Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c0e51fd8-4af4-3173-9d20-0258717a076b.roa
File:                     c0e51fd8-4af4-3173-9d20-0258717a076b.roa (raw, json)
Hash identifier:          ERmFbAVfzwBY9EIj/2ArRppnWfTKz02YLA3zxWgfD68=
Subject key identifier:   89:6A:B0:C4:CE:AA:2D:A6:D9:3B:4F:A0:A0:E1:B4:AD:09:C7:37:1E
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584EA79561989DF174A8ECE0DD50
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c0e51fd8-4af4-3173-9d20-0258717a076b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     41264
IP address blocks:        104.132.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:61:98:9d:f1:74:a8:ec:e0:dd:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5c6501be-04dd-4121-bd92-127f54edde3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:39:1c:6e:b9:a1:1e:98:95:5b:f6:e5:4a:59:
                    34:83:2d:a8:53:11:af:aa:15:b6:f7:fd:a9:5a:ee:
                    fb:ab:35:f8:23:9c:19:92:f7:ce:41:74:52:c5:9b:
                    74:b6:0c:78:cb:b6:e0:e7:19:3a:fa:d8:98:af:63:
                    7e:39:83:d3:1a:25:69:2f:60:6e:cf:8d:b0:85:ca:
                    e6:4d:69:bd:8a:40:8c:c7:d7:8e:96:e0:47:ad:5c:
                    5a:17:91:85:cd:41:38:4d:e9:17:46:55:6f:68:b0:
                    a1:b4:0a:71:1a:da:6c:e6:a7:33:ea:c5:a0:b4:26:
                    68:c1:01:af:8f:10:ff:65:2a:c8:37:22:65:57:87:
                    3e:25:a5:e3:22:98:6e:c2:69:49:4e:17:64:73:88:
                    ce:25:57:a3:40:82:a8:72:65:bf:30:74:a9:ad:81:
                    fc:c0:59:ec:2b:a0:b8:b3:c8:39:61:21:3c:fc:85:
                    8b:85:c8:6b:e1:4d:97:f3:87:2f:6b:c3:38:52:53:
                    62:4b:fc:29:ba:30:a3:0c:a1:0f:05:7c:a8:4c:62:
                    0f:2a:ee:5d:bd:e8:da:de:a4:2a:a0:62:6c:de:14:
                    73:08:34:87:9e:3c:35:1a:fb:11:95:6c:3e:08:24:
                    e5:47:52:23:7c:30:9e:91:97:9c:bb:01:e2:0f:72:
                    a5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6A:B0:C4:CE:AA:2D:A6:D9:3B:4F:A0:A0:E1:B4:AD:09:C7:37:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c0e51fd8-4af4-3173-9d20-0258717a076b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:92:90:0d:72:d0:a9:c1:27:ab:ef:78:a6:62:8e:22:4e:c7:
         84:b7:a5:56:cf:cb:07:34:0b:1b:88:8a:d1:ef:b0:f1:d3:46:
         81:97:ea:1d:e7:f3:6f:6e:0c:14:17:2c:60:b8:50:00:0b:ef:
         c9:86:35:8f:60:ad:a2:02:70:5e:5d:e2:52:01:98:fd:d0:fc:
         9c:cf:bd:e4:1d:8b:90:7d:31:c8:3d:fb:a2:8d:94:3f:e7:18:
         8c:e5:ef:4a:8e:3f:b7:a0:65:88:05:be:67:cb:07:46:a7:1e:
         e6:f5:cb:91:85:92:bd:92:99:a3:2c:28:9a:7e:c6:17:03:ad:
         72:44:e0:fa:8f:b3:8e:cb:5e:7b:bd:15:da:aa:2e:a0:ca:52:
         1c:0c:1f:36:8e:f9:50:df:6f:ad:aa:85:ec:d8:b1:35:64:93:
         c8:7f:ad:6b:80:1c:61:24:57:b1:01:f7:80:a1:b6:6e:b1:16:
         6d:e9:da:18:56:24:57:2e:98:37:38:44:ab:c5:bf:29:7a:6b:
         32:8a:bf:e2:32:cb:63:0d:b0:8a:0e:73:d5:c7:81:50:13:b2:
         a9:db:ce:b1:c3:1c:7f:c3:ca:18:c5:59:92:a8:52:b2:d7:ed:
         7b:4a:f7:3f:9b:62:a3:e8:b9:e9:6c:a1:97:10:59:6d:82:87:
         7d:93:bb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:58:47 2026 by rpki-client