Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bb70a88a-132c-3362-b6f7-40ab4aeeead3.roa
File:                     bb70a88a-132c-3362-b6f7-40ab4aeeead3.roa (raw, json)
Hash identifier:          5Ex4Q/wjx1+rcp9PfjQJ2ghstKKOOe//yMj4h+VoYoc=
Subject key identifier:   4D:D4:DF:01:3F:4F:49:92:48:C1:3A:DE:DA:38:DE:8C:9D:C9:B1:01
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584F4984948AF172AA622B470D00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bb70a88a-132c-3362-b6f7-40ab4aeeead3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     41264
IP address blocks:        104.132.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:94:8a:f1:72:aa:62:2b:47:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2aece378-bd68-4964-9579-1998cf08cfa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e2:25:35:df:e1:c3:bc:7d:57:4b:46:8c:58:
                    9b:99:84:dc:9e:81:ba:cc:6b:e8:67:2f:c5:e6:79:
                    5b:a7:f0:52:45:6e:99:a0:87:6a:30:1d:c0:4c:e0:
                    1f:93:8b:d1:01:ba:25:17:e7:a7:5c:29:99:2c:9b:
                    3d:cb:92:94:56:3e:1b:1e:96:80:12:83:88:92:09:
                    35:6a:69:bc:f1:7e:5e:81:23:b4:f9:54:89:d2:35:
                    c1:11:df:97:5c:1a:37:31:df:36:4c:b9:4d:cc:fa:
                    8f:e8:50:0f:7d:52:16:7c:dc:43:43:64:c3:60:c0:
                    d0:cc:9d:eb:d8:c8:c9:cc:f6:a1:a9:ed:87:f3:0a:
                    e3:88:6f:1c:2b:5a:45:4e:d6:72:37:b2:a8:0f:0d:
                    e3:09:fd:f9:e4:b1:5b:d9:6b:ba:72:e8:8b:e4:c9:
                    27:16:af:31:d4:e9:e6:b9:b4:43:2f:d6:0e:e1:3a:
                    19:e8:c2:e3:ab:69:8e:cf:fe:ce:02:a5:6e:7c:c1:
                    6a:14:d7:9e:da:6a:05:98:99:46:a0:73:3b:12:4b:
                    5d:17:74:e9:0b:23:21:69:48:2b:b6:99:28:c2:50:
                    f4:b1:13:ec:c2:72:da:2d:4d:77:c3:ec:48:1b:22:
                    14:d7:db:e9:79:de:eb:f2:f9:40:73:04:21:78:7a:
                    7e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D4:DF:01:3F:4F:49:92:48:C1:3A:DE:DA:38:DE:8C:9D:C9:B1:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bb70a88a-132c-3362-b6f7-40ab4aeeead3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:62:ae:a8:d7:36:29:49:50:64:76:0d:0e:17:8c:98:64:14:
         c4:4e:05:cd:47:db:cd:33:09:be:93:1c:1a:2f:dd:0b:7f:e7:
         12:67:75:1e:d1:36:d1:68:ad:f4:ed:71:86:2f:63:1b:93:fd:
         cb:e6:12:0e:06:7d:3c:13:42:b7:c5:76:5a:dc:2a:bf:e3:41:
         22:1c:12:79:c3:1e:bb:30:dc:0f:a9:2b:67:f7:09:58:bb:69:
         61:65:a3:59:fe:6e:e3:66:b7:d6:31:29:59:7d:d2:23:6e:6f:
         2b:85:67:f3:7d:ab:fd:4a:c2:07:76:9b:90:c7:23:8c:43:c6:
         a6:3b:35:82:84:18:4d:b7:48:9b:3c:1e:e7:22:56:d2:60:9b:
         4b:32:22:81:e3:bb:4c:1b:a0:62:43:b0:51:89:9c:8c:56:30:
         97:6d:eb:73:fe:ba:cc:d5:a3:45:1f:37:38:07:b1:8a:79:4c:
         64:7c:ba:e7:1f:1f:f7:e8:ee:13:3a:82:73:8e:5d:4e:eb:82:
         ee:c3:ee:ee:e3:be:16:a6:aa:8e:db:75:d3:b3:26:7f:81:e7:
         f3:fc:da:21:77:1c:10:e2:99:8e:1b:e6:fe:21:3d:c8:5e:54:
         ea:87:80:7f:05:c4:bc:cc:1c:6a:f0:6b:94:f2:d2:a4:63:b4:
         c3:35:e0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:24:50 2026 by rpki-client