Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7c3f25da-6271-39f8-990b-cbc85519f5f9.roa
File:                     7c3f25da-6271-39f8-990b-cbc85519f5f9.roa (raw, json)
Hash identifier:          VWSrvl9s7t6iE4OK4tnKmwtzy6uCNvm9UljYa9wDThw=
Subject key identifier:   63:10:B7:8D:EE:F9:6A:D1:62:96:EA:0E:74:29:0C:D4:2E:E6:C3:24
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D11728397120DC3813E677280
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7c3f25da-6271-39f8-990b-cbc85519f5f9.roa
Signing time:             Thu 05 Mar 2026 14:00:40 +0000
ROA not before:           Thu 05 Mar 2026 14:00:40 +0000
ROA not after:            Wed 03 Jun 2026 13:00:40 +0000
asID:                     41264
IP address blocks:        104.132.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:72:83:97:12:0d:c3:81:3e:67:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  5 14:00:40 2026 GMT
            Not After : Jun  3 13:00:40 2026 GMT
        Subject: CN=e6df09cb-1570-4fea-b411-7177344fee2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:32:30:74:76:22:37:2b:a5:2e:1b:21:47:d6:
                    cc:8b:1d:4d:ea:8c:0c:5a:f7:dd:90:ab:ad:e0:b4:
                    c2:18:78:75:c9:66:cb:bd:f3:31:f6:dc:6a:ee:14:
                    77:40:d1:20:fc:b1:85:30:0b:72:54:89:c4:a8:38:
                    92:32:cc:38:a5:82:8b:49:d8:ed:eb:9b:ce:37:f9:
                    1c:56:5f:26:e0:f5:a8:92:27:7f:50:59:d8:33:0e:
                    4e:c0:b3:00:9b:e0:47:d2:7f:b8:0a:77:ca:4d:4f:
                    b2:87:ef:00:0a:72:47:b1:a7:50:d4:55:a8:48:ad:
                    b6:ce:85:a3:f1:7c:66:95:39:90:23:f5:f1:7c:a2:
                    0d:ef:38:b7:bc:d3:6e:0f:49:2a:31:e7:89:cd:ca:
                    c0:e3:0e:28:73:c7:6e:6c:fe:b1:40:1d:fb:69:cc:
                    c3:87:e6:c5:79:d8:19:7f:df:9d:56:10:c1:0d:8b:
                    11:a6:5b:4d:6e:86:1b:24:ca:22:59:5c:f3:3f:43:
                    2b:4c:06:4c:3c:ab:da:7d:ac:08:be:30:5a:bc:99:
                    88:49:10:6c:5e:c2:41:3e:93:f2:92:95:11:fd:d6:
                    3d:9c:29:58:1d:de:74:dc:be:dc:65:3a:a2:97:11:
                    f1:06:ae:61:77:01:2a:32:2e:c1:52:34:14:2a:73:
                    41:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:10:B7:8D:EE:F9:6A:D1:62:96:EA:0E:74:29:0C:D4:2E:E6:C3:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7c3f25da-6271-39f8-990b-cbc85519f5f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:8a:6d:85:c2:d6:f5:f5:0d:40:31:00:81:04:55:15:c9:7b:
         ab:c7:67:e8:91:eb:8e:c8:44:d3:cb:c6:10:fc:3d:08:fe:bc:
         25:0a:17:75:cc:b5:c4:4c:72:1b:b2:ac:31:bd:fe:62:23:ca:
         a3:9d:6b:05:24:2c:81:d6:3f:ca:0f:52:b6:dd:a9:cc:d1:13:
         72:58:db:10:16:fc:ee:4b:06:d3:c6:72:e4:7b:b7:f0:03:63:
         7a:1a:b5:47:d4:0e:71:56:5c:62:f8:91:cc:7b:bc:0c:5e:c5:
         27:5a:60:56:42:8e:f2:4a:10:2b:76:14:8e:82:fc:13:14:fa:
         2b:bf:f2:2b:7a:c5:63:73:fd:ae:78:33:14:8b:ae:ef:18:f3:
         62:c4:59:8e:f1:e9:69:37:43:54:3c:f1:00:ad:75:25:07:c5:
         2a:f3:3b:0d:dc:94:1d:73:b0:55:81:4b:bf:5e:b4:b8:63:9e:
         0e:13:0a:b5:cf:6b:f2:76:c0:e0:eb:b2:1f:ca:be:99:30:4c:
         3b:dd:77:7b:95:d8:da:f5:65:39:f1:ce:10:f4:6a:f9:f7:5f:
         0e:49:ba:5f:74:db:15:63:de:9c:95:86:df:b4:e7:2a:77:c0:
         ae:ca:6f:09:5f:11:68:20:c0:8e:2e:24:fe:ae:7f:9a:a4:13:
         b0:b0:87:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:56:50 2026 by rpki-client