Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b43eb00c-f7f9-3b0b-bf5f-9bad97de05f5.roa
File:                     b43eb00c-f7f9-3b0b-bf5f-9bad97de05f5.roa (raw, json)
Hash identifier:          +ZxAJago5/4MYFPKVQuPMHf90flxj1flGsC1przaKmI=
Subject key identifier:   8E:90:BD:AB:D3:58:04:54:96:D1:8C:6E:AF:26:42:F4:87:5E:61:BE
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D143DA327065EC436ADBCFA00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b43eb00c-f7f9-3b0b-bf5f-9bad97de05f5.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     41264
IP address blocks:        104.133.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:a3:27:06:5e:c4:36:ad:bc:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=c880c29a-f3ec-4107-b059-6ead5707d00a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7e:17:21:af:11:f2:f1:70:95:7d:e5:db:de:
                    04:b7:ae:3d:a3:1c:f0:db:85:7e:c8:ac:82:b4:b4:
                    69:ac:e0:b6:69:4e:c4:cb:0e:cf:60:fa:01:36:3b:
                    58:37:c2:24:db:44:17:4d:1d:97:a9:74:54:cf:e4:
                    e9:57:5e:5a:13:ec:c1:d4:c6:b0:69:46:2b:d8:8a:
                    cd:73:50:60:a9:32:50:ec:ba:e9:d9:61:b3:b3:ee:
                    36:ff:9d:52:6d:a0:ee:8f:80:1e:86:67:6e:5d:d0:
                    8c:95:66:4e:e5:8a:3d:ba:7e:cf:d0:cd:9e:6d:0d:
                    93:2d:6a:79:42:48:09:93:6b:5d:e0:ec:1a:ac:b3:
                    23:11:8f:bb:ca:ef:d3:3e:48:f3:96:f7:a5:9d:68:
                    81:ef:cf:27:22:a7:3e:3d:1d:7d:1d:6a:bc:e3:d0:
                    85:e5:d0:0d:7a:2c:0d:f3:5e:d5:c7:9f:79:4a:2d:
                    92:fe:53:2e:3c:11:c2:25:ed:50:4d:f1:86:b9:d0:
                    51:2d:a7:c7:1f:24:2e:82:75:50:4a:10:b3:28:e8:
                    5e:96:e2:02:57:27:4f:ff:96:aa:89:16:b0:72:6e:
                    99:a7:ee:87:7d:ce:f9:56:0b:9a:68:22:50:17:f5:
                    d3:90:27:9b:03:3b:fd:af:e7:67:7c:0a:aa:6d:6c:
                    b6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:90:BD:AB:D3:58:04:54:96:D1:8C:6E:AF:26:42:F4:87:5E:61:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b43eb00c-f7f9-3b0b-bf5f-9bad97de05f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:fa:7b:5c:bf:cd:43:37:ad:35:a9:d3:1c:07:8e:2f:29:b1:
         34:c2:75:9c:cd:12:38:6e:be:6a:e4:d6:e3:b3:59:71:0f:28:
         00:b8:a4:94:97:cc:6c:1e:1e:85:e6:b2:48:d7:e1:99:b9:18:
         6b:c6:10:ed:a0:49:c6:f4:cf:b3:1b:ff:c7:e4:87:1a:95:e9:
         db:ca:e8:ab:bc:c4:ca:88:d4:be:6c:09:ac:84:47:c4:73:e2:
         29:0f:98:e4:bf:39:6d:7c:98:7d:7e:f8:44:74:e5:c8:60:29:
         98:d0:63:c8:c4:eb:41:9c:33:74:40:a7:35:33:b5:d8:d1:ed:
         9d:f9:09:80:3f:f9:6f:7e:9d:38:d7:ba:52:b3:48:d3:3e:e8:
         4f:b9:cd:9a:69:01:11:ad:35:9c:6d:f3:e4:db:de:1f:3f:c0:
         d4:fa:c5:c2:12:81:71:bf:6e:66:24:f8:8d:66:3c:9a:87:c3:
         10:fc:9c:56:70:63:b6:2e:b3:1f:14:18:a8:1a:98:b7:48:0e:
         7a:8f:51:ef:a2:21:85:9b:1d:df:1d:de:c8:a1:a8:ac:b2:c1:
         c4:f3:cf:88:13:ed:a3:92:6e:d5:d1:08:ee:0c:cd:92:ef:2a:
         6b:3b:5b:0f:10:67:9d:0f:34:91:92:d8:3d:6c:22:d1:b9:18:
         f1:88:59:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:02:29 2026 by rpki-client