Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/adc238fe-2275-3c01-99ce-701d864813d1.roa
File:                     adc238fe-2275-3c01-99ce-701d864813d1.roa (raw, json)
Hash identifier:          vqHaDcvq1WUEqapqKFQB2Tj4/9xRLL5fkkRTYx0j4xk=
Subject key identifier:   F4:B7:32:9C:22:2F:A0:30:B0:9B:4E:03:08:0E:EE:EA:57:32:CC:47
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D11728F5586FC740E58873100
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/adc238fe-2275-3c01-99ce-701d864813d1.roa
Signing time:             Thu 05 Mar 2026 14:00:40 +0000
ROA not before:           Thu 05 Mar 2026 14:00:40 +0000
ROA not after:            Wed 03 Jun 2026 13:00:40 +0000
asID:                     41264
IP address blocks:        104.132.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:72:8f:55:86:fc:74:0e:58:87:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  5 14:00:40 2026 GMT
            Not After : Jun  3 13:00:40 2026 GMT
        Subject: CN=81592020-1677-4194-8f9e-3d58d06b3ce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b1:d9:13:9d:32:99:8b:c1:cf:98:46:bf:69:
                    8d:b9:79:3e:2f:fd:af:a7:70:ed:c2:16:52:b9:7d:
                    a8:56:0d:0a:79:ee:c6:72:f3:d9:aa:de:8e:a9:7e:
                    7e:30:36:69:d1:d3:b8:9e:96:a2:a7:15:b8:39:f4:
                    3b:f1:0b:d1:9b:d1:96:c1:2e:da:7e:30:a9:d7:4a:
                    e5:37:2d:76:ca:47:c8:23:23:aa:54:f5:60:81:85:
                    d9:ae:9d:ad:bd:c5:28:af:3c:08:62:b4:5e:3e:15:
                    68:1c:98:ca:92:e2:8f:da:f4:73:2c:ab:05:76:61:
                    08:0b:e7:4e:c2:1f:6f:61:61:9b:ed:35:12:fd:a4:
                    1f:e6:44:ae:1e:55:11:15:62:d8:bb:72:b7:25:aa:
                    14:d2:f1:ff:4d:77:63:e6:26:29:c0:da:a0:06:4a:
                    6c:9b:1a:85:5f:ed:db:70:f4:9c:82:a4:aa:0e:a9:
                    69:40:a6:19:9a:5c:53:65:21:7f:7f:53:ca:3c:17:
                    65:dd:61:ca:df:ee:54:f8:0c:af:0c:20:45:5d:14:
                    89:a8:c4:03:9f:f3:5f:0d:d2:40:f9:08:74:3f:64:
                    09:6e:e1:82:b1:e6:a4:7d:08:63:24:d8:6d:a3:c8:
                    30:26:27:ca:e8:06:6f:44:6c:ff:09:6c:b1:45:06:
                    f5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B7:32:9C:22:2F:A0:30:B0:9B:4E:03:08:0E:EE:EA:57:32:CC:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/adc238fe-2275-3c01-99ce-701d864813d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:82:56:55:41:5a:8a:e8:0f:a2:e8:b5:9b:ea:01:b6:e9:8d:
         cc:eb:79:f5:b5:12:e2:23:09:42:95:bf:fc:ab:a4:4a:46:b8:
         bc:27:73:c0:c4:10:8b:e0:0d:99:75:5e:1f:d2:86:0f:ac:12:
         90:b6:0e:6f:a1:0b:9a:15:94:52:6c:35:f3:36:37:3f:61:e8:
         9c:83:e4:c2:cb:c5:ae:6e:3d:ca:15:8a:ba:35:35:b6:36:b4:
         1b:49:81:00:95:97:cf:ce:dc:20:7a:3c:ef:5a:2a:80:2c:4d:
         87:f6:5f:9c:c5:92:d1:32:bf:30:0f:93:d1:12:ed:a5:63:19:
         47:0a:1d:ee:54:63:c3:62:0d:15:a3:e3:24:db:20:cb:7e:72:
         4a:e5:72:2d:68:ab:56:d8:4f:4d:93:ff:41:0c:0f:e9:99:f2:
         c4:52:f3:45:bc:67:d8:1b:a7:bf:f4:46:af:fa:a8:00:49:ba:
         29:15:e2:31:be:5d:f1:08:62:2c:07:0b:06:22:b9:f4:01:96:
         b1:fb:52:6d:2a:7e:42:6e:fb:64:d2:9f:86:42:43:c4:17:b5:
         c2:bb:3b:17:d6:6c:71:4d:91:ff:e4:70:0c:f6:7e:68:e4:a2:
         0f:55:98:65:f6:46:3a:62:43:58:02:2f:d1:b7:7c:33:a0:52:
         1f:94:2f:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Rco9Vhvx0DliHMQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk
ODE1OTIwMjAtMTY3Ny00MTk0LThmOWUtM2Q1OGQwNmIzY2U3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibHZE50ymYvBz5hGv2mNuXk+L/2vp3DtwhZS
uX2oVg0Kee7GcvPZqt6OqX5+MDZp0dO4npaipxW4OfQ78QvRm9GWwS7afjCp10rl
Ny12ykfIIyOqVPVggYXZrp2tvcUorzwIYrRePhVoHJjKkuKP2vRzLKsFdmEIC+dO
wh9vYWGb7TUS/aQf5kSuHlURFWLYu3K3JaoU0vH/TXdj5iYpwNqgBkpsmxqFX+3b
cPScgqSqDqlpQKYZmlxTZSF/f1PKPBdl3WHK3+5U+AyvDCBFXRSJqMQDn/NfDdJA
+Qh0P2QJbuGCseakfQhjJNhto8gwJifK6AZvRGz/CWyxRQb1XQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPS3MpwiL6AwsJtOAwgO7upXMsxHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYWRjMjM4ZmUtMjI3NS0z
YzAxLTk5Y2UtNzAxZDg2NDgxM2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIT+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADiCVlVBWoroD6LotZvqAbbpjczrefW1EuIjCUKVv/yrpEpGuLwnc8DE
EIvgDZl1Xh/Shg+sEpC2Dm+hC5oVlFJsNfM2Nz9h6JyD5MLLxa5uPcoViro1NbY2
tBtJgQCVl8/O3CB6PO9aKoAsTYf2X5zFktEyvzAPk9ES7aVjGUcKHe5UY8NiDRWj
4yTbIMt+ckrlci1oq1bYT02T/0EMD+mZ8sRS80W8Z9gbp7/0Rq/6qABJuikV4jG+
XfEIYiwHCwYiufQBlrH7Um0qfkJu+2TSn4ZCQ8QXtcK7OxfWbHFNkf/kcAz2fmjk
og9VmGX2RjpiQ1gCL9G3fDOgUh+UL6M=
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:44:50 2026 by rpki-client