Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c9b5ef09-8f9d-3363-b9d7-b7648c1d3237.roa
File:                     c9b5ef09-8f9d-3363-b9d7-b7648c1d3237.roa (raw, json)
Hash identifier:          VYPTQzbq3+MsmFmeXK7XaW2nkIX66NZMn9v3x6mUdP0=
Subject key identifier:   CB:B0:4C:E3:E3:08:A3:9F:0F:B3:DD:8C:60:3B:27:5B:DE:A6:87:30
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584EA79A81127DC657CFC7D6A300
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c9b5ef09-8f9d-3363-b9d7-b7648c1d3237.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15169
IP address blocks:        104.134.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:81:12:7d:c6:57:cf:c7:d6:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=af6c2e07-3ed6-4f5b-8f06-596ea7f14403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ea:45:a6:eb:d5:19:c1:6e:af:3f:48:d2:46:
                    11:ba:e9:8c:c7:02:70:c9:1c:c4:28:bd:60:07:17:
                    40:6b:4a:73:f6:92:c9:e3:f0:f0:5b:9c:c7:0c:ef:
                    3c:6c:8b:51:a5:34:d7:de:49:33:93:2d:44:c0:7b:
                    5e:38:af:aa:bb:bd:b3:06:06:11:88:36:40:f5:c8:
                    9e:46:ff:f6:7f:c8:57:85:fc:43:2c:27:00:a4:c9:
                    da:4e:57:3f:54:cc:6f:5c:b5:83:f1:92:77:f9:85:
                    ce:2d:61:46:51:a8:bb:5d:3b:45:b6:8b:95:41:4d:
                    55:74:5b:eb:aa:f3:77:a7:57:e7:f1:8c:cf:41:13:
                    52:0e:10:93:48:fa:7a:27:6d:be:a7:c9:2c:1c:0e:
                    d9:ca:5b:17:ed:b9:18:eb:d3:56:62:9b:bf:bf:03:
                    6b:31:fb:4c:12:32:f3:42:ba:ae:12:95:a7:29:9d:
                    81:61:41:8f:bb:42:c4:c0:df:69:3c:82:65:78:2c:
                    fb:cf:75:96:d8:cc:11:7a:d4:8d:5c:dd:0b:d2:09:
                    50:5c:e3:86:7b:23:a7:05:fb:55:bf:cb:9b:bb:9d:
                    0e:09:dd:bc:8a:2e:9a:4f:b8:de:f7:ff:a9:44:c6:
                    f1:bd:90:0a:ed:da:e3:c7:e5:68:f4:6f:4a:85:51:
                    59:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B0:4C:E3:E3:08:A3:9F:0F:B3:DD:8C:60:3B:27:5B:DE:A6:87:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c9b5ef09-8f9d-3363-b9d7-b7648c1d3237.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:b0:dd:38:8e:14:18:ab:fa:4a:bc:66:1c:4f:e4:dd:21:c1:
         5c:02:ec:c7:ec:00:b5:1c:2e:35:ba:ad:6a:a6:3f:2d:bc:53:
         49:38:15:2a:7f:a2:d5:cb:a1:b6:cd:19:65:13:b5:bc:cd:87:
         ba:b0:70:c9:a8:93:49:ce:ee:08:b4:66:7c:32:86:7d:a4:df:
         53:d3:b3:f8:a6:a9:e2:46:ec:a5:c2:ab:51:2c:31:72:a5:d1:
         05:c8:fe:cf:22:36:ed:83:62:03:18:7a:64:65:55:ee:44:80:
         29:48:ae:fc:15:03:f8:a8:eb:89:05:87:9d:b6:45:30:ba:cd:
         9e:e5:3b:be:5d:fe:66:2b:31:70:43:0e:18:e5:20:83:19:90:
         52:65:5f:a8:74:09:de:c1:67:5f:21:3c:d7:46:8f:bf:74:dd:
         a6:21:d9:d7:f4:98:0a:c7:0e:90:ae:b6:90:a4:79:ef:09:b9:
         bd:dc:19:9c:81:b4:e8:64:ed:70:30:44:c0:e3:68:78:f1:62:
         fc:33:33:e3:d8:0c:21:55:a6:ef:9c:20:cd:48:6e:f3:c2:50:
         ab:2e:93:58:12:6c:35:98:1a:ff:e3:22:55:76:74:42:eb:a3:
         61:ba:54:ee:bd:27:ae:a2:13:ec:10:e0:08:3e:92:35:69:bc:
         d9:27:b4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:58:19 2026 by rpki-client