Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c4067027-0538-3b1d-a3fe-7e1bc2af1dc8.roa
File:                     c4067027-0538-3b1d-a3fe-7e1bc2af1dc8.roa (raw, json)
Hash identifier:          4Qn3ftnOrQcdYxSw9bxg5ifPkqoniXwsLExBy9rKL+I=
Subject key identifier:   8E:85:94:60:E8:EB:92:68:D2:6D:A2:A0:04:41:49:B0:5A:36:E7:5E
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584F3CE2A7089415C7F96BB4D260
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c4067027-0538-3b1d-a3fe-7e1bc2af1dc8.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     395973
IP address blocks:        104.134.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:a7:08:94:15:c7:f9:6b:b4:d2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=212fdf74-c7f1-4194-a740-ff8d4f82bd59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2d:51:4b:75:68:32:f7:fd:80:e8:84:23:34:
                    9d:f3:d6:ab:7a:d4:62:e0:b9:e1:94:85:e4:b8:7b:
                    8f:85:67:0f:67:9d:d0:a2:9c:f3:29:b7:46:f7:5c:
                    f8:e2:04:50:1e:dc:2d:5c:2e:39:02:5b:8e:26:79:
                    2f:95:d9:77:6a:0f:e3:e7:17:6b:37:4f:a7:92:ee:
                    83:0c:3b:11:d7:79:16:61:52:90:95:d8:72:b8:df:
                    3c:78:ca:a5:18:c5:45:b8:bb:46:dd:6a:42:44:98:
                    49:df:32:cc:d1:e4:ff:01:97:cd:fd:ad:c2:84:a3:
                    18:16:b1:88:c1:27:da:56:a8:41:de:92:23:b2:8f:
                    d9:2a:64:d5:63:d7:e9:9e:44:22:df:c6:7b:41:1e:
                    c0:08:a9:95:b6:99:e5:5c:aa:e3:c5:1f:41:a0:0e:
                    d8:b4:92:96:d0:02:b5:87:05:52:c9:6f:1f:47:65:
                    01:a8:a4:c6:f4:c7:31:65:92:ab:cc:88:fd:4f:5c:
                    0f:8d:35:65:f5:64:cb:ea:12:c8:44:84:7b:68:20:
                    77:33:ce:19:d4:cb:c7:86:93:f5:e0:3c:a6:01:6e:
                    17:99:1a:66:f5:84:33:12:18:7b:2d:88:56:23:6a:
                    5f:90:9f:ee:0c:98:9c:db:b0:15:c4:34:69:34:70:
                    3c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:85:94:60:E8:EB:92:68:D2:6D:A2:A0:04:41:49:B0:5A:36:E7:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c4067027-0538-3b1d-a3fe-7e1bc2af1dc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:e9:fc:6b:b1:52:db:66:eb:d0:ac:0b:6d:6b:1c:3f:4e:fa:
         a6:ff:fc:5c:a2:97:85:70:fe:af:d1:63:c0:2d:9e:96:13:c8:
         26:fd:b8:f6:d0:11:68:77:3a:dd:94:4c:00:50:16:8f:cd:05:
         d7:86:e1:80:04:ae:79:e0:bf:dc:07:4f:6d:95:88:c3:95:8c:
         bd:c0:b1:69:b3:4a:92:cc:25:4f:06:5d:77:3d:ee:ec:01:29:
         47:cc:c2:4e:84:b2:0a:4d:f6:50:ef:23:73:c3:65:b5:16:44:
         fa:fc:4a:70:bd:bd:bc:b6:4b:0c:2f:1f:6f:39:3f:09:46:2b:
         9e:86:38:63:97:b4:20:c2:3c:f8:73:cd:bb:f8:ba:d8:54:aa:
         d6:23:6e:5b:07:54:09:ad:23:28:48:38:8f:0f:25:d9:42:d1:
         67:aa:6f:a3:ba:12:5b:e2:72:df:b9:30:bf:76:10:5d:78:66:
         0f:ed:69:27:8e:e9:e6:e4:87:49:b5:52:ca:61:93:bb:b8:78:
         59:39:9c:a6:4d:a5:b1:8b:05:36:39:f6:ff:c2:b3:f5:4b:e4:
         61:79:a0:35:01:fe:d7:aa:c7:36:5a:44:b1:e4:c6:89:81:4f:
         74:a7:a2:17:ab:30:71:1b:dc:b3:13:e1:4b:28:5b:74:91:87:
         a8:98:cd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:11:04 2026 by rpki-client