Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a45a2ce5-4a66-3163-9b69-ebf870ca4bc7.roa
File:                     a45a2ce5-4a66-3163-9b69-ebf870ca4bc7.roa (raw, json)
Hash identifier:          cRl/gc0ClKE83Txdk6JQg4JNaP9C3UYCPpWIPo6MnLE=
Subject key identifier:   F4:0C:A7:BB:AB:55:62:13:DF:BE:F5:6E:1A:70:A3:D7:D9:A2:6C:D9
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D143D8CB881D72EF7DC40DA54
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a45a2ce5-4a66-3163-9b69-ebf870ca4bc7.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     41264
IP address blocks:        104.133.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:8c:b8:81:d7:2e:f7:dc:40:da:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=2e9482ef-0a93-44bf-a693-d8b3365f4aa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e7:5c:6c:04:04:b4:3a:5e:c6:6f:1d:d0:7f:
                    9a:b9:09:dc:5a:21:95:c4:c3:15:c2:61:5b:32:10:
                    7e:8b:8e:92:19:1d:d6:83:8c:27:40:19:09:d6:58:
                    19:13:3a:db:58:ee:6f:5e:41:57:61:a0:80:07:8d:
                    cb:98:cc:22:02:c3:bd:15:30:52:19:24:01:2b:b6:
                    3e:d6:ad:d6:15:21:dc:52:fc:78:8e:7c:7f:bf:90:
                    2d:d8:77:2f:f5:ca:60:1e:4d:49:93:e4:cc:ce:06:
                    c0:00:23:2d:65:91:d6:80:82:a6:d0:b0:c9:f5:e5:
                    bd:6e:fb:7c:97:65:92:80:82:13:65:c8:26:03:e4:
                    cf:16:d0:d5:a8:6c:a4:17:ee:ae:dc:c4:9b:c0:05:
                    10:6a:c5:92:d6:c6:49:99:f4:ca:1a:f2:41:66:ec:
                    8c:8a:92:74:56:88:ea:e4:f4:6a:b1:a2:ad:99:06:
                    be:8b:f1:3f:39:e0:cd:9b:ed:a1:33:da:46:4d:0c:
                    62:43:92:75:d2:8b:c9:bf:22:7b:6c:6d:12:74:4a:
                    f1:08:64:ba:e0:fd:ea:21:0b:4a:c6:b5:c1:de:c2:
                    75:64:ee:46:e9:7a:9c:ce:64:7d:f5:fa:ef:af:ed:
                    de:25:ca:c9:89:8e:e6:d6:2c:6a:42:4d:4e:ce:9e:
                    8c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:0C:A7:BB:AB:55:62:13:DF:BE:F5:6E:1A:70:A3:D7:D9:A2:6C:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a45a2ce5-4a66-3163-9b69-ebf870ca4bc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:b4:d1:b5:43:5b:23:f8:ad:35:6d:e6:9a:b2:23:e9:f0:34:
         7b:3e:3e:c5:39:0b:6b:be:41:83:93:cc:da:78:d5:ad:90:db:
         58:1c:71:4c:aa:78:d8:7e:d8:3a:61:1c:83:20:55:1c:ac:46:
         9f:f2:09:c7:e6:77:b5:fb:0f:91:78:6d:e9:58:20:fd:f5:ae:
         b6:f5:18:23:fa:97:f0:82:04:31:d2:f4:58:8b:25:fe:9a:07:
         10:63:96:92:af:39:5a:c4:bb:8f:57:e6:8b:86:c2:06:9d:8f:
         a7:9d:6b:ec:a4:70:65:89:41:f2:16:6d:a1:42:e3:93:ca:57:
         66:ba:fb:4d:65:21:1d:11:48:c1:e4:b7:49:49:71:b4:f1:a4:
         92:4d:39:1c:fc:db:05:62:19:76:1c:f4:c9:72:7f:14:fe:36:
         01:59:4f:16:49:fa:8e:a3:ee:04:35:31:3b:1d:40:31:2a:1a:
         87:ed:fe:79:ec:74:c8:e8:bb:5a:e8:98:5c:a7:79:23:fd:2a:
         2f:16:05:2f:88:6f:01:47:36:26:24:dd:8d:ea:d2:29:18:4c:
         3b:3a:98:44:74:4a:8a:d2:c9:15:9f:9a:56:c7:e0:2f:05:52:
         4d:1c:90:0a:bf:62:ec:d9:67:6c:a6:88:a1:de:a2:b3:f2:6d:
         35:2d:27:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:39:08 2026 by rpki-client