Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e11c6d9c-3575-3ffc-b159-13c08bfb1286.roa
File:                     e11c6d9c-3575-3ffc-b159-13c08bfb1286.roa (raw, json)
Hash identifier:          4etNccdOuxNOaXI5OHNqW2fclWqczfFXL1dJ9skCoSw=
Subject key identifier:   18:EB:71:92:B5:89:35:65:75:23:58:8B:A9:08:65:9E:F9:52:36:49
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584EA7968380FAABDB3DCEB7CF40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e11c6d9c-3575-3ffc-b159-13c08bfb1286.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15169
IP address blocks:        104.134.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:83:80:fa:ab:db:3d:ce:b7:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b356cffa-8875-47ce-99c4-3e7ef29e8013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2a:3d:33:f9:1b:95:58:f4:e0:d4:36:52:82:
                    37:c9:f0:5b:af:5c:85:09:2b:72:a7:24:0a:2a:44:
                    54:38:0e:ba:c4:0f:d2:0c:fe:9d:89:f9:0c:02:a8:
                    03:94:28:12:b4:18:5a:ac:1b:01:34:3e:4c:99:e1:
                    9f:b5:44:9d:76:f4:03:7b:b1:73:d5:b9:7c:2a:86:
                    79:55:91:74:42:87:6b:0d:fb:74:f2:bd:48:af:be:
                    40:66:48:b2:ce:dd:74:3e:52:3f:69:c5:7a:cf:5e:
                    08:41:0e:33:76:9f:48:8c:d9:f2:bc:a2:46:87:6a:
                    11:68:5b:f5:90:04:b2:9e:f5:92:86:04:10:47:03:
                    d5:04:7f:e8:59:8d:cc:8c:65:27:22:16:bc:ea:48:
                    9d:81:44:0b:11:b4:9f:72:7f:4e:a1:75:0f:ac:2b:
                    ed:9c:2d:c4:73:00:4c:28:23:a7:f8:d0:8a:44:44:
                    f9:9e:9e:80:15:e5:6e:12:64:60:49:d3:40:2b:1e:
                    ad:70:91:97:15:cc:66:4e:8a:6f:a6:0e:4b:b9:e2:
                    a9:a9:58:e7:28:24:42:50:b2:2c:08:7b:a9:65:5e:
                    5c:fb:e0:64:44:5f:42:eb:e9:8c:db:de:dc:27:e5:
                    0a:00:7d:82:d3:8c:68:55:41:e2:b4:08:61:d0:46:
                    d7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:EB:71:92:B5:89:35:65:75:23:58:8B:A9:08:65:9E:F9:52:36:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e11c6d9c-3575-3ffc-b159-13c08bfb1286.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:65:9c:da:b3:5b:e5:11:52:dd:0b:f6:63:fb:32:29:59:da:
         7d:39:92:28:98:26:50:4b:16:3f:bc:7e:b5:7b:6d:4a:e9:fc:
         5b:84:c1:46:e5:5d:5a:fd:84:85:1c:1b:41:f1:58:3b:be:98:
         95:8d:39:41:04:1e:73:1b:b6:c6:7c:02:12:6f:21:ce:00:9a:
         93:59:49:11:19:23:f0:0b:b5:2d:e4:2a:ce:4c:54:2a:bf:01:
         6f:9b:ac:17:8d:35:e0:ef:25:8f:97:a5:26:46:9b:65:4e:ea:
         42:64:af:6c:8a:06:cf:da:66:17:1d:c4:eb:20:61:8e:fb:96:
         6a:ef:5d:45:a8:e9:af:76:03:86:9d:5a:a6:c8:44:bf:fd:02:
         da:1e:9e:16:a8:55:93:1b:8c:6e:a0:d3:e1:ea:b6:0c:ca:ec:
         27:38:4f:f6:51:9d:b2:ef:4b:0f:a5:06:68:47:42:4f:ab:73:
         6e:f5:70:72:96:a4:4b:c4:24:3b:84:96:c8:e8:a9:ae:90:40:
         df:3e:9d:a8:ad:02:d6:7c:c3:ba:ef:6c:9d:26:54:f8:f2:30:
         21:35:35:20:1c:8d:fd:a0:ae:07:26:f2:23:62:01:36:f4:4f:
         c7:70:a5:e0:e5:17:77:08:ef:64:87:9d:77:e7:23:7d:8d:93:
         2e:46:e7:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nloOA+qvbPc63z0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YjM1NmNmZmEtODg3NS00N2NlLTk5YzQtM2U3ZWYyOWU4MDEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyo9M/kblVj04NQ2UoI3yfBbr1yFCStypyQK
KkRUOA66xA/SDP6difkMAqgDlCgStBharBsBND5MmeGftUSddvQDe7Fz1bl8KoZ5
VZF0QodrDft08r1Ir75AZkiyzt10PlI/acV6z14IQQ4zdp9IjNnyvKJGh2oRaFv1
kASynvWShgQQRwPVBH/oWY3MjGUnIha86kidgUQLEbSfcn9OoXUPrCvtnC3EcwBM
KCOn+NCKRET5np6AFeVuEmRgSdNAKx6tcJGXFcxmTopvpg5LueKpqVjnKCRCULIs
CHupZV5c++BkRF9C6+mM297cJ+UKAH2C04xoVUHitAhh0EbXywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBjrcZK1iTVldSNYi6kIZZ75UjZJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZTExYzZkOWMtMzU3NS0z
ZmZjLWIxNTktMTNjMDhiZmIxMjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIavMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABhlnNqzW+URUt0L9mP7MilZ2n05kiiYJlBLFj+8frV7bUrp/FuEwUbl
XVr9hIUcG0HxWDu+mJWNOUEEHnMbtsZ8AhJvIc4AmpNZSREZI/ALtS3kKs5MVCq/
AW+brBeNNeDvJY+XpSZGm2VO6kJkr2yKBs/aZhcdxOsgYY77lmrvXUWo6a92A4ad
WqbIRL/9AtoenhaoVZMbjG6g0+HqtgzK7Cc4T/ZRnbLvSw+lBmhHQk+rc271cHKW
pEvEJDuElsjoqa6QQN8+naitAtZ8w7rvbJ0mVPjyMCE1NSAcjf2grgcm8iNiATb0
T8dwpeDlF3cI72SHnXfnI32Nky5G5ww=
-----END CERTIFICATE-----
Generated at Thu Sep 10 22:46:33 2026 by rpki-client