Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/481fe3c7-1b4f-3a61-aa90-b3327fb8ef6a.roa
File:                     481fe3c7-1b4f-3a61-aa90-b3327fb8ef6a.roa (raw, json)
Hash identifier:          nRFAaq4oW9f1jeaLAxhlhLubyYybHFNdR8ZJljkHGso=
Subject key identifier:   60:F8:42:D3:D6:BB:8A:61:2F:01:E6:98:73:51:9D:12:B1:6E:99:6A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584EA796AC54B320FB892DC75A00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/481fe3c7-1b4f-3a61-aa90-b3327fb8ef6a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     395973
IP address blocks:        104.134.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:ac:54:b3:20:fb:89:2d:c7:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c77b76f5-0b53-4348-ae71-95dec20fb3fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:73:c6:8d:70:e1:63:2e:b0:9b:ca:8b:2b:d0:
                    fc:3f:98:5b:75:e7:bf:78:fc:ca:c7:78:a1:fd:4e:
                    d5:63:6c:e9:22:f6:2e:f6:6a:3c:80:ed:02:35:c9:
                    0b:b6:af:a3:5d:89:56:95:0e:9a:33:41:7a:67:a5:
                    39:29:82:e4:d2:46:5b:96:1d:cc:ba:4f:44:93:da:
                    85:8e:57:26:3a:79:74:dd:88:a2:ff:63:81:d6:40:
                    bc:01:a4:29:76:39:18:a1:4b:cb:87:5b:23:53:fe:
                    93:03:11:bd:63:e8:77:b0:51:13:af:bf:b4:b0:ae:
                    0a:4e:c9:71:b4:70:63:d1:72:f7:a5:b9:01:34:ae:
                    bf:cb:78:be:e6:3e:ce:22:a9:6f:ba:0c:3a:1b:bf:
                    e3:91:7a:ce:f5:22:c6:41:cb:47:eb:ea:d1:24:f3:
                    44:f8:6a:4f:c4:cd:83:2c:14:a6:ed:30:c4:0c:f0:
                    43:a4:0a:6a:8b:72:ed:2b:dc:4a:36:be:90:3b:1d:
                    c9:46:5b:7c:dc:5b:dc:b6:b9:a9:f7:27:ba:2c:7e:
                    68:34:fb:0e:03:82:86:ee:f2:6c:ec:ee:74:85:b1:
                    1e:13:1f:51:2b:f7:94:39:6b:ac:17:1c:ba:c5:e5:
                    08:61:4b:ef:da:ed:af:f3:d0:a5:2f:f4:41:98:66:
                    8b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F8:42:D3:D6:BB:8A:61:2F:01:E6:98:73:51:9D:12:B1:6E:99:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/481fe3c7-1b4f-3a61-aa90-b3327fb8ef6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:cf:64:bd:63:57:80:80:ad:4b:ed:0a:59:04:a8:3c:bb:bf:
         a7:23:54:7e:25:04:90:25:ad:9d:99:05:f3:31:a9:3b:09:44:
         72:ca:85:cb:e2:eb:fb:49:95:14:10:b5:c4:4f:2e:29:86:2f:
         5a:42:e4:f3:61:bb:3b:bd:a7:16:cd:4a:f9:8e:e0:97:f9:98:
         28:90:42:e2:2d:f9:be:ad:31:7c:d0:22:e6:e4:9d:e6:7c:5d:
         ac:5d:71:7c:b2:c2:5c:32:59:1f:c7:3d:22:9c:05:59:2b:f4:
         7b:b1:6c:dc:21:1e:7d:1a:1c:6b:3e:bd:bb:ae:ae:b8:c0:81:
         2c:0f:db:15:3e:46:b7:4b:81:c6:9e:92:fd:d8:7f:80:58:d8:
         6d:8b:4b:4f:b2:a3:6d:84:15:ac:8e:6a:e5:2e:4b:b7:96:d1:
         4d:44:2c:37:6c:a9:26:c5:dd:27:0d:77:2a:a7:b9:7a:20:01:
         26:a8:1d:5b:88:06:f7:91:13:4a:53:63:95:26:97:d2:b6:3a:
         2b:bd:b2:1f:d1:7a:c8:bf:4e:02:8a:e5:64:b5:ba:77:34:9a:
         37:cc:af:f3:28:13:84:2f:df:34:47:00:87:c8:1f:5d:4e:f3:
         02:e6:71:5c:7f:62:27:36:8f:0a:1a:84:37:8e:21:46:3a:d1:
         5b:37:8a:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlqxUsyD7iS3HWgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
Yzc3Yjc2ZjUtMGI1My00MzQ4LWFlNzEtOTVkZWMyMGZiM2ZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXPGjXDhYy6wm8qLK9D8P5hbdee/ePzKx3ih
/U7VY2zpIvYu9mo8gO0CNckLtq+jXYlWlQ6aM0F6Z6U5KYLk0kZblh3Muk9Ek9qF
jlcmOnl03Yii/2OB1kC8AaQpdjkYoUvLh1sjU/6TAxG9Y+h3sFETr7+0sK4KTslx
tHBj0XL3pbkBNK6/y3i+5j7OIqlvugw6G7/jkXrO9SLGQctH6+rRJPNE+GpPxM2D
LBSm7TDEDPBDpApqi3LtK9xKNr6QOx3JRlt83Fvctrmp9ye6LH5oNPsOA4KG7vJs
7O50hbEeEx9RK/eUOWusFxy6xeUIYUvv2u2v89ClL/RBmGaL+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGD4QtPWu4phLwHmmHNRnRKxbplqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDgxZmUzYzctMWI0Zi0z
YTYxLWFhOTAtYjMzMjdmYjhlZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIakMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEHPZL1jV4CArUvtClkEqDy7v6cjVH4lBJAlrZ2ZBfMxqTsJRHLKhcvi
6/tJlRQQtcRPLimGL1pC5PNhuzu9pxbNSvmO4Jf5mCiQQuIt+b6tMXzQIubkneZ8
XaxdcXyywlwyWR/HPSKcBVkr9HuxbNwhHn0aHGs+vbuurrjAgSwP2xU+RrdLgcae
kv3Yf4BY2G2LS0+yo22EFayOauUuS7eW0U1ELDdsqSbF3ScNdyqnuXogASaoHVuI
BveRE0pTY5Uml9K2Oiu9sh/Resi/TgKK5WS1unc0mjfMr/MoE4Qv3zRHAIfIH11O
8wLmcVx/Yic2jwoahDeOIUY60Vs3iq0=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:44:40 2026 by rpki-client