Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41b1a80e-73c2-3f25-9649-6fb5ee622d55.roa
File:                     41b1a80e-73c2-3f25-9649-6fb5ee622d55.roa (raw, json)
Hash identifier:          Hv8ZpmsA5z7AQbpqi/Vdc014jm8B3eOLU5yR2tljB3s=
Subject key identifier:   35:8F:0A:63:44:10:FE:BA:C3:B9:FE:D8:7A:AC:8A:EE:A3:25:C8:91
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D117280436AE76F5A6EC7F300
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41b1a80e-73c2-3f25-9649-6fb5ee622d55.roa
Signing time:             Thu 05 Mar 2026 14:00:40 +0000
ROA not before:           Thu 05 Mar 2026 14:00:40 +0000
ROA not after:            Wed 03 Jun 2026 13:00:40 +0000
asID:                     41264
IP address blocks:        104.132.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:72:80:43:6a:e7:6f:5a:6e:c7:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  5 14:00:40 2026 GMT
            Not After : Jun  3 13:00:40 2026 GMT
        Subject: CN=451d0a6d-5314-47eb-a7bb-d18ec4275134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2c:44:82:e1:ac:89:23:25:86:b0:bd:b9:30:
                    e3:9b:4b:4c:67:2d:90:4e:e3:58:26:e8:06:d7:33:
                    2a:fe:b3:86:94:38:d1:11:5d:17:dd:50:ff:34:bb:
                    38:df:15:20:95:ee:cd:5d:f5:f7:33:3f:31:fb:1e:
                    38:ae:1d:3d:cb:56:00:0b:6f:5f:fd:55:78:92:52:
                    84:1b:8b:a9:0f:b8:ca:62:70:76:7b:61:38:6b:62:
                    d4:36:32:98:69:1a:f6:00:51:c6:d5:d2:dc:6c:8f:
                    93:c6:f4:f0:ee:0f:22:60:3c:bc:a0:e5:c7:eb:e0:
                    71:09:ef:ea:0b:a9:8b:a2:4c:1f:e0:66:6f:a8:38:
                    b1:00:02:20:8f:bc:bc:8e:fe:cd:8d:a2:0d:2d:01:
                    43:bb:bd:6e:ef:d5:63:c4:68:48:eb:de:28:61:3d:
                    03:7f:e0:09:67:fa:2a:7d:6d:5c:4c:dc:eb:6e:0d:
                    7f:61:58:44:8c:4e:b7:ce:4b:e7:d8:a7:de:86:bd:
                    29:04:5e:1f:aa:da:07:94:8d:f7:3d:ba:8b:42:fe:
                    7a:18:93:9c:31:83:32:71:d0:01:38:9b:39:64:f5:
                    40:ce:08:f8:d1:6d:84:3a:1a:d4:ef:a7:d9:9b:3a:
                    ce:38:6b:9e:82:3e:3b:a0:ad:47:fe:b8:5a:b9:7c:
                    35:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8F:0A:63:44:10:FE:BA:C3:B9:FE:D8:7A:AC:8A:EE:A3:25:C8:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41b1a80e-73c2-3f25-9649-6fb5ee622d55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:48:97:b0:97:a3:23:4a:1b:ef:05:c6:33:94:ef:91:c3:4f:
         79:93:9b:bd:b5:d6:d3:77:80:ba:44:49:79:ee:27:76:ba:e5:
         fa:23:7d:7c:66:30:01:55:42:4f:fb:f4:ee:e2:0d:7e:bb:80:
         ac:47:d4:0d:82:57:c4:33:42:c8:3d:06:63:ae:4c:aa:78:64:
         e1:56:df:2c:59:6e:9e:d2:df:00:d7:99:2c:26:92:bf:e1:74:
         0c:1b:13:59:a3:1c:54:0a:39:45:52:92:15:d0:59:b8:5f:77:
         92:83:3b:a3:73:16:5e:c9:04:4b:26:6c:75:10:10:7e:ee:50:
         40:bd:8f:29:5a:38:15:31:1a:c3:c7:db:b3:ea:25:0b:1e:ba:
         3e:29:8c:97:d7:71:87:04:2c:48:9a:91:33:d3:51:fc:e9:78:
         dd:4f:d3:4b:f0:44:01:8a:3f:c6:ab:23:cd:e1:60:2d:38:c0:
         0c:21:eb:f0:03:ac:85:46:f0:4e:b7:ca:ba:98:c1:8c:c6:df:
         bb:4d:17:b0:3e:3c:3b:f5:fc:a1:9e:a3:a0:93:61:25:10:dd:
         4f:2c:8a:a4:cf:0d:78:73:50:6c:80:33:20:54:0e:97:ff:a7:
         28:7b:a2:0c:9b:34:52:c2:40:c8:5b:1c:fa:7a:2f:04:6f:85:
         d8:09:97:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcoBDaudvWm7H8wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk
NDUxZDBhNmQtNTMxNC00N2ViLWE3YmItZDE4ZWM0Mjc1MTM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSxEguGsiSMlhrC9uTDjm0tMZy2QTuNYJugG
1zMq/rOGlDjREV0X3VD/NLs43xUgle7NXfX3Mz8x+x44rh09y1YAC29f/VV4klKE
G4upD7jKYnB2e2E4a2LUNjKYaRr2AFHG1dLcbI+TxvTw7g8iYDy8oOXH6+BxCe/q
C6mLokwf4GZvqDixAAIgj7y8jv7NjaINLQFDu71u79VjxGhI694oYT0Df+AJZ/oq
fW1cTNzrbg1/YVhEjE63zkvn2Kfehr0pBF4fqtoHlI33PbqLQv56GJOcMYMycdAB
OJs5ZPVAzgj40W2EOhrU76fZmzrOOGuegj47oK1H/rhauXw1BQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDWPCmNEEP66w7n+2Hqsiu6jJciRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDFiMWE4MGUtNzNjMi0z
ZjI1LTk2NDktNmZiNWVlNjIyZDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH5Il7CXoyNKG+8FxjOU75HDT3mTm7211tN3gLpESXnuJ3a65fojfXxm
MAFVQk/79O7iDX67gKxH1A2CV8QzQsg9BmOuTKp4ZOFW3yxZbp7S3wDXmSwmkr/h
dAwbE1mjHFQKOUVSkhXQWbhfd5KDO6NzFl7JBEsmbHUQEH7uUEC9jylaOBUxGsPH
27PqJQseuj4pjJfXcYcELEiakTPTUfzpeN1P00vwRAGKP8arI83hYC04wAwh6/AD
rIVG8E63yrqYwYzG37tNF7A+PDv1/KGeo6CTYSUQ3U8siqTPDXhzUGyAMyBUDpf/
pyh7ogybNFLCQMhbHPp6LwRvhdgJl8k=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:38:46 2026 by rpki-client