Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b9b8ef0f-ceae-3512-9397-5fb131ad86db.roa
File:                     b9b8ef0f-ceae-3512-9397-5fb131ad86db.roa (raw, json)
Hash identifier:          yXqq4/A1Qlkrjwaq8j6bHnO52hhqmW/ovZrHhTc2YhA=
Subject key identifier:   69:55:AD:3C:3D:24:89:EC:46:95:86:28:B7:78:5F:4F:F4:1B:38:21
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584EA7967F103507A902CE123000
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b9b8ef0f-ceae-3512-9397-5fb131ad86db.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15169
IP address blocks:        104.134.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:7f:10:35:07:a9:02:ce:12:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=26bc4b08-be9a-4ea6-be2d-0ece2e0123b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9d:f1:a0:bb:00:a9:3f:b3:78:07:c2:61:e2:
                    ae:00:15:0d:85:b9:9e:8d:e6:b4:07:ca:dc:af:dc:
                    a7:bf:9e:a9:ef:32:1a:f7:a2:7f:11:dc:86:ca:c3:
                    bf:44:f2:ce:a1:82:77:f8:74:bb:d7:dd:24:41:41:
                    15:37:df:4e:ed:70:c6:da:c0:a9:50:c5:81:77:40:
                    bf:ab:fd:53:5a:ee:8f:03:c8:e3:b1:82:e4:6d:fc:
                    9a:d7:77:93:d2:fc:16:d0:b9:2c:96:1c:d6:c1:d3:
                    80:dd:04:96:bc:e5:13:94:ba:f0:76:7c:67:b9:a8:
                    63:58:32:69:fc:95:b4:ed:6f:cc:1b:d1:e1:52:e9:
                    c2:a5:22:4e:e8:14:fc:cc:c3:54:d9:32:98:19:45:
                    54:f2:37:c0:17:07:2c:f7:43:b4:8f:19:87:5f:e0:
                    41:15:b2:c2:7c:16:56:ee:43:f8:42:37:f0:54:ae:
                    27:3c:32:20:dd:14:53:3f:1a:2d:a1:55:90:d1:3e:
                    1b:8f:83:f1:03:1e:5a:54:9d:a7:2a:25:fd:97:68:
                    29:ce:69:b1:66:15:7e:55:51:7d:25:a1:98:ae:c2:
                    dd:26:04:8d:27:5e:a9:74:ca:c9:98:8c:41:7c:85:
                    8c:95:ba:e5:bd:53:58:60:05:6e:3b:55:56:e0:57:
                    12:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:55:AD:3C:3D:24:89:EC:46:95:86:28:B7:78:5F:4F:F4:1B:38:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b9b8ef0f-ceae-3512-9397-5fb131ad86db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:06:48:92:1b:b2:19:51:67:fd:10:25:a0:45:dd:6e:c1:c7:
         1c:51:55:24:7c:0b:c4:e8:3a:50:06:9b:6b:d2:29:47:82:42:
         10:61:99:87:5f:93:eb:b6:c5:df:e6:c1:61:74:ed:f5:36:33:
         3e:95:5c:f1:43:f3:21:f7:86:89:00:bd:84:62:aa:a8:a5:4d:
         4a:d9:01:7b:f4:94:77:db:55:a3:10:3b:9f:46:b8:5b:85:e5:
         8a:da:9e:14:21:6f:1e:3c:df:ae:10:8e:1d:ab:bb:b2:59:4e:
         f2:36:f4:8b:ce:6a:17:66:70:0d:84:55:d6:4c:f6:63:e9:87:
         b9:d4:d8:da:05:cd:46:90:b4:cd:5c:5a:23:59:ce:57:72:93:
         44:e6:fa:c6:f9:d2:51:9c:8b:35:fb:a3:6b:6f:04:3e:30:d7:
         92:cf:f5:af:bf:2b:e3:3e:d8:92:e8:56:e6:76:90:03:b9:5a:
         96:38:37:25:c2:f9:3d:a8:29:8b:9f:7e:ca:16:4b:c9:e4:bf:
         5d:00:d7:39:e0:8c:45:6b:2b:bb:1f:9e:a0:dd:a6:95:e2:ce:
         c6:07:3c:ef:bb:6b:ac:98:98:87:ee:b7:82:8c:d9:b6:a5:80:
         a4:3b:f1:46:e6:27:0e:7d:6b:19:06:a7:93:f1:99:d7:a7:ce:
         f0:0b:f2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:59:06 2026 by rpki-client