Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/80ff8725-cd10-3c4f-934b-cd85f5a95381.roa
File:                     80ff8725-cd10-3c4f-934b-cd85f5a95381.roa (raw, json)
Hash identifier:          xsM9bubd/5ePQCKa6D24+oByG7s3F+ZoT+ERe8TRw5o=
Subject key identifier:   22:F5:88:FD:85:76:89:6D:24:49:19:53:3A:B4:83:3E:B9:2F:E2:05
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D0EA7D1458E3582722E99D480
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/80ff8725-cd10-3c4f-934b-cd85f5a95381.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     41264
IP address blocks:        104.132.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:d1:45:8e:35:82:72:2e:99:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=dd9a4637-4394-46ed-872c-a1fb2b42ed36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:59:35:fa:dd:45:ed:ff:15:21:47:bb:e5:f5:
                    e4:e6:ba:8a:ef:8e:34:29:55:99:82:4f:13:4a:03:
                    73:9a:0c:c9:3a:e4:0f:52:48:32:b5:a2:9c:d4:d1:
                    7b:88:68:ad:78:90:66:46:5b:84:44:40:d4:40:3a:
                    9e:c2:01:fd:8d:4e:65:7f:90:c1:82:8f:f8:58:d0:
                    61:40:7d:d2:97:e0:8d:33:f6:23:78:99:a5:75:b5:
                    eb:dc:4f:43:94:6a:88:7b:cd:71:06:38:cf:62:c2:
                    34:2d:b1:bf:bb:58:cb:42:3b:10:cc:78:88:85:d7:
                    07:c8:44:6e:3c:a5:88:8f:eb:4b:5d:99:84:d6:d3:
                    c7:92:65:cf:a6:e4:05:70:7c:55:7f:80:c4:5d:b1:
                    fb:db:1c:7e:7e:fc:06:a9:9c:a6:f8:44:6b:ef:9d:
                    55:6a:78:89:24:65:88:c4:bd:1a:6a:42:46:d3:94:
                    c8:94:2c:58:ae:70:60:1a:9e:28:8d:93:4e:4f:f5:
                    86:91:bb:64:b5:14:63:7c:40:f9:8a:e7:57:4f:27:
                    e0:c5:61:84:96:56:ba:ad:4b:08:bf:53:88:75:23:
                    97:59:e1:41:7b:98:2f:73:a5:3e:f4:db:52:47:66:
                    cd:ad:cf:ca:01:c2:7e:f6:05:d3:3a:de:72:91:75:
                    ee:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F5:88:FD:85:76:89:6D:24:49:19:53:3A:B4:83:3E:B9:2F:E2:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/80ff8725-cd10-3c4f-934b-cd85f5a95381.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:d2:ec:4b:3a:4d:5c:b0:8f:94:05:4b:9d:53:2d:8b:ae:ee:
         66:fc:73:98:42:10:a0:73:4b:ee:aa:b4:72:ad:39:68:26:98:
         f1:35:2a:1c:79:ff:78:3e:97:4c:48:79:1e:3f:35:2c:2c:4d:
         fe:b9:86:c6:e5:d9:df:ef:cb:a2:ce:a0:60:e6:2f:9b:91:09:
         e3:43:f8:d3:02:df:b9:bc:17:a0:13:2c:36:61:30:00:e4:56:
         23:30:13:09:41:b8:23:60:fd:6c:c8:a1:e6:94:af:ec:08:7a:
         cc:f2:00:df:f2:ac:ce:92:da:8a:94:39:56:d5:2e:74:ea:73:
         ee:ae:51:0a:37:41:2d:68:d1:4a:b1:1d:a9:99:03:af:e2:eb:
         be:2d:e2:6e:fd:2c:12:73:e3:9c:74:3b:63:9e:05:5d:6b:b7:
         ea:cf:e7:9a:f2:fa:50:f8:30:2c:3b:82:b2:00:d2:93:58:89:
         fd:29:f6:6c:bb:b2:25:21:9e:78:08:fa:4b:a6:31:15:07:8e:
         00:87:08:06:8c:04:5e:b2:45:e2:72:22:91:4e:56:f7:0c:27:
         f7:84:7a:62:36:d0:78:b9:6c:bf:c5:ba:97:6a:da:9f:25:9f:
         96:8c:6c:c6:97:42:43:3a:8a:78:a3:80:ff:8d:4d:74:59:67:
         e0:56:a5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:18:06 2026 by rpki-client