Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a38e20f2-16d5-3907-a137-9a5d080690f2.roa
File:                     a38e20f2-16d5-3907-a137-9a5d080690f2.roa (raw, json)
Hash identifier:          eXC9oTwFuzY1NW34kyZq6HY+8iQTazPpDsvIW8DbgkQ=
Subject key identifier:   5E:8F:55:8A:DF:F1:CB:67:94:DC:DE:69:EC:30:4A:42:9A:98:3E:C3
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D117280531FD1A1951BA7A680
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a38e20f2-16d5-3907-a137-9a5d080690f2.roa
Signing time:             Thu 05 Mar 2026 14:00:40 +0000
ROA not before:           Thu 05 Mar 2026 14:00:40 +0000
ROA not after:            Wed 03 Jun 2026 13:00:40 +0000
asID:                     41264
IP address blocks:        104.132.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:72:80:53:1f:d1:a1:95:1b:a7:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  5 14:00:40 2026 GMT
            Not After : Jun  3 13:00:40 2026 GMT
        Subject: CN=cffac75c-4613-43de-a7e9-a0c674bca0ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:66:42:f8:62:d8:a4:77:53:27:dc:fb:48:10:
                    08:6f:52:1a:e1:63:a7:8b:6d:cf:c1:0e:a6:62:13:
                    48:56:41:a4:11:74:ee:19:89:96:fe:8f:03:05:96:
                    90:1f:22:0f:cb:f6:39:68:a9:63:47:d5:8c:9f:19:
                    cb:f1:44:0c:c9:fb:7b:62:e9:cf:c1:73:45:d6:d0:
                    7c:2a:97:df:06:8a:66:8e:2d:1d:ed:0e:25:d5:dc:
                    39:3f:6b:69:de:65:f6:cd:f5:db:9c:eb:47:6d:4d:
                    fe:fe:f9:a4:98:a0:24:c2:35:40:a5:8b:db:2a:c1:
                    42:48:99:fb:c7:e7:50:8d:c2:5f:3b:27:c4:5e:0b:
                    16:2f:70:c9:e6:28:57:9a:6d:a9:58:f1:a7:ba:c9:
                    4a:7d:40:37:28:30:ac:df:a9:7a:82:2f:f7:66:16:
                    3e:58:b2:a5:8f:1e:db:88:39:ac:69:31:42:68:f3:
                    8f:82:3f:e1:fc:22:3f:0d:1b:3c:2f:18:f7:56:4a:
                    5a:80:ea:93:c7:43:89:c9:88:7a:49:d4:40:ec:cd:
                    24:c9:91:6e:d6:0c:47:d2:19:5c:b7:36:38:82:60:
                    ff:69:5e:6f:19:2e:30:2f:5d:80:67:99:08:b8:85:
                    b6:b6:9e:bb:c5:42:1b:56:38:5f:8d:d9:4e:b2:73:
                    68:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:8F:55:8A:DF:F1:CB:67:94:DC:DE:69:EC:30:4A:42:9A:98:3E:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a38e20f2-16d5-3907-a137-9a5d080690f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:d4:10:b4:87:dd:12:a7:96:76:5f:51:6e:0e:a4:c0:93:9c:
         bd:f5:49:bd:d3:c0:85:72:8f:7a:cc:6a:42:af:b8:bc:ab:4a:
         06:bb:24:d0:6c:06:f9:e1:de:86:ae:7d:9b:35:36:7e:b1:5f:
         51:82:07:6b:6f:07:5d:b7:e7:ee:73:05:81:51:d0:71:21:e1:
         b2:26:55:eb:81:a1:0b:16:d4:3a:f5:70:d9:87:f2:2f:f2:06:
         bf:37:a2:66:fc:da:3e:25:08:45:fd:ee:32:38:68:e4:1b:3f:
         28:0d:42:36:ac:54:1d:d3:2c:01:c0:27:69:65:55:fc:1b:94:
         b4:d6:6c:0d:9e:30:44:41:e7:aa:8a:0a:23:a5:b7:72:23:bb:
         5b:da:7d:0c:6a:c5:e6:7e:10:48:75:93:9b:e2:47:51:38:50:
         54:3d:7c:f1:6d:43:20:e5:c1:62:05:4f:e0:d3:38:94:d1:04:
         6c:7f:f4:ba:88:5c:08:f5:32:05:c0:28:1e:2b:c1:32:b3:46:
         7b:13:a0:f9:00:f9:ab:1c:f9:2e:b0:fa:bc:ef:a8:d9:99:2a:
         83:d2:af:db:51:3e:b0:45:64:69:3c:f9:a5:0e:18:18:b9:11:
         10:aa:86:cf:85:56:90:7a:ff:5f:31:02:ba:82:6d:ca:38:e6:
         1e:bd:44:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:02:22 2026 by rpki-client