Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d3cb217b-99cb-34b9-922f-2e6396b68dd0.roa
File:                     d3cb217b-99cb-34b9-922f-2e6396b68dd0.roa (raw, json)
Hash identifier:          tza5DTySOhPfrDA+9U6w1AeTlXp6MSqjBRLAYjq3YyA=
Subject key identifier:   78:1D:80:A5:4A:18:BE:79:18:28:06:D2:B8:DB:3F:DB:41:9A:24:1B
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584EA79AE84054309A876CFE1130
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d3cb217b-99cb-34b9-922f-2e6396b68dd0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15169
IP address blocks:        104.134.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:e8:40:54:30:9a:87:6c:fe:11:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d1aaf163-4b35-4ae9-9735-c36757c85e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:75:b1:63:af:07:a7:62:91:1f:e8:c7:10:f0:
                    c0:14:e8:16:58:24:eb:38:fa:9b:ed:dc:77:a4:1a:
                    b6:7e:f8:b6:63:f6:3f:71:b8:fc:96:bd:56:60:5f:
                    53:52:9b:a5:1f:37:7b:cd:5e:09:83:10:e6:ae:10:
                    e2:82:01:10:08:f1:7f:7e:21:48:fe:a7:76:50:a6:
                    b6:65:18:9f:0d:28:5a:60:aa:72:c1:4c:cc:34:e0:
                    73:45:85:30:3f:86:77:c5:53:bb:7e:0e:d7:7d:e9:
                    d8:54:ef:37:64:4f:ec:22:28:19:8b:1b:32:26:87:
                    50:a0:47:e5:e1:31:3c:df:82:2d:3e:9f:c5:24:ae:
                    ff:dc:67:9e:4a:ad:5a:02:6d:43:4e:1b:92:17:da:
                    e8:90:4e:ef:44:20:15:77:93:84:78:86:4c:1c:0c:
                    5b:3d:1a:1d:a8:64:ca:c5:b8:67:b0:3c:b0:b3:23:
                    3e:05:43:16:6a:4d:0a:8d:c3:a8:aa:de:6b:6c:cd:
                    52:5f:53:6d:71:66:82:65:0e:35:4c:8f:54:db:db:
                    68:8a:39:81:5f:a7:df:46:6f:0d:54:bd:85:6a:0f:
                    72:56:1a:38:cc:f9:ca:94:14:74:80:9b:af:26:6c:
                    7d:64:92:2d:dd:d2:99:54:e6:ab:97:f2:4e:bd:d2:
                    13:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1D:80:A5:4A:18:BE:79:18:28:06:D2:B8:DB:3F:DB:41:9A:24:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d3cb217b-99cb-34b9-922f-2e6396b68dd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:2c:c6:87:43:b3:07:7e:d5:a9:fe:d1:21:58:80:3f:c9:e0:
         37:04:f3:86:d8:d8:52:ad:7a:84:af:45:e8:39:00:07:21:e4:
         13:83:8e:65:80:4c:2d:8b:c2:77:0b:92:68:5d:b8:ad:61:85:
         f2:94:8e:bc:ff:dc:cc:b7:eb:9b:7d:1c:60:b5:ed:88:03:dc:
         a9:95:31:80:a9:63:9e:72:9e:be:44:0d:1c:a3:e8:1e:d5:b4:
         83:83:c8:62:c3:ec:4b:47:56:f4:99:f3:1c:65:b7:9f:7a:ea:
         38:2f:c9:ef:65:ed:7d:97:6a:e7:3c:a2:29:9a:65:8c:cb:68:
         51:22:94:ed:e4:c1:27:08:e9:08:19:4f:3c:6a:f4:52:40:43:
         bc:84:60:5d:64:85:53:55:51:80:ec:0c:77:b7:75:68:7a:7b:
         cd:bc:3a:61:eb:24:44:b3:5f:8c:0c:62:11:97:3f:a8:89:12:
         62:34:0c:34:a9:c0:b9:63:b7:42:3c:dd:4c:c2:2d:a9:57:52:
         30:34:96:77:8f:8d:55:cf:a8:a7:22:65:8a:17:54:43:d2:98:
         35:ea:64:3a:e4:2d:50:77:80:91:9c:24:cb:65:36:17:cb:5a:
         61:18:7f:7e:89:f4:43:59:84:b3:84:3f:b6:63:b1:25:c6:55:
         4a:64:55:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmuhAVDCah2z+ETAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZDFhYWYxNjMtNGIzNS00YWU5LTk3MzUtYzM2NzU3Yzg1ZTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnWxY68Hp2KRH+jHEPDAFOgWWCTrOPqb7dx3
pBq2fvi2Y/Y/cbj8lr1WYF9TUpulHzd7zV4JgxDmrhDiggEQCPF/fiFI/qd2UKa2
ZRifDShaYKpywUzMNOBzRYUwP4Z3xVO7fg7XfenYVO83ZE/sIigZixsyJodQoEfl
4TE834ItPp/FJK7/3GeeSq1aAm1DThuSF9rokE7vRCAVd5OEeIZMHAxbPRodqGTK
xbhnsDywsyM+BUMWak0KjcOoqt5rbM1SX1NtcWaCZQ41TI9U29toijmBX6ffRm8N
VL2Fag9yVho4zPnKlBR0gJuvJmx9ZJIt3dKZVOarl/JOvdIT8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHgdgKVKGL55GCgG0rjbP9tBmiQbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDNjYjIxN2ItOTljYi0z
NGI5LTkyMmYtMmU2Mzk2YjY4ZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIa3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGUsxodDswd+1an+0SFYgD/J4DcE84bY2FKteoSvReg5AAch5BODjmWA
TC2LwncLkmhduK1hhfKUjrz/3My365t9HGC17YgD3KmVMYCpY55ynr5EDRyj6B7V
tIODyGLD7EtHVvSZ8xxlt5966jgvye9l7X2Xauc8oimaZYzLaFEilO3kwScI6QgZ
Tzxq9FJAQ7yEYF1khVNVUYDsDHe3dWh6e828OmHrJESzX4wMYhGXP6iJEmI0DDSp
wLljt0I83UzCLalXUjA0lnePjVXPqKciZYoXVEPSmDXqZDrkLVB3gJGcJMtlNhfL
WmEYf36J9ENZhLOEP7ZjsSXGVUpkVYg=
-----END CERTIFICATE-----
Generated at Fri Sep 11 01:12:57 2026 by rpki-client