Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7041d7f1-06a1-3587-ba2c-e05ad92eef26.roa
File:                     7041d7f1-06a1-3587-ba2c-e05ad92eef26.roa (raw, json)
Hash identifier:          n2g3Hr/JK4aH+ySQ2fj06frPPct2MPXRxdTdm1v74oM=
Subject key identifier:   98:09:04:44:90:65:42:05:26:4B:FD:25:64:54:37:AB:6B:99:34:74
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D0EA7CEA32918F1F894B181C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7041d7f1-06a1-3587-ba2c-e05ad92eef26.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     41264
IP address blocks:        104.132.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:ce:a3:29:18:f1:f8:94:b1:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=f037e227-eac9-419d-ac59-8e7d20000c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8e:47:f4:94:61:88:81:31:d5:7d:a7:ce:09:
                    a6:b8:0f:f0:45:29:51:c2:9d:3e:d7:ea:42:22:cb:
                    3a:bd:c5:32:6d:cb:12:fc:a9:76:4f:d3:c6:98:3c:
                    4d:c3:a1:ea:3d:42:af:f9:e5:6c:05:1f:f0:14:0e:
                    9f:68:88:14:97:95:65:40:12:d7:8d:56:5d:01:0c:
                    09:06:be:c0:cf:0f:ea:2e:a4:d5:18:35:8f:20:19:
                    cf:dc:fc:7b:14:02:67:0d:5e:23:9b:bf:64:fc:29:
                    fe:6d:9a:3b:6e:89:bd:6e:0d:d8:37:99:1e:b7:f1:
                    37:73:8f:45:e7:b9:7d:71:b1:82:31:79:d3:38:62:
                    ce:73:f1:35:e3:a4:ae:fc:eb:d4:ff:8d:75:c2:79:
                    9c:db:9c:d9:df:38:1d:bc:f2:b5:15:d5:10:35:24:
                    fa:52:fa:ca:41:6e:e6:b6:0c:79:dc:0e:e6:81:7d:
                    a5:d2:58:7e:c0:e7:15:33:35:e7:e3:ab:00:51:83:
                    a5:6f:99:d2:3f:3c:8d:3e:4a:85:33:52:ef:10:c2:
                    6f:9d:14:5d:25:2b:f3:67:75:b8:2d:1b:1e:52:3a:
                    e2:ea:80:d3:5e:ea:66:b2:70:c1:b3:79:fe:1f:3f:
                    ac:32:68:e0:d3:be:45:70:3e:d0:cf:d2:55:6d:38:
                    65:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:09:04:44:90:65:42:05:26:4B:FD:25:64:54:37:AB:6B:99:34:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7041d7f1-06a1-3587-ba2c-e05ad92eef26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:a0:de:1f:e9:52:e9:bd:a7:29:1d:05:63:30:40:7d:dd:13:
         99:12:d2:5b:96:30:a3:b1:c0:36:ab:f9:70:ce:a0:57:1a:a9:
         41:ea:ec:3e:3c:6a:75:65:08:06:09:01:80:46:50:e0:a9:71:
         e9:8a:e2:97:68:83:5e:f5:bb:f2:90:3c:6d:c6:3d:10:3b:2e:
         dc:21:d5:9a:c9:3f:29:43:42:f3:f5:0c:93:7e:33:99:05:fc:
         b0:2d:5e:75:c1:64:10:d8:59:e3:1a:d8:84:3e:93:8b:df:06:
         f7:b4:ea:c1:c3:92:b1:2b:01:cf:8b:4d:3a:3b:85:9c:a5:ad:
         89:05:4a:38:2c:d8:53:18:65:69:33:30:3e:46:a3:99:aa:a3:
         40:f2:c8:5c:92:c2:48:18:4e:2b:05:4b:19:38:2a:52:45:31:
         58:32:ec:a7:ce:45:df:28:4b:3c:21:a1:a2:bb:28:82:dc:86:
         9e:30:89:46:b0:4e:83:0f:04:d3:97:70:34:28:eb:37:c5:67:
         78:62:d5:29:4a:e3:64:c1:32:de:9e:e4:60:2a:0f:57:0e:0b:
         0f:fc:28:23:36:6c:9e:a6:40:40:10:da:92:64:7a:04:cf:81:
         2f:cd:b6:f5:74:aa:f1:e7:34:3b:44:40:c7:5f:3b:25:75:1d:
         46:23:46:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:43 2026 by rpki-client