Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/844eee5c-88a6-3d3d-abe9-859ea9cf1510.roa
File:                     844eee5c-88a6-3d3d-abe9-859ea9cf1510.roa (raw, json)
Hash identifier:          kB1YKvaEZP+lNWoZwm3g3S/np/BR5mfeLCndV/XUhyA=
Subject key identifier:   5B:D7:2E:4D:6C:64:26:E1:B4:A6:31:A3:37:87:1C:96:E6:4F:F2:E6
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D11729141C2B1537A7CEC4640
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/844eee5c-88a6-3d3d-abe9-859ea9cf1510.roa
Signing time:             Thu 05 Mar 2026 14:00:40 +0000
ROA not before:           Thu 05 Mar 2026 14:00:40 +0000
ROA not after:            Wed 03 Jun 2026 13:00:40 +0000
asID:                     41264
IP address blocks:        104.132.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:72:91:41:c2:b1:53:7a:7c:ec:46:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  5 14:00:40 2026 GMT
            Not After : Jun  3 13:00:40 2026 GMT
        Subject: CN=7a200784-0734-4df6-99a2-3e222b63ab03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:cf:cb:a0:5c:4c:cf:21:8f:a8:b0:d3:e1:61:
                    36:40:56:8c:7c:55:b6:e6:be:a7:9b:9d:0b:55:d1:
                    52:ec:ed:b9:82:47:5c:2e:46:69:6f:a8:0e:f9:00:
                    f7:a3:32:ca:25:57:d2:b8:cf:17:56:c7:55:7e:88:
                    03:d5:1c:d9:d9:d0:a3:02:3a:a2:be:3b:1c:5c:d9:
                    d5:43:2e:54:ba:dc:ac:91:46:29:52:00:89:6d:8a:
                    84:10:46:2e:7b:92:88:fc:85:73:1b:71:3c:89:ed:
                    cf:72:d8:25:76:54:57:a4:a7:64:8a:9a:97:5f:03:
                    bc:ba:9b:46:cd:17:36:08:f0:3d:83:a2:18:77:34:
                    aa:00:03:cb:4c:6c:94:9b:9f:e7:17:8c:92:21:0d:
                    86:71:ea:f7:c7:3c:26:fc:e3:3a:d2:3c:13:0e:3a:
                    96:7f:7e:f4:23:ae:6e:74:e2:7c:c8:d5:5c:48:ed:
                    7e:68:f4:4a:88:a3:f2:87:e5:c4:94:c4:ec:ca:e9:
                    dd:81:b1:50:14:2c:84:3a:b3:a7:67:1c:45:f6:8a:
                    79:cb:ed:68:f8:6c:af:0f:2e:13:91:43:92:9d:9a:
                    79:c6:93:26:fc:03:62:fe:51:73:15:80:0b:e6:fc:
                    2c:ad:f8:e5:a5:f7:b6:68:4e:ad:0d:41:63:4b:59:
                    09:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D7:2E:4D:6C:64:26:E1:B4:A6:31:A3:37:87:1C:96:E6:4F:F2:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/844eee5c-88a6-3d3d-abe9-859ea9cf1510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:cf:67:1c:c2:46:93:ee:ad:4e:ec:61:61:a4:be:7e:13:cc:
         35:9d:e7:51:79:a3:9b:62:3a:b3:75:5f:72:b8:e4:b8:43:df:
         6e:d2:c2:4b:a8:c1:f0:18:b5:4a:53:08:2c:1f:0a:ab:27:1d:
         39:d7:70:61:9e:b7:86:6e:b8:1c:a2:9c:f7:b9:07:8a:97:7c:
         ac:98:18:f0:5d:8b:b0:9b:cb:e9:3b:ac:1d:93:06:fb:57:94:
         a4:95:0f:28:83:94:e3:db:43:51:60:6e:27:2a:de:38:d8:58:
         88:7a:4e:81:83:b9:84:ed:a1:24:55:2e:38:9f:f3:56:1f:e8:
         a7:ff:df:63:95:43:c4:82:e3:cf:b9:50:a7:cd:0d:bb:bb:92:
         fa:dd:3e:46:5c:fa:5b:d1:24:1e:9d:92:88:c9:75:27:d1:4c:
         5f:45:98:fb:ce:99:68:2c:04:18:d4:8b:6a:fd:ee:8d:c6:b5:
         67:28:42:e4:1b:72:43:29:19:a8:e7:a8:33:8a:8a:4a:ee:f3:
         8b:b9:9f:a7:fd:3c:71:a5:a1:79:4f:a7:62:9f:80:7c:56:18:
         98:de:0b:f8:70:d4:d1:b5:d7:fe:5f:cf:f9:45:df:cc:0f:89:
         ce:88:59:74:d5:57:73:ab:6f:32:8e:d9:1b:ae:60:b8:e0:b1:
         62:9f:84:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:48:27 2026 by rpki-client