Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9092878e-27a1-38f4-a6b2-4ce6310de812.roa
File:                     9092878e-27a1-38f4-a6b2-4ce6310de812.roa (raw, json)
Hash identifier:          SdWnLs25zTwSPAakXMhVVpQ8GWRr0pEnlEM9Mrx2a/A=
Subject key identifier:   E3:CE:37:9F:A0:CC:4F:D0:E8:1E:45:2D:2D:98:6D:5F:C9:C0:CF:F4
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584F49848ECC3A4182AAE689ED80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9092878e-27a1-38f4-a6b2-4ce6310de812.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     41264
IP address blocks:        104.132.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:8e:cc:3a:41:82:aa:e6:89:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a1f13b4d-e474-41c9-ac72-e77497fdeab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b5:7e:4d:0b:ad:15:bb:1b:48:c0:a3:5a:28:
                    20:6d:ad:a3:bc:d0:07:c6:a9:95:9d:e1:de:9b:fa:
                    f6:dc:13:a3:77:73:46:52:20:37:9a:ce:f3:ed:19:
                    c9:be:b8:28:d2:96:28:73:ee:1b:33:45:ef:67:9f:
                    01:90:53:32:5f:60:43:fa:c0:43:d1:61:94:c6:12:
                    84:57:8e:0c:2a:49:97:0f:74:6a:e4:e8:87:6e:c9:
                    b6:8e:a4:41:e3:76:c2:06:d1:ae:82:73:5e:70:16:
                    88:5d:19:ef:28:fc:fc:24:5f:84:59:ff:cb:2f:cb:
                    84:e2:db:19:58:25:8c:cc:74:16:ff:ed:d1:06:2a:
                    97:0f:9e:5c:09:6f:ab:c7:37:39:4f:18:d4:d2:ef:
                    fe:ee:f2:b2:5d:be:7f:3e:86:80:3e:cb:e4:ba:07:
                    5a:c0:41:ae:28:2a:39:a9:e4:0b:6a:4a:f3:aa:80:
                    ca:c8:26:7f:1f:53:ba:28:0e:ea:b7:7c:34:d4:c1:
                    3e:79:ac:71:c1:5f:b5:45:8f:93:89:1c:db:89:99:
                    1a:45:52:99:79:9c:9f:6e:44:24:48:6a:4e:14:af:
                    fa:ad:c8:a8:9b:52:20:20:5b:97:90:98:af:fe:43:
                    88:6b:6f:09:4d:96:87:04:e2:33:3c:87:db:96:8b:
                    4f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CE:37:9F:A0:CC:4F:D0:E8:1E:45:2D:2D:98:6D:5F:C9:C0:CF:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9092878e-27a1-38f4-a6b2-4ce6310de812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:ef:eb:78:32:62:55:31:f1:45:64:7c:86:20:31:ae:c6:e9:
         20:d3:58:31:c4:1e:92:4f:a2:db:2c:0c:e2:1e:8e:c9:86:ba:
         f2:11:db:de:e5:f6:55:cf:6b:98:6f:9c:2a:1c:91:9f:90:28:
         bd:52:23:25:30:05:6e:9a:d2:85:89:71:23:bf:7a:bc:04:75:
         ac:61:4e:dc:07:c2:8e:f6:db:3f:9f:cc:6b:f9:ec:12:80:0a:
         53:f0:97:0d:a8:38:d0:05:e3:48:49:ef:a5:71:cf:eb:7e:1a:
         e8:f8:bd:2f:be:f3:56:4f:59:31:0a:03:b2:57:ac:56:cc:eb:
         cc:83:db:cd:b6:fa:d8:0b:db:9b:d4:5b:e1:78:1a:8d:ce:12:
         70:eb:c9:b5:19:8e:6e:33:f2:51:07:24:94:ed:95:ea:06:2e:
         47:51:68:57:77:90:26:64:26:a9:11:cb:a6:97:5f:e7:4b:58:
         83:8e:dd:41:a2:0f:2f:d4:d7:72:44:5e:23:a2:98:26:dd:d0:
         bf:38:63:4b:9b:a8:59:36:30:44:68:92:64:c3:95:46:5f:1c:
         d9:99:d5:34:4a:18:9b:4a:8e:62:96:ce:00:5d:10:92:6e:fc:
         5b:cc:3a:7a:26:bd:5d:42:c9:f4:55:b7:0d:e0:ba:5b:17:bd:
         47:89:b5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:10:34 2026 by rpki-client