Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/40385064-d713-3c6c-b460-5575e111dfd1.roa
File:                     40385064-d713-3c6c-b460-5575e111dfd1.roa (raw, json)
Hash identifier:          3Q2dJoap2LYq/4MzH7vb7SUIRPZ3A47FNvhLrKCyIuM=
Subject key identifier:   A9:9D:D7:B8:37:C2:A9:72:B7:C6:2E:CD:77:23:AC:01:13:8E:45:8A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584F49849C14D4E8F3FB0FEC7C00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/40385064-d713-3c6c-b460-5575e111dfd1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        104.134.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:9c:14:d4:e8:f3:fb:0f:ec:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8aaa6778-5b21-4a31-88a1-99e9df56483f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2f:39:46:a1:17:07:69:5b:a0:9a:42:68:9d:
                    c4:b1:fe:bf:0c:c3:18:27:1a:94:ac:da:d5:73:9c:
                    0b:f5:ff:e6:ae:2b:48:6f:61:3d:99:24:39:0d:9a:
                    d7:a2:d1:cc:11:94:ef:df:30:80:5d:1d:e6:26:e1:
                    6c:ef:d5:db:58:11:df:a2:bf:63:e1:c8:35:13:b8:
                    b1:89:8f:d0:68:f0:cc:96:6e:cc:bd:ae:75:a0:be:
                    0d:ff:cb:73:53:aa:58:6d:df:ed:e8:c1:b2:0d:86:
                    f4:81:9b:42:6c:a5:c1:e3:38:65:3f:27:bd:b6:b9:
                    cd:89:e5:90:42:6d:a5:a1:08:54:02:56:9a:17:6c:
                    06:dc:52:20:54:20:4a:76:53:b4:a1:9a:10:06:2e:
                    35:e2:c2:cf:64:91:30:3c:22:44:70:30:08:81:55:
                    f8:73:a0:a9:74:92:e8:03:15:02:70:5e:7d:2c:5b:
                    7b:b2:24:70:04:88:50:32:9c:0a:c6:9a:93:01:61:
                    a1:1c:f4:ed:16:00:66:78:65:39:ee:e7:2c:1e:94:
                    60:ab:f2:2a:5c:e7:24:f3:11:25:6b:1a:53:f1:68:
                    b6:67:67:26:a7:1c:4f:0b:82:86:a4:b0:f1:f2:86:
                    6c:e8:17:fa:69:33:bd:22:91:94:c5:74:f5:93:29:
                    6c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:9D:D7:B8:37:C2:A9:72:B7:C6:2E:CD:77:23:AC:01:13:8E:45:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/40385064-d713-3c6c-b460-5575e111dfd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:dc:ff:ae:a9:e5:a3:b9:6d:57:0c:9c:2d:fe:97:a5:08:df:
         3c:b1:c0:4e:1c:c0:10:a3:ea:91:59:62:f8:ba:03:a3:3d:0e:
         c0:29:b0:63:56:94:fd:b1:7c:69:98:ed:74:08:bb:12:76:64:
         d0:bb:bf:18:7e:ca:d2:d8:79:b5:34:b8:4f:89:4f:a4:54:60:
         d4:4c:89:78:60:1c:32:7c:b3:d6:aa:99:39:b2:99:72:4a:d9:
         5c:b0:fe:20:3d:4a:cb:09:09:59:11:fb:1b:27:a6:3d:a3:2a:
         61:af:23:7f:b4:46:a1:27:72:06:bf:e7:cc:df:dd:6b:16:1e:
         b1:e0:6c:5f:5e:e3:b5:a8:8c:2b:1d:1a:84:bf:8a:5e:2f:b7:
         47:26:40:b4:eb:6b:e2:6a:0e:b7:6a:d9:97:af:d9:56:94:63:
         8f:14:da:a5:ba:ba:3a:96:b0:17:6e:02:35:89:87:9c:d1:d5:
         3c:42:2b:52:b7:11:f0:4b:ed:6c:26:bd:34:5c:ab:d7:4d:cf:
         4c:58:2e:a4:7d:9b:47:2e:4c:48:cb:98:b4:03:51:0f:6c:86:
         3a:e9:46:ed:dd:0a:35:59:23:0b:da:fd:fe:99:b0:1a:1c:8a:
         87:f5:15:34:18:8d:67:d7:69:36:6f:17:1c:8c:be:a8:11:62:
         5a:6f:41:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:49:10 2026 by rpki-client