Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ab617d00-8dc6-3fb4-b3c9-d40393733a89.roa
File:                     ab617d00-8dc6-3fb4-b3c9-d40393733a89.roa (raw, json)
Hash identifier:          cof/fqMZD4iu57lsWra24qKxVJcY96BxWHfv2hGCotQ=
Subject key identifier:   54:66:4A:D6:D7:D5:2E:DA:55:CB:90:A0:E4:83:EB:EB:37:B9:AE:B8
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D0EA7CF91B2D9CCD05F5A3700
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ab617d00-8dc6-3fb4-b3c9-d40393733a89.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     41264
IP address blocks:        104.132.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:cf:91:b2:d9:cc:d0:5f:5a:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=ddcf1af2-4b98-44da-8957-b58ae82c9659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6e:66:1f:9b:45:9b:53:93:18:be:ab:87:00:
                    43:07:cf:b8:c2:17:ba:b7:1c:58:74:27:85:56:13:
                    8e:53:c3:a3:e2:6a:15:e4:7d:37:06:6e:f9:46:1c:
                    ee:ee:7c:56:1c:86:f3:d5:10:8d:8c:6d:45:45:d3:
                    01:9e:e3:66:44:41:49:d6:2d:eb:3d:8b:03:2e:c1:
                    69:29:d4:bd:52:f4:a9:c6:00:8b:f0:09:21:8e:52:
                    2c:4f:af:87:52:3a:33:0f:93:53:c7:99:bb:5e:05:
                    37:78:a9:df:55:a9:07:bf:95:05:ee:4d:0d:72:cf:
                    17:f3:61:9c:8e:ea:c2:44:b5:5c:b9:65:60:16:12:
                    6b:6e:62:d0:e8:43:97:23:02:fe:34:3c:c3:ee:d8:
                    2e:22:d4:4a:7c:b2:11:ba:95:d5:5a:2f:10:30:e6:
                    e2:0a:54:f3:b0:5a:e1:79:21:62:aa:d7:55:80:04:
                    9a:6e:6b:6d:eb:aa:7e:0b:f1:f5:13:af:d4:d6:0c:
                    da:00:42:ad:8a:96:b3:e7:0e:3f:e6:0b:b8:cf:6e:
                    6a:6d:cd:54:f7:02:95:41:6a:05:3a:e0:ea:f3:b0:
                    9a:ec:fd:dc:3e:00:80:77:bb:dd:78:69:16:43:56:
                    8f:4b:aa:46:22:a3:b7:db:b0:ef:a3:14:c2:fc:ba:
                    34:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:66:4A:D6:D7:D5:2E:DA:55:CB:90:A0:E4:83:EB:EB:37:B9:AE:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ab617d00-8dc6-3fb4-b3c9-d40393733a89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:48:c7:c5:ae:fd:80:06:73:37:ca:55:b5:c1:d4:22:da:63:
         fa:25:40:c8:b8:2c:70:c4:b3:0c:6b:3c:c0:26:e9:35:86:fe:
         2b:d5:d2:4f:2e:62:42:81:6f:fb:89:47:2e:1a:dd:25:89:93:
         e5:a0:eb:52:38:ca:d8:65:73:67:72:26:17:50:ed:9f:ee:6e:
         38:24:dc:ae:0d:75:9d:3d:0c:c2:8f:3e:14:7d:75:82:63:5b:
         08:44:f5:0d:2a:7c:b1:a1:5e:17:28:7b:df:4b:49:af:b5:c3:
         75:71:20:bb:cd:66:0b:f2:a7:96:ff:0d:c6:6f:29:bb:f6:d0:
         4f:c7:55:10:11:16:13:97:be:13:c4:78:5b:31:18:8c:51:ef:
         4d:cf:ed:bf:06:15:37:2f:d7:df:3a:73:91:c4:6b:48:5e:7e:
         64:8b:8e:01:9b:2f:cf:52:f8:83:e1:b1:57:ae:e8:12:ee:f3:
         8d:c0:2f:cd:61:80:de:dc:ec:00:05:2a:ea:f2:49:ad:99:14:
         03:0c:a7:f4:4f:d7:86:61:b4:4b:5e:ef:b1:0b:76:30:3c:29:
         3d:e7:b8:77:0e:06:11:69:cf:b6:34:8a:26:32:33:8d:cd:10:
         90:3f:2d:f5:14:f9:ec:d1:03:af:c1:88:0f:32:6b:e7:a1:49:
         da:9b:c7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:30:42 2026 by rpki-client