Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cfd5bacf-b676-36e1-b190-4f38b062ea59.roa
File:                     cfd5bacf-b676-36e1-b190-4f38b062ea59.roa (raw, json)
Hash identifier:          8008kCkEQHEXJNJhXFwzkBEcn1PxvJulg5pJlKLns7E=
Subject key identifier:   E7:C4:47:2C:06:D2:29:A0:20:DA:34:3A:D2:47:BD:7D:DA:73:FF:CA
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584EA79AE78BD3BAEC51A85B80C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cfd5bacf-b676-36e1-b190-4f38b062ea59.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36411
IP address blocks:        104.134.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:e7:8b:d3:ba:ec:51:a8:5b:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=547c0a1c-2539-4d48-8021-10b64dc0ce9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:69:c0:65:b7:0a:70:02:8d:fe:58:4b:85:06:
                    e0:09:78:24:dd:4b:32:0b:81:d9:58:80:d1:21:f1:
                    8c:7f:40:da:8b:92:71:a0:d0:79:84:13:10:ab:ec:
                    bd:5e:0d:eb:ce:bb:22:8c:2c:cd:92:94:e5:3c:b7:
                    27:f8:57:d6:f3:da:7e:f0:3d:1e:5f:a4:a2:32:f6:
                    67:a2:c1:1e:81:ff:9f:e4:27:e8:96:af:3e:66:5a:
                    f9:ae:cf:bc:9e:44:8e:98:2e:2b:d7:68:da:0b:28:
                    f8:99:05:11:2b:92:ad:47:ae:20:06:fd:04:b5:02:
                    31:91:56:bc:96:96:01:e7:65:5b:2b:ca:34:e4:d1:
                    32:27:d0:87:97:7c:2c:b4:17:79:a3:fc:8d:64:d5:
                    ae:56:71:6a:72:3a:02:48:7d:d7:07:dc:6b:fa:42:
                    42:99:33:96:2d:78:0f:b7:24:81:a8:e0:fa:63:54:
                    df:59:09:a3:dd:63:62:6c:f0:37:aa:20:a0:b2:7a:
                    c9:09:a7:53:bd:b6:53:fd:a5:3c:0f:49:e2:1f:f0:
                    51:16:f9:75:c8:5f:37:13:ea:ca:70:21:aa:31:ec:
                    67:6f:ea:4a:55:5e:2f:56:e3:56:d9:dc:41:9c:d3:
                    d9:93:26:ce:20:a8:85:d7:26:37:b7:71:0f:d8:31:
                    dc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C4:47:2C:06:D2:29:A0:20:DA:34:3A:D2:47:BD:7D:DA:73:FF:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cfd5bacf-b676-36e1-b190-4f38b062ea59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:af:87:23:dd:13:ef:af:6f:62:6c:83:95:c5:dd:89:33:d0:
         af:b0:5a:5e:6b:d2:1a:85:1f:94:47:68:e5:b1:44:81:8d:c5:
         d5:68:63:48:56:88:b1:d5:17:03:56:1a:6b:3e:3b:05:89:5b:
         64:66:c5:b1:0f:ef:21:ed:f3:7c:15:f2:c7:a8:e5:e5:d5:e0:
         d4:b1:04:32:55:76:45:ad:bf:37:a0:02:45:17:56:8d:92:46:
         9b:bb:05:ee:91:bc:27:fd:df:33:b1:a1:49:0e:40:82:00:09:
         16:e2:23:c9:21:3f:98:7b:37:ed:75:dd:9a:c2:94:f1:b0:86:
         3d:9f:6d:e4:a3:f6:3e:8c:22:3a:e7:72:01:65:18:e5:cd:e6:
         87:77:60:32:8d:63:94:5c:8d:d2:a1:38:d4:5a:bd:81:98:fc:
         17:d6:2c:e0:1b:e5:f7:72:09:8f:1d:26:62:11:e1:33:4b:51:
         cf:67:9d:1b:b5:18:44:b7:5c:ca:bc:72:90:2a:a9:41:b8:fd:
         ac:cc:70:5b:d8:8d:26:03:93:ab:e4:5d:7e:d3:5a:57:40:e5:
         28:3a:d4:3c:dc:c8:4d:41:4d:50:bd:50:3d:84:d0:5c:de:ef:
         be:0b:76:bc:d9:d3:c6:48:03:ad:f9:e1:5f:62:9a:42:5f:b8:
         16:f0:0d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:25:08 2026 by rpki-client