Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e9cdedfa-37cd-3c62-a9d6-a59dea6d29a5.roa
File:                     e9cdedfa-37cd-3c62-a9d6-a59dea6d29a5.roa (raw, json)
Hash identifier:          XT3JbobPYS/eSIasE8YOKMnZz/01Lx0oFIL049LxlPo=
Subject key identifier:   E8:C3:28:66:FF:C5:3B:99:85:6C:ED:2B:A9:03:57:1C:59:44:49:2A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584EA7955D6F6D53FEEA55A13800
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e9cdedfa-37cd-3c62-a9d6-a59dea6d29a5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     41264
IP address blocks:        104.133.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:5d:6f:6d:53:fe:ea:55:a1:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d6663ebd-9c17-4593-9fb8-c0707877431b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:92:d3:32:00:3d:72:f9:15:3e:0b:ce:87:90:
                    dc:f7:1b:a9:48:fe:5f:82:9b:4a:c5:ec:20:60:25:
                    d4:b6:a9:2c:43:18:3b:e4:3a:66:30:a2:b6:d0:89:
                    67:fb:e7:fd:d3:af:b3:f3:bd:ce:a9:33:0a:29:be:
                    f9:d2:38:5a:a4:23:65:38:57:85:2a:64:48:6e:c7:
                    6c:43:10:80:6e:4e:5a:52:ef:f8:33:ab:7b:10:55:
                    a1:aa:38:ad:52:5f:1d:d7:cb:88:8b:c9:65:b3:e6:
                    78:54:47:45:5e:5e:05:72:a6:b1:00:df:31:23:e8:
                    33:1b:ab:ae:27:6c:5f:1f:60:b1:f6:ee:ad:4f:08:
                    9a:94:66:42:df:50:15:13:5d:d9:67:d5:8e:ee:21:
                    65:73:0b:f7:fa:61:f9:d4:da:ed:92:41:69:fa:37:
                    a7:e5:57:51:db:8b:26:f0:55:5b:3a:60:05:19:ca:
                    c4:5c:b3:be:2a:d0:1e:28:49:cf:cf:45:91:57:61:
                    b0:97:92:07:42:43:bb:6a:7c:d1:dd:5f:f6:2c:17:
                    5c:0b:cb:63:6c:92:17:0e:27:b1:24:63:d6:7f:94:
                    fe:3c:c7:d8:cb:0a:32:4d:a4:c5:ef:e3:f7:d9:9e:
                    39:61:96:91:1f:e6:49:1b:30:31:fa:f8:29:26:53:
                    65:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C3:28:66:FF:C5:3B:99:85:6C:ED:2B:A9:03:57:1C:59:44:49:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e9cdedfa-37cd-3c62-a9d6-a59dea6d29a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:81:87:40:43:dc:a7:ba:81:8d:e9:6c:d1:11:1b:99:9d:65:
         60:97:5a:58:36:f1:db:2c:88:9f:61:60:cd:0c:cc:ec:b3:52:
         6a:ca:7e:1d:66:13:77:82:bc:99:0a:da:10:3f:3e:e6:bd:ee:
         1b:05:3d:70:6f:f9:3c:bb:ca:e3:55:1e:25:87:4b:36:35:63:
         f5:25:a8:71:9b:6c:c3:5a:25:57:d5:82:bb:0e:43:97:62:5d:
         57:35:f8:93:a8:9b:ef:bb:d0:fb:fd:f6:d6:2c:d0:7f:1d:65:
         9e:41:92:cc:75:40:d9:8b:8b:c2:c1:eb:f2:c7:30:d3:ac:e5:
         db:35:48:72:ae:0f:2f:5a:ea:f4:61:30:94:31:e5:0f:28:db:
         0f:c4:92:51:b0:fb:c0:4a:f7:43:9a:ec:7f:6b:e8:2f:ba:b1:
         3d:4d:a1:25:6e:82:9a:b7:50:51:e5:cd:77:fb:24:a4:37:f6:
         77:63:41:14:b8:f2:8f:08:e6:e8:64:fc:6d:75:81:08:da:1c:
         21:f4:46:34:8a:90:51:e3:0a:22:dc:be:ce:3f:62:9b:c8:d8:
         8f:cc:5f:b7:5a:84:6c:4f:9e:f6:b2:17:30:88:2f:14:fb:0e:
         c7:ed:0f:2f:05:13:e3:3d:d4:7a:dd:39:50:05:2c:7a:5d:6f:
         09:06:d2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:33:40 2026 by rpki-client