Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d57ca891-b161-3132-ab8b-ca273d80971e.roa
File:                     d57ca891-b161-3132-ab8b-ca273d80971e.roa (raw, json)
Hash identifier:          CNM1aVW1hSX2lpqs2tC6iUzDIVNU9Rflpha4zeVdbWQ=
Subject key identifier:   86:19:33:01:7C:88:73:F9:31:23:E8:49:B5:6D:D9:5F:70:6C:40:18
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584F4984C4B6A22C991437091A00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d57ca891-b161-3132-ab8b-ca273d80971e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     395973
IP address blocks:        104.134.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:c4:b6:a2:2c:99:14:37:09:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ae57075c-9746-4888-b2c5-eb285c1e382a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ef:3f:1c:99:b8:5f:2e:cc:5a:2b:ff:79:ec:
                    83:68:51:d6:33:d4:e3:88:99:aa:f2:97:c1:7d:ab:
                    93:0c:21:47:35:0d:d4:8e:04:5d:18:37:2e:55:77:
                    c8:e6:1c:11:02:96:a3:c1:b4:21:e0:d4:14:c1:19:
                    08:4f:10:6b:be:22:92:24:41:b4:13:7f:72:8b:46:
                    c3:06:44:ef:ad:95:87:f2:81:c4:9d:80:08:ad:41:
                    f3:9f:c4:65:b6:31:89:08:31:cb:b3:43:4b:da:31:
                    23:31:de:53:0f:36:37:e8:8b:35:5e:42:0b:ed:49:
                    d7:8f:c8:8c:b4:fd:30:fe:f4:8c:1f:ef:9f:15:71:
                    99:6f:56:5e:38:bd:8a:62:74:9e:95:a0:b0:c4:67:
                    c8:2f:cd:8f:48:c2:be:93:87:52:9b:9f:5e:54:00:
                    e6:16:70:77:08:c7:01:70:37:74:d5:7a:bd:58:9c:
                    f6:f3:a3:91:df:c5:f9:76:43:ac:ce:b3:48:16:c9:
                    86:0c:bd:c4:22:2b:bb:d0:06:c8:32:c3:1c:e1:6a:
                    5d:fb:2b:49:94:0b:2f:c2:7e:e5:f3:1d:3c:cd:58:
                    dc:ca:71:02:01:2c:74:a9:ef:7e:3b:3b:46:a8:99:
                    82:90:87:bd:9c:05:05:2c:20:cc:03:df:16:1d:51:
                    ce:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:19:33:01:7C:88:73:F9:31:23:E8:49:B5:6D:D9:5F:70:6C:40:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d57ca891-b161-3132-ab8b-ca273d80971e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:e8:c1:b0:a2:46:a4:46:22:4e:8f:af:8d:c2:7c:da:8f:83:
         40:6b:1f:d5:25:35:09:86:d4:13:20:d6:5a:96:19:1c:ab:0d:
         50:65:91:5e:d6:e8:21:76:a2:c4:ff:e1:e6:d6:4d:d0:a5:47:
         e0:22:9b:3e:91:8e:19:8d:af:8c:6f:e1:9e:2f:29:d0:10:49:
         95:5f:d6:97:c2:6c:ca:29:a2:0d:cf:3c:b1:25:ae:aa:59:11:
         d2:2a:2a:b3:da:6f:82:5c:7b:00:57:74:f8:e4:1b:b8:15:61:
         33:9d:48:dd:b8:f8:38:fd:68:78:23:47:ff:44:9a:57:cb:31:
         1b:7b:4b:d5:4c:66:dd:90:da:ca:2e:ad:d5:c7:87:b4:ca:5b:
         32:f5:5d:8f:32:54:df:cb:da:6b:2a:a5:4c:c3:ee:95:da:d5:
         b1:9d:11:bb:8a:de:d1:7c:62:a4:95:f7:4a:07:ed:a2:bc:43:
         53:5b:00:03:aa:5d:61:20:aa:d6:44:4a:11:2e:0d:74:5d:ec:
         c6:53:08:47:4c:11:14:93:d4:f0:94:fe:82:4e:b8:d1:ae:ea:
         7a:43:c8:b0:19:70:a3:52:55:74:9f:c3:18:89:00:44:f8:2f:
         91:68:92:29:1b:65:02:86:b4:bd:3b:f8:90:c1:23:24:0c:6f:
         e5:d1:c4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:25:32 2026 by rpki-client