Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/74002d72-cfae-3b12-b49e-f0443fbbcd96.roa
File:                     74002d72-cfae-3b12-b49e-f0443fbbcd96.roa (raw, json)
Hash identifier:          TU//7isyo1S49T3ZUrKPCR3WOmVbe0XX8gtJKcPxqRk=
Subject key identifier:   49:3D:01:50:0C:A7:A8:29:E1:8A:BA:EF:17:D8:63:FD:4C:3E:1E:63
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D1F4A5551E2AE11611FF57A00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/74002d72-cfae-3b12-b49e-f0443fbbcd96.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     41264
IP address blocks:        104.134.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:55:51:e2:ae:11:61:1f:f5:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=3a88a1eb-022d-4167-8a1b-de872af7b0fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f2:6b:b4:8c:2f:61:40:79:5f:06:05:cf:02:
                    64:cf:1e:32:73:7b:df:be:7c:37:c0:aa:d3:5e:44:
                    a4:96:c7:c7:bf:88:fc:5a:4f:36:e0:7b:38:1d:dd:
                    3e:9c:a2:d0:0d:73:24:9a:b6:9d:45:0b:11:54:34:
                    47:1e:07:f3:2c:1c:79:f6:e5:33:b2:1f:f7:d3:49:
                    df:ba:d7:f0:42:30:ad:83:4a:ad:f6:53:71:7e:b6:
                    d0:da:9c:d1:4f:39:86:2b:a2:89:9f:70:78:ae:57:
                    50:1b:23:8e:6a:bc:73:8b:0e:d0:20:ee:14:2e:ec:
                    f8:24:8f:20:0f:25:1c:df:2b:0f:cf:0b:dd:5f:02:
                    d7:4d:62:b4:cd:28:e7:df:a1:c8:0f:b3:c9:e7:cd:
                    bf:34:b8:ef:8a:d7:ad:fc:78:85:03:70:69:60:0a:
                    7d:c4:4b:03:1c:c0:09:aa:39:56:a6:d9:f5:72:15:
                    20:4a:42:58:c7:2b:e8:7c:95:04:8d:47:e5:33:5f:
                    5f:4f:82:e0:88:a4:82:fa:40:f0:b8:a9:54:c1:9c:
                    22:14:0a:0b:f8:7a:d4:2b:92:ec:8b:c1:16:a9:41:
                    36:0c:b2:06:3a:c7:ce:0f:b9:39:e1:d9:b8:2e:d5:
                    7d:5a:d1:66:4b:90:ff:bc:52:b0:b6:66:ec:d8:48:
                    9e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3D:01:50:0C:A7:A8:29:E1:8A:BA:EF:17:D8:63:FD:4C:3E:1E:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/74002d72-cfae-3b12-b49e-f0443fbbcd96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:0a:cb:da:df:02:6d:52:12:a2:2b:4c:00:05:b4:98:aa:11:
         21:78:f7:d2:ca:31:22:18:54:e6:42:8c:6f:bc:22:43:ee:17:
         44:95:50:ad:0b:48:b2:97:8b:b7:2f:1f:f0:6c:d8:aa:7c:33:
         68:72:d8:7d:63:79:74:27:da:d4:91:ba:fe:c2:d7:f7:6d:d7:
         d0:da:e4:ee:70:08:dc:ef:5c:80:14:67:e7:ea:75:1f:64:bc:
         ce:f8:15:c9:e8:84:b4:7e:56:80:5c:6b:2b:76:8d:4e:fc:7b:
         42:04:58:3c:85:6a:3b:04:05:f8:13:e7:ab:f2:01:79:31:ea:
         85:de:36:2d:65:cc:74:48:b8:62:e7:b8:6c:a5:27:87:90:f1:
         08:f4:2d:a5:48:eb:1a:68:06:cf:0c:81:d3:2b:c6:47:d4:e8:
         43:5c:10:75:3f:89:b1:2a:15:c5:66:01:f2:39:2c:24:e7:ff:
         e5:f7:0a:2f:b3:05:27:6f:f8:93:98:01:20:86:66:5e:e9:51:
         3a:59:70:9f:3c:a9:1f:2c:28:4b:28:02:9d:9f:1b:e6:66:54:
         4d:26:04:00:c3:72:b8:0c:61:09:cb:00:2c:c4:06:87:9f:20:
         e7:4d:c0:75:b7:1f:c0:2c:c4:86:c0:b0:a9:67:7e:87:45:bb:
         27:9e:bc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:14:54 2026 by rpki-client