Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/543dded8-773c-37ac-918d-3d2bf1c75c74.roa
File:                     543dded8-773c-37ac-918d-3d2bf1c75c74.roa (raw, json)
Hash identifier:          ZGzm7xjx9v61zry9LmNMoWAA8MibFBNYxXKl9cbpfZw=
Subject key identifier:   98:D7:9B:FD:86:40:03:23:E0:A2:D3:24:16:7F:56:CC:6F:DB:BD:BA
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D143DA294A2F61B858B9E2740
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/543dded8-773c-37ac-918d-3d2bf1c75c74.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     41264
IP address blocks:        104.133.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:a2:94:a2:f6:1b:85:8b:9e:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=e70aa273-f806-4d4e-a8fa-9f3355db4569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:72:97:cc:c2:d4:3e:db:3b:f3:aa:a5:f7:f7:
                    0c:af:be:65:8d:45:ca:92:9d:7c:55:ae:04:a2:3f:
                    14:49:9c:90:af:d1:92:99:4b:18:cb:cb:b4:dd:3c:
                    77:47:05:1d:ee:c9:73:a7:d5:ad:14:42:e4:91:87:
                    7e:bc:56:e7:e6:57:95:7d:e0:a1:c0:11:bb:5a:0b:
                    e6:e1:e8:83:46:bd:f6:49:42:2d:f2:a2:4a:e0:de:
                    71:d2:26:f8:84:6d:9c:df:ff:44:4a:d3:76:2c:e3:
                    32:a3:d9:86:09:31:6b:9a:16:ce:7d:22:11:68:91:
                    bb:5d:70:1c:2c:a0:71:3f:1b:44:0d:53:09:d6:a2:
                    b4:c1:bf:32:f7:f0:d0:36:98:fb:c5:03:6a:f1:77:
                    7f:fc:66:97:76:82:69:e3:2c:b4:e4:13:99:9a:40:
                    02:88:c8:24:d2:97:f5:49:fb:34:d9:4a:ab:4f:9d:
                    c0:04:fc:6c:4f:40:0d:bf:f9:58:88:48:95:8c:82:
                    b9:fa:97:b4:e8:e2:a3:90:5f:50:2e:c2:a3:eb:98:
                    ab:b1:dd:65:fc:fd:44:32:5e:8b:4d:52:c1:70:28:
                    5a:7e:22:97:6e:e8:c6:ff:11:e6:5e:ea:72:3c:bc:
                    b8:58:00:7c:2a:77:0a:aa:3e:d4:92:51:3a:6d:e7:
                    d6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D7:9B:FD:86:40:03:23:E0:A2:D3:24:16:7F:56:CC:6F:DB:BD:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/543dded8-773c-37ac-918d-3d2bf1c75c74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:b3:0b:1e:94:2f:64:db:2d:ab:9c:38:73:24:9b:81:4a:fa:
         92:5c:be:ad:26:84:57:04:70:47:40:1d:bd:20:67:cd:7f:0b:
         82:d3:27:fa:a3:ca:3f:f3:b6:ae:73:e4:e8:13:2d:53:ea:f4:
         36:7e:1b:8a:ad:37:a6:c4:12:c5:a3:35:16:b8:db:93:61:ef:
         68:4c:58:a3:5b:1a:85:94:89:b0:2c:23:d3:ed:6a:89:21:5c:
         65:5c:ad:07:9b:ee:ec:95:56:a0:1e:18:8d:92:dd:a5:7f:a6:
         ea:6d:ff:b3:9c:99:82:d5:ad:8b:15:d8:d1:1f:02:4b:1f:d4:
         b6:dd:64:2e:d3:5b:e5:d0:bc:05:b0:29:66:9c:77:c2:d0:db:
         11:5d:4d:7c:84:b5:08:e1:ac:80:86:a0:98:2b:69:d8:19:ae:
         b8:ed:2b:4a:a6:fa:1c:e6:49:f5:dd:ba:06:ac:71:02:79:3b:
         3b:80:b8:10:6e:aa:94:78:1a:16:e5:18:1d:b5:7f:2e:c7:f1:
         c3:18:fc:92:11:5d:32:69:fd:b3:10:68:ae:6d:21:ea:4a:59:
         bc:78:3a:49:4d:95:16:26:3d:1d:c6:7f:2b:22:e7:ce:4f:e3:
         c1:80:54:af:45:4c:69:56:58:a7:5a:bb:5f:f3:44:17:1f:0a:
         28:fb:d9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:25:52 2026 by rpki-client