Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/563b6ddc-c082-33a2-9c5d-e6934c264cc7.roa
File:                     563b6ddc-c082-33a2-9c5d-e6934c264cc7.roa (raw, json)
Hash identifier:          9ljaFABOXmZzkqCuwzqBvEkTJaoAUGwSXooaklOeg1U=
Subject key identifier:   04:54:CC:90:92:92:13:79:8C:19:9C:C0:CD:66:C4:BA:60:5F:1C:9A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D143D87BA4595915B3C614480
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/563b6ddc-c082-33a2-9c5d-e6934c264cc7.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     41264
IP address blocks:        104.133.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:87:ba:45:95:91:5b:3c:61:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=15a2f634-0208-4506-b737-ba22d027e178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d5:be:77:49:f4:5b:a3:30:85:3a:93:3b:21:
                    90:3d:1e:36:72:0c:5e:8e:fa:3f:21:1d:96:d4:fa:
                    1f:10:67:f3:30:78:79:f4:52:80:b6:72:bd:2e:ba:
                    74:bc:f3:c7:eb:19:8d:9d:79:fb:7e:94:9e:ea:35:
                    3f:27:d9:d6:51:d5:52:27:bc:c2:f3:4d:74:f4:ab:
                    d7:bf:f4:cf:ae:ed:bb:ef:8c:6e:10:2f:cc:b2:b6:
                    8f:ea:fd:19:b8:5b:7e:38:40:73:6b:1c:f5:01:55:
                    a1:32:a3:a9:b2:6f:6d:9e:b2:37:e4:57:ae:bc:76:
                    58:53:c8:d4:a6:be:05:51:8f:11:b5:35:21:77:37:
                    e8:47:09:f3:48:4c:86:f0:67:2d:29:1d:dc:28:2f:
                    51:2c:22:44:17:c8:7f:19:b5:90:10:d6:ba:d2:79:
                    4a:b7:b9:14:f1:44:d7:90:c5:bc:2f:33:d7:54:c7:
                    c1:e5:64:14:c9:3b:2b:89:22:dc:9a:74:66:b5:15:
                    60:5b:ff:e7:0d:bd:7d:73:7f:5f:79:1f:68:41:14:
                    07:a5:86:91:f9:00:2d:ec:fb:13:46:95:50:c1:f2:
                    96:1b:86:1a:7d:e7:c0:a8:00:fb:81:96:f4:a5:5b:
                    4c:09:3b:1a:56:37:f2:4b:d1:a3:cb:e3:de:a6:b6:
                    55:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:54:CC:90:92:92:13:79:8C:19:9C:C0:CD:66:C4:BA:60:5F:1C:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/563b6ddc-c082-33a2-9c5d-e6934c264cc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:3c:e2:5f:eb:8d:60:30:52:1c:2a:46:f2:99:c5:d6:c2:24:
         37:34:d6:f7:36:4a:ed:8c:c8:b8:59:71:32:3b:10:ca:84:1a:
         ce:6b:3d:6e:b1:be:68:ae:79:9b:2c:14:67:b5:7d:cd:64:b4:
         92:0e:83:1d:35:f7:d0:96:b4:3d:e7:eb:e5:78:db:7b:22:c5:
         b6:b9:43:af:af:4e:eb:a4:6b:20:6b:51:bb:3e:6c:c9:19:50:
         30:93:b5:56:2e:28:d3:79:67:75:a9:0c:49:ec:6f:6d:30:4b:
         c0:d1:a0:30:07:1f:0a:a2:d8:e3:8a:f6:a8:89:53:48:bf:9a:
         59:94:3c:4d:0f:45:be:48:96:e6:3b:2d:66:b3:20:28:b3:ef:
         af:8e:f7:35:20:90:7e:35:8a:08:57:50:28:19:54:f9:88:4b:
         e0:6e:7d:ca:6c:c1:df:86:f3:43:fb:d3:85:f1:38:ab:1b:d8:
         04:cd:a7:c9:e8:eb:a0:ea:ab:d2:23:7e:59:33:da:df:2e:58:
         6a:17:18:81:22:49:cc:b1:ce:a3:3c:b2:f7:22:4a:0d:cf:11:
         6f:a6:22:9b:19:2d:40:80:5b:33:88:e6:fc:d4:06:26:b3:88:
         c1:32:66:cd:6f:04:e5:b5:88:f7:f7:6d:c4:aa:a9:c5:98:42:
         bb:bd:ec:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:31:52 2026 by rpki-client