Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dff52862-8599-3677-b358-ca034fed3632.roa
File:                     dff52862-8599-3677-b358-ca034fed3632.roa (raw, json)
Hash identifier:          zfza4vJfvg6GG0M4a9kLhmmaIaWZjZAnt+IwjfA9cBM=
Subject key identifier:   06:EF:83:79:C9:5D:46:A9:94:45:A8:73:84:B6:83:7D:A4:A1:AB:BC
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584F82ADBD76924CA6A4E4BF21C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dff52862-8599-3677-b358-ca034fed3632.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     41264
IP address blocks:        104.135.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:bd:76:92:4c:a6:a4:e4:bf:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=a08e81ff-d6e8-4306-97bf-d25c88317161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a1:a6:3a:b2:bd:7f:ed:d5:34:31:5f:fe:5c:
                    45:0c:aa:93:32:f6:a3:09:48:a4:9b:eb:c2:ec:c0:
                    87:8d:96:de:34:11:64:e5:9c:55:ee:e8:6a:dd:a1:
                    48:73:23:e5:ec:93:29:dc:3b:b1:0a:74:67:e5:30:
                    9f:fa:6d:86:d9:a1:5e:66:e4:fa:ee:1a:e5:cc:9c:
                    a8:ec:e7:af:8b:70:45:3d:65:dd:e8:f8:e2:4e:fc:
                    c2:a6:d3:f9:2b:5e:ec:f8:b5:80:08:c9:c8:47:46:
                    6a:66:1c:79:e8:13:63:9f:9b:15:94:3d:7a:16:a1:
                    7a:6b:02:20:57:bf:b4:84:01:5f:43:ff:fd:03:dd:
                    ef:fe:de:c3:20:e1:31:99:22:e2:ee:2c:95:71:ab:
                    28:24:92:aa:ca:aa:4f:1b:29:40:ce:b0:b5:9e:8b:
                    9c:06:25:c1:d9:26:d3:d2:85:b7:eb:00:7b:45:64:
                    26:26:99:1d:e9:8c:59:47:ef:64:39:70:28:43:4f:
                    04:8e:92:c6:c2:63:b8:8d:4f:7b:5a:ef:c9:08:82:
                    dc:39:96:46:fb:56:85:a2:9b:79:f0:ba:78:17:4f:
                    9d:61:42:cf:36:e1:a3:cc:3e:26:7e:37:78:e8:08:
                    6c:08:ff:d8:da:56:cc:09:f0:61:18:88:e5:ab:3b:
                    94:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:EF:83:79:C9:5D:46:A9:94:45:A8:73:84:B6:83:7D:A4:A1:AB:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dff52862-8599-3677-b358-ca034fed3632.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.135.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:a2:83:be:74:bc:68:a1:52:9d:48:c3:b4:b7:91:05:84:23:
         19:97:36:ff:2d:d3:9c:ef:91:84:83:0e:ba:b5:96:ad:67:11:
         11:c8:e1:9d:7a:20:84:47:b6:81:67:13:2f:bb:89:56:c3:12:
         f3:c3:4b:5f:16:06:13:07:8d:0e:19:55:c9:2d:47:97:43:42:
         91:9f:0d:8b:a2:6c:37:1f:80:69:81:e2:25:5f:b2:3d:70:90:
         75:31:95:2d:1a:78:20:15:96:b2:ba:76:bc:cf:32:2b:64:60:
         e8:f2:c3:14:f6:7f:fe:16:58:61:44:76:e4:20:cc:2a:8a:38:
         32:c2:e3:33:be:23:46:9e:81:16:8b:5d:eb:f3:1c:55:e4:8f:
         24:fa:d6:73:36:3f:85:12:45:ed:2a:b0:78:fd:a4:2b:4b:51:
         97:5e:e3:ab:4d:4f:32:0f:ac:ec:93:2b:98:eb:a9:2d:24:9b:
         7a:33:20:24:84:b0:2c:0b:dd:ac:6d:7f:a2:04:d9:94:96:d1:
         f0:0b:c0:b7:b4:af:46:e9:b7:fe:54:3f:9c:81:55:49:8b:16:
         25:ac:96:ea:2c:77:41:6a:d1:df:fd:84:44:07:e3:d8:3c:a5:
         c3:4c:b3:30:65:9e:ee:7a:18:39:f2:34:d9:1a:59:e6:72:81:
         cb:a9:fc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:40:43 2026 by rpki-client