Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e0cdd86f-bef6-3429-846c-e793c0db3717.roa
File:                     e0cdd86f-bef6-3429-846c-e793c0db3717.roa (raw, json)
Hash identifier:          KbEiBLpKC7JO8vEJRU3dvKB85rxfD87H3lMhp2JUA6U=
Subject key identifier:   99:44:88:3F:21:E9:95:74:9E:CB:31:D3:4E:C6:CD:34:FE:48:57:7D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584EA79683185FBEF62C67D9CE80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e0cdd86f-bef6-3429-846c-e793c0db3717.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15169
IP address blocks:        104.134.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:83:18:5f:be:f6:2c:67:d9:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5dd6a2b1-a613-425b-a69b-01a90415bf49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ab:2c:c4:cf:43:ea:58:d7:60:70:b0:24:c4:
                    68:47:a8:49:e7:30:a9:7e:31:e0:ba:10:29:08:e0:
                    f9:4a:24:06:4c:6d:8b:d6:05:94:81:1f:19:00:e9:
                    85:f3:60:d0:06:39:0f:97:7d:b6:ef:0b:2e:c2:76:
                    33:b5:aa:8c:c3:c1:7c:6d:bb:04:7f:43:94:1b:2b:
                    36:01:91:b5:1d:8f:31:c2:fa:03:7d:42:86:b6:4b:
                    78:ad:de:15:de:08:a7:17:79:81:93:19:b8:76:69:
                    f7:0d:4c:c9:83:c5:de:b1:34:fe:37:85:fa:d1:aa:
                    3b:7c:61:31:0e:48:43:e7:b7:cf:9d:90:07:bd:ea:
                    d0:9d:0f:91:ae:dd:ad:ce:1e:fc:3c:4d:e3:7a:71:
                    66:3b:67:1f:44:ef:29:28:d7:3b:15:28:dc:9c:ce:
                    da:dd:7a:a9:04:e9:67:82:d7:f5:5b:d3:2c:17:42:
                    5c:a3:6d:aa:af:06:bb:7a:28:6b:86:4a:4d:d9:90:
                    00:3e:5c:f9:ec:e5:c0:31:e5:f0:9d:a0:cb:b2:64:
                    e1:5d:50:a9:67:cb:36:62:af:a2:36:86:4a:e1:0d:
                    4b:16:9a:f3:ad:20:6d:74:1a:11:6a:08:9d:b7:64:
                    26:8f:84:67:cb:12:1a:b8:67:cd:f6:3c:c6:00:f4:
                    9c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:44:88:3F:21:E9:95:74:9E:CB:31:D3:4E:C6:CD:34:FE:48:57:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e0cdd86f-bef6-3429-846c-e793c0db3717.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:fc:71:e8:0b:b3:c4:b9:72:58:e0:ce:9f:59:62:28:d8:ee:
         8c:b0:73:a9:f2:74:b7:2e:1f:54:dc:33:f6:c8:19:bf:e9:b4:
         88:e5:86:ef:96:dc:be:87:0d:fd:d4:f6:4d:fb:e0:1c:f4:89:
         13:b2:90:2a:29:d7:23:e2:9b:f5:92:6e:e5:91:0a:5d:fd:c5:
         e8:98:0f:af:dd:a7:01:b8:a8:9d:23:5e:c8:3a:33:80:27:94:
         d0:8f:a3:15:5a:0b:9f:a2:bd:fe:3d:5f:c4:a3:b1:33:e2:32:
         8c:fa:85:8a:86:2d:c9:17:6c:6c:3b:1c:31:14:fe:4b:df:1d:
         a2:0a:16:07:d5:06:4f:bf:d9:fb:d0:bd:1e:47:59:bc:e9:39:
         4c:7b:53:fa:02:7e:a4:6f:28:9b:f1:ec:4a:15:fa:cc:2e:3d:
         b4:e4:6d:16:7e:87:10:1d:43:a8:63:f9:39:29:da:6c:e0:86:
         cb:4d:a1:3e:2b:6a:e2:f5:c2:67:15:f7:eb:4a:e5:0b:05:43:
         74:11:89:68:ab:cc:93:93:e6:d8:ea:6d:83:b9:cc:d8:a8:05:
         5a:d1:9f:36:c8:ed:db:bb:3e:44:a9:9b:a7:af:3d:a3:1d:6c:
         08:89:b5:46:3b:ce:66:fc:68:6f:78:af:79:04:88:c5:dc:43:
         82:87:00:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:33:28 2026 by rpki-client