Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/291a0ab2-bb94-342b-9988-78abf1c8dfcc.roa
File:                     291a0ab2-bb94-342b-9988-78abf1c8dfcc.roa (raw, json)
Hash identifier:          2HWWvdT4DWXGscn3d58mh8htyRGpXLZSbTLT72pEiow=
Subject key identifier:   F3:C8:EB:44:28:EF:CA:0F:85:07:F2:F5:BC:D6:F0:5E:67:26:EC:DF
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584EA7955D989B23B4C952967CC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/291a0ab2-bb94-342b-9988-78abf1c8dfcc.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     41264
IP address blocks:        104.132.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:5d:98:9b:23:b4:c9:52:96:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d1f073e9-007b-48f0-8aef-b1e04b77c52f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b2:7e:59:e1:70:6f:c3:9c:d1:54:db:83:15:
                    3d:62:a5:41:d0:b0:27:1e:fd:27:76:0b:c2:d2:c5:
                    a9:b3:a6:b1:40:de:1d:1f:60:43:cf:a4:14:cd:e3:
                    6e:ab:26:31:90:6c:fe:14:26:ac:13:c7:0e:82:81:
                    27:e1:04:f1:6e:27:c0:8e:6c:23:63:cb:09:7c:bf:
                    fe:d1:78:77:4f:21:68:58:77:8e:2e:08:b8:c3:1c:
                    0a:d3:50:1c:15:10:e8:72:52:8f:8c:3b:dc:25:73:
                    54:97:97:ac:0b:cf:c1:01:a7:bf:80:84:b9:91:f6:
                    13:d2:ee:90:08:b0:62:cd:62:2b:6c:e2:75:e3:62:
                    96:97:d0:2f:a2:1d:3d:31:be:d4:ab:2b:7a:fd:bf:
                    d3:59:87:27:2d:5e:51:3c:31:d2:2e:08:8a:9a:49:
                    46:9f:dd:e7:32:dc:29:41:87:37:2b:2f:2b:09:21:
                    d6:d6:81:f1:26:0d:ec:9d:64:59:a7:9c:ec:6b:c3:
                    1b:e1:93:0f:70:af:7e:fc:e9:a1:49:0c:35:23:f9:
                    e5:03:91:b7:ce:cc:a5:32:be:b2:1e:37:eb:53:1d:
                    d2:62:c8:d5:4c:3e:15:41:2b:c9:06:e3:db:23:8c:
                    e0:12:44:8b:9f:16:3a:11:9c:30:3b:76:8e:08:57:
                    a4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C8:EB:44:28:EF:CA:0F:85:07:F2:F5:BC:D6:F0:5E:67:26:EC:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/291a0ab2-bb94-342b-9988-78abf1c8dfcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:9a:88:ec:13:a3:d5:a0:e4:c2:e9:11:d9:f9:c6:40:5b:e4:
         90:5e:a6:48:01:5d:2a:98:85:18:b4:f0:d9:05:fb:12:41:f8:
         ca:4a:c7:b4:15:37:4f:21:0e:a9:d4:bb:4d:64:6e:4e:e7:7c:
         f4:39:e9:d4:51:18:a2:62:99:06:6f:0e:7d:b5:91:a2:1c:60:
         04:bc:88:ed:33:f0:0e:74:f4:b7:d0:4a:d3:3b:79:39:22:e6:
         19:e0:03:c3:31:92:44:05:93:20:10:f9:b7:a1:17:73:dc:da:
         fa:2d:06:40:dc:ef:35:86:88:f1:fa:e4:99:84:62:52:cd:17:
         09:e7:3e:c8:5f:be:3b:c5:36:95:1c:62:85:eb:f0:74:c5:5f:
         87:63:e2:fa:dc:34:0b:9f:cb:f1:7e:77:92:e8:7f:76:9a:23:
         3f:c4:86:8e:4f:90:9b:f3:12:6d:7a:6e:79:80:87:11:24:7b:
         56:c3:07:fc:88:f8:fd:1c:ed:38:d0:aa:ba:6e:34:74:fa:6b:
         ff:7a:b7:41:c7:32:a5:65:d5:0b:a0:b5:3a:81:05:65:cf:f5:
         c4:db:97:3c:2b:16:d1:18:27:7c:07:66:78:3b:21:34:7c:e4:
         51:c5:3d:b9:38:d4:03:fc:fb:88:2a:1f:6f:ce:94:35:66:2b:
         0a:02:f9:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlV2YmyO0yVKWfMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZDFmMDczZTktMDA3Yi00OGYwLThhZWYtYjFlMDRiNzdjNTJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7J+WeFwb8Oc0VTbgxU9YqVB0LAnHv0ndgvC
0sWps6axQN4dH2BDz6QUzeNuqyYxkGz+FCasE8cOgoEn4QTxbifAjmwjY8sJfL/+
0Xh3TyFoWHeOLgi4wxwK01AcFRDoclKPjDvcJXNUl5esC8/BAae/gIS5kfYT0u6Q
CLBizWIrbOJ142KWl9Avoh09Mb7Uqyt6/b/TWYcnLV5RPDHSLgiKmklGn93nMtwp
QYc3Ky8rCSHW1oHxJg3snWRZp5zsa8Mb4ZMPcK9+/OmhSQw1I/nlA5G3zsylMr6y
HjfrUx3SYsjVTD4VQSvJBuPbI4zgEkSLnxY6EZwwO3aOCFekJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPPI60Qo78oPhQfy9bzW8F5nJuzfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjkxYTBhYjItYmI5NC0z
NDJiLTk5ODgtNzhhYmYxYzhkZmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADWaiOwTo9Wg5MLpEdn5xkBb5JBepkgBXSqYhRi08NkF+xJB+MpKx7QV
N08hDqnUu01kbk7nfPQ56dRRGKJimQZvDn21kaIcYAS8iO0z8A509LfQStM7eTki
5hngA8MxkkQFkyAQ+behF3Pc2votBkDc7zWGiPH65JmEYlLNFwnnPshfvjvFNpUc
YoXr8HTFX4dj4vrcNAufy/F+d5Lof3aaIz/Eho5PkJvzEm16bnmAhxEke1bDB/yI
+P0c7TjQqrpuNHT6a/96t0HHMqVl1QugtTqBBWXP9cTblzwrFtEYJ3wHZng7ITR8
5FHFPbk41AP8+4gqH2/OlDVmKwoC+Y0=
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:52:27 2026 by rpki-client