Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/360f32f1-9993-31ef-9899-048a69b89d7e.roa
File:                     360f32f1-9993-31ef-9899-048a69b89d7e.roa (raw, json)
Hash identifier:          FAxL0tcUfQyS0lzlxpaJZbFT1iQZOH74e/P/L1DIcnc=
Subject key identifier:   5B:A3:7C:85:DD:9D:F8:2F:57:D8:10:D4:61:8B:6F:D2:49:E6:87:08
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D0EA7D100B70803555113B600
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/360f32f1-9993-31ef-9899-048a69b89d7e.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     41264
IP address blocks:        104.132.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:d1:00:b7:08:03:55:51:13:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=d581e9c9-73ea-404a-91b2-77c441e68b75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:17:14:52:92:2b:14:05:12:54:95:7c:d8:69:
                    d9:2f:5a:65:e5:03:5e:ab:1c:36:59:89:b6:36:9c:
                    9f:4d:aa:10:29:b5:14:3c:01:5b:b6:e1:d0:73:d6:
                    96:ae:bc:a0:5d:e0:c8:3d:6f:0c:5c:8e:c9:10:d4:
                    5c:fa:c9:78:89:4c:61:be:36:e3:d6:ea:e5:51:06:
                    22:39:5f:6b:6d:7f:ec:06:0d:11:39:3c:8d:8d:34:
                    84:66:21:a8:12:0b:66:5d:4c:f6:81:db:d2:b6:92:
                    10:d3:5e:f7:c3:8e:26:c0:b1:4c:25:b6:15:bc:80:
                    1a:df:ec:67:92:82:db:8e:a2:e4:1e:42:57:d3:f4:
                    55:f2:ec:c6:54:12:eb:6d:b9:f3:61:7b:dc:cd:b0:
                    ee:34:09:43:e7:64:69:6e:f3:4a:c6:b6:5f:66:97:
                    f9:83:08:e8:60:41:23:cf:e4:d5:a7:fd:cf:b0:35:
                    11:a6:95:06:0b:fd:94:15:4f:d2:d0:9e:35:86:b2:
                    d0:48:37:4e:e0:38:f6:0e:b8:2f:56:62:82:03:0c:
                    c7:d0:f5:a0:d6:f7:48:b7:68:21:bf:a7:bc:0b:fa:
                    49:c6:9d:ba:fe:6c:3e:9a:4b:9d:c2:82:3e:65:3c:
                    88:c8:21:6a:50:4a:72:c9:e0:11:09:09:ae:7e:35:
                    d3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A3:7C:85:DD:9D:F8:2F:57:D8:10:D4:61:8B:6F:D2:49:E6:87:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/360f32f1-9993-31ef-9899-048a69b89d7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:01:6f:95:f0:bf:41:04:d5:2c:8b:27:10:d4:4c:40:57:8c:
         9f:c2:22:76:7d:23:f6:29:05:90:5f:d7:e3:b7:15:10:72:86:
         87:70:10:48:4c:bb:b5:45:2d:6b:d5:8b:b9:a4:85:78:a8:02:
         47:fb:d8:54:23:6d:3d:dc:2d:65:74:cb:a4:4a:38:b0:8e:1f:
         eb:2e:30:f7:4c:6d:cc:71:5d:09:7c:c7:11:82:7b:32:fd:9b:
         f2:8d:f2:37:70:7f:08:65:73:84:05:f6:79:2d:73:3c:ee:05:
         d1:91:7a:d3:e2:99:f5:4a:c3:37:85:d2:a9:bf:52:e6:f3:df:
         57:03:82:b4:3f:53:1b:32:7a:87:b0:8b:a4:a9:ec:c7:77:4e:
         e4:2f:7a:36:70:76:b1:05:be:f7:66:b4:7a:e6:02:86:d9:21:
         8e:cd:29:35:db:43:af:87:01:8a:b0:d5:92:d8:db:22:75:4e:
         79:8b:b4:65:53:41:cf:8d:34:34:14:f7:87:68:b3:4c:1c:42:
         fc:c4:84:c1:a3:95:d6:1d:57:52:d9:f0:7f:d7:b5:ce:47:60:
         57:8b:c5:84:f0:70:79:52:5a:c0:28:7b:8f:98:db:8d:21:61:
         db:ea:d9:2d:20:bd:d3:ca:eb:1f:b4:1e:77:47:bd:60:a8:27:
         23:91:8d:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op9EAtwgDVVETtgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk
ZDU4MWU5YzktNzNlYS00MDRhLTkxYjItNzdjNDQxZTY4Yjc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhcUUpIrFAUSVJV82GnZL1pl5QNeqxw2WYm2
NpyfTaoQKbUUPAFbtuHQc9aWrrygXeDIPW8MXI7JENRc+sl4iUxhvjbj1urlUQYi
OV9rbX/sBg0ROTyNjTSEZiGoEgtmXUz2gdvStpIQ0173w44mwLFMJbYVvIAa3+xn
koLbjqLkHkJX0/RV8uzGVBLrbbnzYXvczbDuNAlD52RpbvNKxrZfZpf5gwjoYEEj
z+TVp/3PsDURppUGC/2UFU/S0J41hrLQSDdO4Dj2DrgvVmKCAwzH0PWg1vdIt2gh
v6e8C/pJxp26/mw+mkudwoI+ZTyIyCFqUEpyyeARCQmufjXTWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFujfIXdnfgvV9gQ1GGLb9JJ5ocIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzYwZjMyZjEtOTk5My0z
MWVmLTk4OTktMDQ4YTY5Yjg5ZDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIRtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADYBb5Xwv0EE1SyLJxDUTEBXjJ/CInZ9I/YpBZBf1+O3FRByhodwEEhM
u7VFLWvVi7mkhXioAkf72FQjbT3cLWV0y6RKOLCOH+suMPdMbcxxXQl8xxGCezL9
m/KN8jdwfwhlc4QF9nktczzuBdGRetPimfVKwzeF0qm/Uubz31cDgrQ/Uxsyeoew
i6Sp7Md3TuQvejZwdrEFvvdmtHrmAobZIY7NKTXbQ6+HAYqw1ZLY2yJ1TnmLtGVT
Qc+NNDQU94dos0wcQvzEhMGjldYdV1LZ8H/Xtc5HYFeLxYTwcHlSWsAoe4+Y240h
Ydvq2S0gvdPK6x+0HndHvWCoJyORjQk=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:40:48 2026 by rpki-client