Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4642f7a4-313d-388a-a150-9b8b4a0751f5.roa
File:                     4642f7a4-313d-388a-a150-9b8b4a0751f5.roa (raw, json)
Hash identifier:          yue+ooKjEaazkJKSusmR25+MhDpVehiZ4PE0BTUU5WE=
Subject key identifier:   BD:B0:83:EB:15:D5:63:89:4C:1E:37:CE:07:C1:46:1F:67:18:73:FC
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D143D9DE46882265169BA5FC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4642f7a4-313d-388a-a150-9b8b4a0751f5.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     41264
IP address blocks:        104.133.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:9d:e4:68:82:26:51:69:ba:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=4fec4a37-9640-468b-9d6b-3241ee19e806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:70:cd:d3:49:96:57:24:cd:c0:94:57:aa:ae:
                    5b:d2:f8:b5:6d:2b:a7:ea:e9:f3:ee:65:97:53:c1:
                    6e:45:49:78:e3:fa:f6:d8:33:bd:f7:8b:0c:56:09:
                    9b:c6:ea:67:42:14:49:59:f8:e8:6e:3d:75:cb:93:
                    8e:23:2a:66:8a:c3:bc:43:c3:a6:39:04:d4:d9:db:
                    c2:a5:9a:9f:1d:cc:40:04:8f:ee:07:82:af:4a:55:
                    ff:56:c0:3f:ee:69:c8:16:97:d6:a2:0d:b0:4c:f5:
                    04:dd:4c:62:b7:e6:21:f4:3c:7e:4f:74:2d:58:0b:
                    45:06:11:e8:b9:c6:13:a8:7f:98:a1:6b:09:19:76:
                    ea:89:77:ea:e7:ea:fc:74:9a:0c:a6:00:60:7a:2f:
                    da:79:03:52:16:51:ac:89:c0:20:75:16:a0:03:e7:
                    ed:40:ea:83:79:3e:ed:4d:8c:81:20:30:10:b1:45:
                    d8:84:4d:39:ac:48:59:0e:f0:bf:b8:46:ee:ff:fd:
                    3f:c2:0f:87:cc:76:54:cf:98:9d:e8:ef:50:bb:d3:
                    c1:17:49:a3:5e:1a:c1:b1:32:f0:27:0c:b3:6f:e7:
                    5d:13:93:d9:16:49:19:17:91:50:5e:c0:db:aa:03:
                    be:0c:56:25:64:8d:c7:70:30:e9:8e:f3:c1:d1:dc:
                    e5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B0:83:EB:15:D5:63:89:4C:1E:37:CE:07:C1:46:1F:67:18:73:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4642f7a4-313d-388a-a150-9b8b4a0751f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:1d:3e:65:88:ed:0f:7f:40:a8:99:98:c4:79:f0:d9:18:21:
         14:fe:a6:c1:c0:23:2d:0c:48:5a:e2:30:6e:c1:44:8e:6a:6e:
         d0:ed:a7:18:3c:9c:c5:f3:f1:95:c3:9d:5e:6b:e4:0b:8a:09:
         0e:79:b9:8c:7f:ce:a7:f7:a9:3a:7a:e4:8f:37:d1:5b:4d:23:
         da:b4:d6:8f:1a:e6:3d:33:9f:02:0b:1e:56:f3:aa:d3:80:38:
         e4:83:23:33:a3:01:b5:f9:05:3b:7e:0b:89:f6:c4:db:27:a8:
         4c:b0:01:6e:70:a0:f3:15:4f:4b:df:df:74:da:53:f2:aa:cf:
         0a:6a:b1:11:33:9d:19:e4:e0:26:3b:d6:2f:1e:44:13:b6:32:
         78:3f:dd:c9:01:fb:06:ee:9e:32:ef:2b:0a:76:f1:a6:ec:cc:
         59:f6:e1:c2:a1:15:2d:62:62:d7:26:68:e7:4e:c5:1c:cc:7e:
         9e:d9:48:cb:b7:26:35:2b:ba:09:ca:a2:4c:55:c5:8b:a4:0d:
         f1:73:11:81:b4:b4:f3:57:6e:f5:3e:3c:38:4b:73:d6:26:30:
         ec:da:7d:83:3e:89:78:1f:0e:a8:7e:5e:67:e4:00:79:7d:8c:
         a2:c0:19:77:bf:81:4e:df:d2:71:82:5b:66:da:fc:19:91:95:
         7c:b1:04:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:58:13 2026 by rpki-client