Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a24e5819-c4f2-3640-92e4-06e7215250ce.roa
File:                     a24e5819-c4f2-3640-92e4-06e7215250ce.roa (raw, json)
Hash identifier:          1vZOPvMB/eKam472iK5CXOAZVcgF6gEttLmV82WwXWI=
Subject key identifier:   AA:17:69:B4:5D:B2:28:ED:BF:C7:D5:39:95:CF:48:7D:78:25:42:4A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D143D88461D803B906DB3C5C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a24e5819-c4f2-3640-92e4-06e7215250ce.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     41264
IP address blocks:        104.133.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:88:46:1d:80:3b:90:6d:b3:c5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=6efd036e-e98e-4e76-949a-9adc812b3792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b2:0c:7f:58:80:88:3f:88:a6:e0:b1:81:74:
                    32:db:8a:72:e9:70:0f:be:b2:07:88:b0:b8:c7:29:
                    4c:7e:ef:02:47:36:0b:9c:86:9d:96:44:ec:eb:fa:
                    4d:af:4b:ff:18:d5:8c:55:ad:0d:63:30:3d:55:4a:
                    11:03:34:28:13:e5:8c:8f:5e:15:a2:ee:fe:8d:3a:
                    87:9d:c3:cc:97:1b:9c:a3:c8:d9:0d:1c:32:50:db:
                    95:86:e3:ba:1d:99:22:d1:5c:43:be:27:48:cb:c6:
                    f2:3d:ce:7b:be:1d:bf:7e:f3:9f:a3:f0:fd:92:01:
                    b8:3c:d4:c1:55:ea:3c:67:88:6a:78:f4:b7:57:20:
                    2b:74:20:e4:65:98:88:e6:d3:46:b7:9f:2c:b6:bd:
                    68:f5:e7:27:dc:43:51:2e:80:d5:2f:c9:a4:ed:05:
                    ec:5a:f5:c6:cd:35:af:3f:aa:85:e6:4b:a7:34:bf:
                    9e:c6:bb:6a:6e:56:9b:92:1f:41:8b:fe:3b:50:eb:
                    43:71:91:ae:ff:6d:f1:f2:57:88:4a:d0:ce:d0:5f:
                    ab:21:4b:1f:b4:21:a7:e9:c3:dc:07:fe:41:c7:11:
                    0b:ed:49:b4:ef:c4:9e:47:d7:c3:a4:cc:f3:9a:3e:
                    8b:8d:3f:cb:23:31:ee:95:1b:85:73:df:c3:92:d5:
                    5d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:17:69:B4:5D:B2:28:ED:BF:C7:D5:39:95:CF:48:7D:78:25:42:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a24e5819-c4f2-3640-92e4-06e7215250ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:c7:92:04:30:05:ea:e3:4b:46:74:08:8b:6b:92:22:82:72:
         c1:e0:58:93:84:12:8a:70:4a:58:3e:a4:35:61:e2:8c:70:74:
         87:5c:1f:e5:6a:88:73:4e:07:81:7a:65:29:87:4e:ad:a8:73:
         ee:84:7d:70:ed:54:56:f0:9e:78:78:90:0f:f5:86:36:1d:d2:
         68:e6:1a:de:50:5c:97:c6:2e:7c:93:a2:c4:52:be:01:e6:a5:
         1f:a0:54:61:ec:11:aa:dd:3c:24:c4:9f:f4:af:1c:c4:91:74:
         b3:e3:c1:8a:d2:d7:16:fe:cc:eb:07:32:79:83:6a:74:1a:13:
         9a:b9:b9:c1:86:1f:ed:93:72:56:4e:75:af:d3:0b:64:aa:b1:
         e7:c6:2f:be:cf:61:d7:df:bb:f1:69:5a:09:08:2a:ea:d9:7b:
         5a:4a:d5:30:3e:59:55:2f:ae:c5:8d:a5:42:30:3d:d6:75:45:
         5b:b1:a0:19:1a:56:0d:99:be:69:e3:49:33:8e:3f:41:d1:50:
         cc:1c:f4:a4:19:79:43:a8:ca:bc:7a:7d:70:cf:a3:7a:e4:d9:
         59:e2:57:6e:b9:a1:f3:84:93:d5:58:b6:af:3e:a6:a7:b2:55:
         cb:3e:65:75:cb:41:a2:21:31:55:ad:ff:6f:ce:b4:69:ba:a8:
         c2:1f:c7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:58:08 2026 by rpki-client