Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/33d95925-e2e3-3e44-8f74-568a1d15b413.roa
File:                     33d95925-e2e3-3e44-8f74-568a1d15b413.roa (raw, json)
Hash identifier:          qBA72fwxVV3QiRAOcj4oSZYaPhNythv6nuDMbQNlbso=
Subject key identifier:   22:97:8F:90:42:A6:0A:A8:5E:20:82:D7:03:6A:75:3E:06:C3:74:2A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D0EA7E986360620306A8010C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/33d95925-e2e3-3e44-8f74-568a1d15b413.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     41264
IP address blocks:        104.132.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:e9:86:36:06:20:30:6a:80:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=10c720a0-b06b-468d-ada2-8b604f34376f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e3:76:cd:c8:d6:d8:93:c8:70:7f:8e:6a:e8:
                    9d:ea:d5:c1:96:85:19:c8:d4:60:e8:e0:45:88:77:
                    fc:19:2b:c9:c2:8a:97:66:62:da:6e:4f:70:38:0b:
                    9c:7b:7e:8e:e1:61:65:58:cc:71:97:df:a7:e7:72:
                    c8:0f:f6:75:d3:40:43:95:26:82:a0:14:07:7a:ff:
                    7c:91:73:28:31:03:b1:ed:1d:13:3d:6e:a2:07:60:
                    0a:45:b0:4c:5b:e2:99:ed:3a:20:01:d0:10:af:30:
                    3c:69:18:47:b2:62:dc:2a:75:2f:6d:51:31:29:f6:
                    8b:0e:28:b9:78:58:c4:97:6a:3b:be:cf:10:98:3a:
                    ce:cc:8b:1c:c9:5c:ff:3c:dc:65:73:c9:76:76:c1:
                    49:8b:3d:e8:83:52:6c:c1:36:b9:53:37:79:6f:f7:
                    8e:81:8b:51:ae:5e:81:ff:1c:48:fe:1a:b2:c3:0b:
                    e0:68:91:de:5b:b3:13:ef:ae:bb:db:ec:bb:6d:84:
                    7e:1f:e7:2f:2f:d4:b3:46:18:51:15:1b:33:b8:d9:
                    f5:28:72:7a:e8:5f:b4:5d:e6:6d:fd:26:20:64:f6:
                    2b:ce:2c:06:38:76:76:75:54:f3:44:9f:2d:97:20:
                    45:a7:51:58:de:5c:fa:ba:71:fb:d6:a6:88:16:59:
                    c6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:97:8F:90:42:A6:0A:A8:5E:20:82:D7:03:6A:75:3E:06:C3:74:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/33d95925-e2e3-3e44-8f74-568a1d15b413.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:28:22:12:1a:22:74:39:70:2f:64:2a:03:b9:7b:e0:10:e1:
         57:5a:29:37:d7:ef:bf:37:fc:38:b8:0b:72:66:ca:a6:1e:77:
         0c:81:ed:6f:06:5c:d3:b1:b3:84:d6:6b:70:d6:3a:d8:d4:6e:
         c1:ce:e5:81:c0:ed:50:24:9b:d4:05:19:8f:10:d3:f8:bb:ee:
         4b:3d:ed:5c:6b:ff:ac:7f:39:ab:63:2f:ae:b7:f0:01:80:e2:
         e9:08:26:38:ac:79:5e:6c:ac:f4:4a:1f:ae:98:79:6a:7b:78:
         4c:29:1c:af:a6:f5:4d:d4:5d:fa:65:f1:c3:b3:28:78:48:46:
         a3:06:16:e9:36:ba:4e:d1:ee:a1:0c:4d:25:f9:0f:2f:e9:11:
         ad:a4:9e:dc:5d:cc:ae:45:6c:6a:24:fa:f3:11:e9:3f:ed:af:
         9e:ec:47:08:9b:a9:27:76:82:84:8d:62:81:cb:5b:5a:d3:41:
         e9:9f:db:e5:6d:34:3b:13:a6:1b:76:3b:06:c6:43:8e:68:c1:
         11:ea:f0:b9:03:26:73:03:b9:1f:6f:18:4b:79:93:ac:26:64:
         ca:ab:c2:00:00:bd:2c:be:3a:04:ba:f2:1a:34:4b:6c:3f:59:
         f3:63:02:45:9d:d3:ee:d7:ad:63:1a:76:cf:ad:91:46:46:fb:
         8a:1c:a7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:54:58 2026 by rpki-client