Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9abd777b-b7c6-31d6-817b-07051e337f5a.roa
File:                     9abd777b-b7c6-31d6-817b-07051e337f5a.roa (raw, json)
Hash identifier:          xFuEx4FN2TAfUOKh0uIhbnHK+IJaIdbUKBgf3rg+QmI=
Subject key identifier:   06:9F:2D:AA:45:0F:63:F0:EC:F1:6C:84:D5:AD:E1:80:F4:4D:B4:46
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584F497CC124FF1F1BA70354A4C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9abd777b-b7c6-31d6-817b-07051e337f5a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        104.134.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:c1:24:ff:1f:1b:a7:03:54:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=98c7d0ca-fdf4-4b96-b3ce-2692f916a26b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:75:fb:97:1e:6d:a0:7d:68:bb:eb:40:d6:80:
                    62:6d:12:80:20:d2:25:aa:8b:2c:8a:19:5a:32:ab:
                    7a:cf:40:e5:47:c0:4b:5f:af:b9:6d:14:84:64:f8:
                    ee:fa:91:6d:69:20:81:c0:83:13:43:d3:e9:c1:dd:
                    68:5e:41:3e:13:00:ca:67:41:97:4e:9c:70:42:97:
                    b7:3e:8a:4c:03:ef:ab:00:71:77:72:25:6d:68:9e:
                    e3:7e:a3:7c:da:eb:1a:76:25:9e:e6:23:7c:36:bb:
                    1a:a3:d4:46:94:60:8f:40:ed:13:1a:8f:7d:22:55:
                    50:28:e0:46:28:a9:f3:b2:2b:97:9d:3d:06:10:72:
                    09:5e:e9:2a:47:e0:77:10:ea:f1:e2:88:f8:ac:04:
                    c7:07:d0:24:af:b9:86:1d:41:5c:3c:07:45:8a:ab:
                    e7:b7:6c:fa:0a:c1:67:5c:c6:ed:9d:d4:f0:ab:15:
                    53:ce:67:20:4f:0f:b0:9b:54:23:cc:9d:a1:96:2a:
                    7b:3e:ad:73:c6:53:cf:56:a7:9c:43:58:64:a0:63:
                    5e:01:df:0b:52:88:d1:76:9e:3a:c5:fa:eb:d6:08:
                    c7:53:8b:e9:00:0a:b3:6e:12:59:b2:27:ea:86:c5:
                    f3:bf:01:78:6d:af:29:55:39:f9:a6:e1:a7:dc:ed:
                    ba:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:9F:2D:AA:45:0F:63:F0:EC:F1:6C:84:D5:AD:E1:80:F4:4D:B4:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9abd777b-b7c6-31d6-817b-07051e337f5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:60:21:7f:c5:83:39:09:fc:a0:ab:00:30:21:5a:a5:99:69:
         8b:65:e4:db:b3:9e:4c:8f:65:5b:15:0f:16:01:cc:fa:41:aa:
         98:4a:7b:d7:20:7a:95:03:73:7c:f5:85:40:00:02:5c:80:08:
         20:0b:41:da:92:a6:19:04:b7:fe:9a:e2:eb:b4:62:48:2c:eb:
         96:25:a5:1a:32:b8:ae:f6:7b:c7:21:21:54:7c:a0:f1:b3:71:
         28:28:e6:e7:eb:06:c9:6d:0e:ce:df:13:12:72:1a:e6:66:3e:
         89:5f:d4:74:ad:6d:23:18:64:f9:f0:83:00:1f:0c:8b:9a:f3:
         bc:03:cd:a3:28:e5:51:65:ea:1d:f5:79:e0:d3:8b:59:30:14:
         a8:04:db:e6:9d:00:2e:bd:e1:27:5e:a4:8a:44:57:b3:41:e2:
         cb:2b:a1:5d:59:7a:d1:9b:01:e2:d7:51:92:be:46:d5:d0:f2:
         ad:5a:6f:c9:ea:e9:53:1d:87:b1:00:0a:64:6a:b1:6e:9e:49:
         1f:ba:02:5b:83:bc:29:fc:c6:62:40:3f:77:ad:ec:60:c9:67:
         d0:df:e6:b5:3b:0a:b8:36:36:49:8a:13:ba:97:a6:5e:88:81:
         fd:79:74:84:3b:66:31:62:c3:a3:ca:2b:b3:dc:76:b4:c4:91:
         2c:7e:34:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:33:44 2026 by rpki-client