:47:a2:ba:cd:ff:37:43:1e:94:92:af:db:f0:0c:9f:16:
         79:69:99:74:93:8b:d6:94:8a:2f:f0:0d:78:3d:aa:29:1d:95:
         fc:f1:1f:79:93:2d:df:1a:f2:c6:03:20:f9:f4:74:17:ef:16:
         15:f3:1c:df:9b:1f:01:77:05:ac:1f:5c:86:9f:e5:a1:e4:c8:
         a3:6c:cf:82:38:41:f4:2c:b2:24:62:80:b7:c0:10:1d:85:86:
         23:62:1c:d5:eb:c9:86:8b:1c:65:31:03:d6:36:60:bf:ca:8f:
         4f:df:f4:e7:41:2a:11:91:66:3e:2f:6c:b4:0d:85:42:ba:6f:
         df:cc:48:7b:e0:04:1d:79:31:fb:f4:7e:f9:3b:dd:4c:66:46:
         1c:d1:6e:63:95:a3:97:bd:73:1d:f4:e5:71:0c:61:b5:b8:b3:
         3e:f7:c5:1e:7c:a3:b7:b0:62:bc:c4:31:4a:45:7d:86:8e:f2:
         93:85:11:6d:17:66:22:77:75:b5:42:c9:50:40:59:eb:6d:5e:
         c8:da:e1:ab:3a:94:35:39:6d:dc:3f:19:56:f6:08:c5:2c:ff:
         c4:ab:bf:e2:ef:8c:3b:58:27:44:30:65:79:69:09:fe:f1:af:
         95:7f:ef:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:19:09 2026 by rpki-client