Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/95bb61cd-82ae-344b-8bab-de9dca859aa9.roa
File:                     95bb61cd-82ae-344b-8bab-de9dca859aa9.roa (raw, json)
Hash identifier:          VyQLuvwNt5WeOz6KlC1GIKVYerCX7W5ZbQJ+mzBEqPk=
Subject key identifier:   49:01:8D:49:6C:10:C0:63:B9:58:60:8A:E8:BD:78:36:77:CC:92:39
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D1172934C556AE30371E07660
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/95bb61cd-82ae-344b-8bab-de9dca859aa9.roa
Signing time:             Thu 05 Mar 2026 14:00:40 +0000
ROA not before:           Thu 05 Mar 2026 14:00:40 +0000
ROA not after:            Wed 03 Jun 2026 13:00:40 +0000
asID:                     41264
IP address blocks:        104.132.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:72:93:4c:55:6a:e3:03:71:e0:76:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  5 14:00:40 2026 GMT
            Not After : Jun  3 13:00:40 2026 GMT
        Subject: CN=44305e25-4026-4652-bcef-ef52b13bdff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:32:21:6e:4b:9d:db:c9:86:76:5b:63:29:96:
                    f1:76:8b:53:58:a1:82:a2:f6:d4:ae:97:f4:1f:88:
                    0a:3e:ab:34:30:3f:33:22:c2:b7:fb:43:91:d7:a9:
                    5c:79:b1:48:5c:9d:58:3a:ff:8b:81:d5:73:67:ba:
                    85:7d:b2:6f:f0:f8:56:be:05:cf:4c:49:9f:2e:64:
                    a1:7a:43:34:82:bc:ef:5a:dc:91:a7:55:9c:64:ae:
                    9d:a4:c8:7b:64:d7:dc:aa:3d:df:f1:a2:48:70:a0:
                    ff:ac:1d:01:b5:ee:fa:67:76:19:de:99:a5:7d:1d:
                    59:6f:71:2c:21:eb:f9:ae:2f:0c:93:18:ea:51:e1:
                    e9:45:d7:91:20:b9:2a:8e:8b:96:24:41:24:59:e1:
                    28:7a:24:a4:44:0f:a1:fc:73:0f:61:43:20:13:e8:
                    bd:b2:4e:71:6c:2b:c8:45:73:5a:e6:b0:6a:11:ec:
                    c7:9d:4a:a4:75:11:69:d7:ef:fb:a1:f8:da:ea:eb:
                    54:bf:22:ce:73:24:1f:8c:09:97:d1:d3:4b:fe:0e:
                    64:a9:6b:b6:b4:63:09:5d:ee:b0:7b:4e:ba:63:c3:
                    3e:e2:cd:52:9f:2f:fe:cc:ee:f7:c3:7b:d0:b0:4f:
                    58:eb:f7:8b:1a:75:f8:0d:e0:64:54:dc:b1:d6:67:
                    bd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:01:8D:49:6C:10:C0:63:B9:58:60:8A:E8:BD:78:36:77:CC:92:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/95bb61cd-82ae-344b-8bab-de9dca859aa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:f7:2f:20:fc:14:ad:e5:58:2c:42:a8:3e:9f:55:86:7d:18:
         4c:e8:07:02:f3:35:9a:f9:8f:ef:cd:95:63:54:67:66:74:64:
         c2:41:90:b8:f2:ea:83:cb:1d:e6:40:02:ed:3a:96:f3:c9:9b:
         e6:17:8f:73:08:fc:39:6d:5b:e5:a6:c1:11:74:72:52:1c:ec:
         fd:39:c4:b8:fb:f3:c7:86:e9:e9:63:49:a3:96:04:a9:90:2a:
         0a:20:7f:2c:27:82:73:91:cb:2e:58:08:64:ef:a1:20:6d:5a:
         9c:c8:5f:dd:9d:da:9a:61:17:c4:d3:ce:cd:a1:83:04:18:d6:
         06:f6:07:65:05:5a:0c:fb:c4:66:3c:bb:0d:b1:eb:a5:91:a0:
         61:b0:72:1f:ec:84:0e:a7:a8:ae:e0:c0:ce:9a:62:2f:93:a7:
         38:9d:a5:53:c4:43:0a:99:c2:6c:0f:29:44:d1:10:21:bb:de:
         bd:54:40:e8:1c:2d:c1:8b:a9:4d:db:26:c8:6a:6c:da:b7:3e:
         50:be:5f:6e:8d:21:e7:39:24:c6:7e:99:64:27:6a:54:96:60:
         32:41:24:2a:42:2f:4a:2a:45:ce:ed:79:06:d1:41:26:98:d2:
         17:7f:11:00:ef:e1:fa:6e:9e:5d:2c:08:0b:4e:5e:1c:64:11:
         ae:c9:71:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcpNMVWrjA3HgdmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk
NDQzMDVlMjUtNDAyNi00NjUyLWJjZWYtZWY1MmIxM2JkZmYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDIhbkud28mGdltjKZbxdotTWKGCovbUrpf0
H4gKPqs0MD8zIsK3+0OR16lcebFIXJ1YOv+LgdVzZ7qFfbJv8PhWvgXPTEmfLmSh
ekM0grzvWtyRp1WcZK6dpMh7ZNfcqj3f8aJIcKD/rB0Bte76Z3YZ3pmlfR1Zb3Es
Iev5ri8MkxjqUeHpRdeRILkqjouWJEEkWeEoeiSkRA+h/HMPYUMgE+i9sk5xbCvI
RXNa5rBqEezHnUqkdRFp1+/7ofja6utUvyLOcyQfjAmX0dNL/g5kqWu2tGMJXe6w
e066Y8M+4s1Sny/+zO73w3vQsE9Y6/eLGnX4DeBkVNyx1me9WwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEkBjUlsEMBjuVhgiui9eDZ3zJI5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTViYjYxY2QtODJhZS0z
NDRiLThiYWItZGU5ZGNhODU5YWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACP3LyD8FK3lWCxCqD6fVYZ9GEzoBwLzNZr5j+/NlWNUZ2Z0ZMJBkLjy
6oPLHeZAAu06lvPJm+YXj3MI/DltW+WmwRF0clIc7P05xLj788eG6eljSaOWBKmQ
KgogfywngnORyy5YCGTvoSBtWpzIX92d2pphF8TTzs2hgwQY1gb2B2UFWgz7xGY8
uw2x66WRoGGwch/shA6nqK7gwM6aYi+TpzidpVPEQwqZwmwPKUTRECG73r1UQOgc
LcGLqU3bJshqbNq3PlC+X26NIec5JMZ+mWQnalSWYDJBJCpCL0oqRc7teQbRQSaY
0hd/EQDv4fpunl0sCAtOXhxkEa7JcWw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:57 2026 by rpki-client