Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7549fd74-b059-390e-9c3f-ead7ad43784f.roa
File:                     7549fd74-b059-390e-9c3f-ead7ad43784f.roa (raw, json)
Hash identifier:          ORRXPzhCPVxNFafv5lHFGLan2ILz8CAYHVWRqP07Loc=
Subject key identifier:   CC:38:A0:4E:9E:1D:6F:BD:E4:5C:17:E4:B9:DA:05:4C:3F:7F:E1:51
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D1172848A72B2A100CDF51240
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7549fd74-b059-390e-9c3f-ead7ad43784f.roa
Signing time:             Thu 05 Mar 2026 14:00:40 +0000
ROA not before:           Thu 05 Mar 2026 14:00:40 +0000
ROA not after:            Wed 03 Jun 2026 13:00:40 +0000
asID:                     41264
IP address blocks:        104.132.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:72:84:8a:72:b2:a1:00:cd:f5:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  5 14:00:40 2026 GMT
            Not After : Jun  3 13:00:40 2026 GMT
        Subject: CN=32117ea8-8367-46a4-a44e-8480e1d346c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:50:99:17:e0:b6:53:7e:3a:b3:6a:12:40:31:
                    92:d1:b3:b8:f9:17:3e:bc:40:5f:30:2e:cf:d0:ce:
                    61:28:43:96:3d:01:78:6f:b4:48:38:bc:1e:7f:87:
                    eb:0b:2b:5c:ee:ad:d8:0c:dc:d8:16:fb:0f:a0:86:
                    08:49:4e:45:11:79:ef:c8:14:7c:1b:a3:34:be:6f:
                    a1:51:13:c8:36:bc:ff:aa:c8:49:84:69:2b:7b:02:
                    eb:c5:9c:e6:80:fa:e6:15:d8:1a:2c:9c:65:16:23:
                    cd:6d:e4:db:77:fb:c5:af:d5:9f:f5:1a:82:bb:2e:
                    a5:80:23:0d:0a:75:e1:1a:a0:61:a5:70:3b:0b:ca:
                    5e:90:24:5d:45:84:db:75:05:28:3b:42:eb:3c:de:
                    d0:7a:bd:bc:5d:f3:de:76:f1:13:99:7c:64:a8:f1:
                    ba:2b:11:17:2c:be:7f:3b:83:32:50:ae:b0:e5:15:
                    54:10:42:06:46:4d:88:05:59:8f:02:35:e5:6c:12:
                    5a:1c:e1:5d:fd:1b:2a:39:40:12:5c:64:1a:57:fb:
                    11:07:92:03:cf:ff:28:b2:c7:04:ee:a0:b0:6d:07:
                    e1:22:88:b4:08:fd:8c:df:1c:07:29:6a:df:99:c8:
                    b6:9b:28:9b:fc:a5:09:2c:31:b0:37:fd:1b:e9:c1:
                    6e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:38:A0:4E:9E:1D:6F:BD:E4:5C:17:E4:B9:DA:05:4C:3F:7F:E1:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7549fd74-b059-390e-9c3f-ead7ad43784f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:88:3a:a2:5b:c5:a0:67:60:68:ea:5e:12:a4:f4:2b:59:4a:
         7b:82:c6:c4:3e:7a:f8:a2:69:8c:d5:72:ec:dc:7b:f1:98:65:
         03:8e:30:a8:89:1f:b2:8f:d9:bc:e5:ea:b7:4c:ba:26:82:81:
         4c:91:06:94:0c:c3:9f:90:d1:47:22:a8:89:74:66:55:0f:d9:
         c9:c5:49:e0:3a:f8:48:cd:2b:c8:d7:b1:4c:79:e4:56:bb:80:
         3f:89:a0:59:6a:17:74:9a:7c:17:f2:53:b4:c5:83:b1:be:ef:
         8d:46:5e:8d:7a:74:0f:5b:70:33:5e:5b:17:07:89:ef:05:f2:
         3e:05:42:67:07:45:25:0f:5c:6d:17:40:f5:ca:22:9b:fb:d9:
         f9:83:fe:a7:87:01:32:85:ad:90:e6:72:4f:46:6d:82:e3:31:
         cd:45:8c:70:f4:28:e6:52:92:26:09:07:68:84:a7:6d:98:10:
         8e:1b:87:77:4d:5a:6d:7f:b2:91:56:f3:d0:63:eb:4e:4d:64:
         3d:53:f0:85:2b:b3:d2:0f:16:70:28:49:a0:a6:05:f1:88:0b:
         c6:83:ae:88:90:23:35:b9:0a:f3:b2:4c:91:28:97:ba:55:45:
         3c:2a:6e:ba:82:f8:c6:f7:4b:c2:7e:29:33:c9:59:19:4d:66:
         80:13:51:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcoSKcrKhAM31EkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk
MzIxMTdlYTgtODM2Ny00NmE0LWE0NGUtODQ4MGUxZDM0NmMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFCZF+C2U346s2oSQDGS0bO4+Rc+vEBfMC7P
0M5hKEOWPQF4b7RIOLwef4frCytc7q3YDNzYFvsPoIYISU5FEXnvyBR8G6M0vm+h
URPINrz/qshJhGkrewLrxZzmgPrmFdgaLJxlFiPNbeTbd/vFr9Wf9RqCuy6lgCMN
CnXhGqBhpXA7C8pekCRdRYTbdQUoO0LrPN7Qer28XfPedvETmXxkqPG6KxEXLL5/
O4MyUK6w5RVUEEIGRk2IBVmPAjXlbBJaHOFd/RsqOUASXGQaV/sRB5IDz/8osscE
7qCwbQfhIoi0CP2M3xwHKWrfmci2myib/KUJLDGwN/0b6cFuPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMw4oE6eHW+95FwX5LnaBUw/f+FRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNzU0OWZkNzQtYjA1OS0z
OTBlLTljM2YtZWFkN2FkNDM3ODRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEqIOqJbxaBnYGjqXhKk9CtZSnuCxsQ+eviiaYzVcuzce/GYZQOOMKiJ
H7KP2bzl6rdMuiaCgUyRBpQMw5+Q0UciqIl0ZlUP2cnFSeA6+EjNK8jXsUx55Fa7
gD+JoFlqF3SafBfyU7TFg7G+741GXo16dA9bcDNeWxcHie8F8j4FQmcHRSUPXG0X
QPXKIpv72fmD/qeHATKFrZDmck9GbYLjMc1FjHD0KOZSkiYJB2iEp22YEI4bh3dN
Wm1/spFW89Bj605NZD1T8IUrs9IPFnAoSaCmBfGIC8aDroiQIzW5CvOyTJEol7pV
RTwqbrqC+Mb3S8J+KTPJWRlNZoATUb4=
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:21:12 2026 by rpki-client