Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e140730b-8155-34cb-ab23-a2d43b5dc4cf.roa
File:                     e140730b-8155-34cb-ab23-a2d43b5dc4cf.roa (raw, json)
Hash identifier:          AH1ZMULx5JyuGyIy2PD1vy4UPZFsfP7deb0lVUomvBE=
Subject key identifier:   71:67:8C:A7:A2:C8:46:EF:4C:0C:19:05:73:BA:36:B3:63:A6:A4:FB
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584EA79A924826061CCA91973300
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e140730b-8155-34cb-ab23-a2d43b5dc4cf.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15169
IP address blocks:        104.134.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:92:48:26:06:1c:ca:91:97:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c7dc75ca-9f4d-4919-a3e3-d043b978145d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c7:1a:fb:51:bc:fc:7d:6f:10:29:3f:a7:e4:
                    ad:4d:a9:b5:08:fb:5e:a0:2f:fe:f0:63:08:65:f3:
                    f6:25:b9:7d:ca:e5:19:52:19:dd:61:b4:ce:d9:68:
                    1f:de:f0:a5:66:08:d5:35:89:c9:ac:90:31:c9:3d:
                    ee:7f:66:f1:25:1f:96:05:8f:93:91:8c:a1:ca:95:
                    c7:4f:44:15:c0:05:30:98:54:0b:94:0b:25:5a:0a:
                    b9:17:d7:77:77:dc:a2:b8:6d:68:ec:86:e4:40:58:
                    d9:dc:83:8e:b9:77:38:2b:a0:68:2a:0d:08:04:01:
                    ce:91:35:53:f9:02:68:96:48:c8:8b:42:60:f4:36:
                    ec:08:04:fe:50:93:3b:03:69:1a:3b:30:09:a0:72:
                    3f:90:5f:26:85:5c:62:d8:ec:6d:de:11:37:22:39:
                    c3:c0:a9:06:7f:06:c4:17:48:f1:15:98:d7:86:73:
                    60:69:54:a5:6c:02:d4:5b:c2:58:36:7f:14:0a:9c:
                    c9:66:ee:a7:3a:3d:e9:3d:03:e0:01:d6:6a:82:85:
                    cd:84:71:b2:71:d0:1a:ad:9c:27:41:73:86:94:6d:
                    d3:0e:59:82:10:88:45:a4:90:1d:19:31:66:8f:7c:
                    87:51:c4:c8:9e:59:27:8f:03:f1:9a:e4:36:bb:63:
                    48:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:67:8C:A7:A2:C8:46:EF:4C:0C:19:05:73:BA:36:B3:63:A6:A4:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e140730b-8155-34cb-ab23-a2d43b5dc4cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:68:fd:21:17:f8:72:72:56:6c:b9:61:12:51:4f:57:c6:4e:
         1a:d4:59:4d:22:44:ce:33:45:14:2d:a2:b5:d0:76:68:e2:d4:
         f4:53:87:63:f8:96:05:66:7d:2a:df:bb:8f:c3:f8:07:c1:77:
         dc:3b:fc:91:92:96:36:ae:9c:4b:94:82:5e:96:f5:56:b8:be:
         7d:cc:98:68:9d:f9:cd:1f:92:a5:f0:bc:31:ae:d3:11:14:93:
         c8:1e:d5:97:0f:03:f2:6e:c8:2b:e8:7f:e5:58:78:31:c2:e1:
         75:28:16:d2:13:e9:dc:37:3f:3d:e0:fa:51:ea:00:49:1f:07:
         34:95:c2:da:a3:de:33:38:0b:40:cb:98:80:45:e5:f4:66:74:
         a2:4c:f6:b1:0e:5e:0b:96:e6:ad:de:99:c1:86:8e:a5:d4:df:
         e9:ad:88:d3:dd:7e:85:a9:59:87:69:9c:d0:67:9a:2b:2e:b7:
         fe:92:a5:c0:cf:e8:61:c2:0e:fa:19:b2:ed:4a:6b:7c:71:7b:
         dd:e7:d4:ee:b6:30:df:ad:56:52:b8:4f:05:f9:93:13:00:e9:
         21:bd:f7:0b:6d:7e:38:3f:36:62:fe:71:9a:21:3d:da:8e:c4:
         3e:42:cf:2c:21:0f:28:1f:bd:89:82:d8:a9:65:01:b1:72:d9:
         b1:f4:87:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:37:54 2026 by rpki-client