Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b86920eb-93dd-3e90-94cb-78aa809d61f3.roa
File:                     b86920eb-93dd-3e90-94cb-78aa809d61f3.roa (raw, json)
Hash identifier:          /v4MzXcf6GtMAS7pQVaeVePnqq79EdUOY57q9NRvsOM=
Subject key identifier:   9D:8E:B7:80:BE:08:59:06:C5:69:23:87:27:75:3B:F0:DB:64:AA:09
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584F5A32E46B860220BAC478FCC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b86920eb-93dd-3e90-94cb-78aa809d61f3.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     36411
IP address blocks:        104.132.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:e4:6b:86:02:20:ba:c4:78:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=416162bd-d728-4dad-b636-8f2e8cb68891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a4:31:85:77:07:d8:b5:c3:23:fc:1d:cb:1a:
                    1f:ff:9a:15:be:71:f6:34:9a:ce:d4:32:30:fb:dd:
                    47:11:75:6e:07:47:87:1d:5e:61:a5:8a:5a:35:86:
                    7b:a1:fe:c2:bb:4b:92:5d:ba:40:e3:f0:17:35:b8:
                    2a:75:b3:e4:94:13:1a:ad:33:fb:54:96:b7:35:4c:
                    6b:5c:b8:ff:90:d5:90:4b:f5:c5:07:1b:9e:04:92:
                    40:78:a2:44:25:3c:a3:0f:83:3c:52:1a:33:f2:1e:
                    f9:ae:7f:16:03:ba:eb:2b:b6:de:3e:7e:09:ef:28:
                    11:f7:b6:8b:aa:64:69:23:2b:a2:63:37:ed:8c:14:
                    24:c4:68:48:41:bd:d3:c8:42:b6:0f:4a:c4:f5:a4:
                    f5:b5:d8:3d:98:df:56:02:52:0e:1e:1b:8d:23:72:
                    fc:e5:6a:7e:e9:85:72:5a:f1:9f:bc:ea:8b:9c:89:
                    63:7b:4d:18:c7:aa:e6:08:4e:8a:16:e5:63:be:0f:
                    98:94:f2:97:bd:e3:e0:16:e0:b6:09:d6:c5:9d:f3:
                    1d:0c:3a:bf:d4:46:49:a5:ce:34:2b:1c:f3:93:74:
                    27:a7:6f:b0:97:4e:c4:79:04:67:62:7b:66:cc:02:
                    df:5f:a8:01:8a:d4:f3:d3:64:56:e5:c3:c6:d5:a2:
                    00:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:8E:B7:80:BE:08:59:06:C5:69:23:87:27:75:3B:F0:DB:64:AA:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b86920eb-93dd-3e90-94cb-78aa809d61f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:ea:25:61:c7:b2:24:24:87:5c:1a:14:46:dd:d5:17:0a:cf:
         bf:4c:11:a7:be:16:e5:18:4b:13:47:69:bd:96:68:3b:5f:8d:
         5f:bb:6a:78:44:a6:56:78:6e:41:f8:8d:b0:cd:d3:63:dd:e4:
         61:31:88:91:b4:13:e2:eb:e0:cf:fb:d0:92:48:0c:12:f9:c7:
         7d:a2:4a:11:a1:a8:00:38:a5:78:a0:66:b6:43:b2:53:f7:fd:
         6c:fa:a0:7d:dc:4f:44:fa:a6:7d:eb:a8:13:de:bf:96:2a:63:
         f0:8e:6b:b3:06:8f:2a:b2:35:9f:83:03:ab:10:88:82:5b:91:
         9e:ff:d7:4e:52:f9:7d:67:53:6c:84:a0:fd:58:d2:6d:80:2b:
         a0:c7:88:c7:37:75:10:76:46:af:9a:43:1f:7e:69:3f:db:ba:
         00:97:44:af:6b:47:13:38:d8:a8:f1:39:c1:e8:67:11:97:98:
         0c:25:26:28:96:ae:8a:35:be:40:21:29:43:75:aa:81:5f:e2:
         e4:0c:df:4a:0c:19:d9:64:50:93:38:82:0c:95:f8:78:26:fa:
         44:2d:8b:f3:af:47:e1:69:98:78:62:ec:24:5e:81:7c:4d:5f:
         f8:11:3b:d9:95:35:9e:79:b9:46:17:7e:26:e8:38:3b:d7:9a:
         d0:b1:88:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:11:01 2026 by rpki-client