Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b74ce6f7-4ed2-38df-8cdb-6e55ac02abb4.roa
File:                     b74ce6f7-4ed2-38df-8cdb-6e55ac02abb4.roa (raw, json)
Hash identifier:          YYGI2xyYzo2fWi9NygwGTL7c3kXp2lV7qgmstP7Jwns=
Subject key identifier:   A3:99:37:51:F0:49:24:26:86:E7:81:16:5A:44:FC:96:B9:3F:CB:EA
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D1172802DBBC52117B35C0980
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b74ce6f7-4ed2-38df-8cdb-6e55ac02abb4.roa
Signing time:             Thu 05 Mar 2026 14:00:40 +0000
ROA not before:           Thu 05 Mar 2026 14:00:40 +0000
ROA not after:            Wed 03 Jun 2026 13:00:40 +0000
asID:                     41264
IP address blocks:        104.133.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:72:80:2d:bb:c5:21:17:b3:5c:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  5 14:00:40 2026 GMT
            Not After : Jun  3 13:00:40 2026 GMT
        Subject: CN=297d1571-1120-4418-9191-7a6771e9cf3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1c:fa:30:8b:05:64:fd:56:45:68:5e:03:10:
                    42:2b:ee:01:7c:b6:69:a5:05:c0:80:32:db:f5:11:
                    f0:4a:31:d7:6e:7a:6b:f4:3f:6b:be:f0:e5:b4:d3:
                    ef:aa:95:cb:0a:9b:07:2d:fe:4b:bb:37:d8:09:d9:
                    a7:a1:8b:7b:27:cb:11:fc:8f:24:e7:9a:64:fb:1e:
                    b9:a1:e9:10:39:b4:bb:3a:cd:6e:da:98:8e:88:40:
                    1d:1f:2c:a2:66:a1:44:e6:73:ea:9a:40:98:75:9d:
                    22:ea:46:30:5a:d4:22:17:92:70:d2:34:40:b0:82:
                    09:a6:b6:54:d8:72:3b:5e:0e:70:6d:3c:9b:23:db:
                    d9:86:d1:7c:a1:07:ec:2e:03:1e:8d:e7:d0:fe:91:
                    82:11:7d:69:8e:fd:29:3d:76:d2:ef:da:b2:24:81:
                    d4:20:4b:d1:2f:13:e9:33:75:80:7a:71:4c:cf:ea:
                    ab:7a:68:01:1d:93:f8:2c:8d:85:10:3d:f9:9e:69:
                    65:ba:ef:bb:61:db:5a:3e:b9:22:8f:58:86:62:bd:
                    6a:3e:08:79:6d:61:5d:03:8a:0c:42:b3:2a:ca:13:
                    6b:51:6b:71:a0:e7:11:fd:92:08:19:b4:71:3b:38:
                    8c:db:3c:a3:69:57:ea:62:80:ed:0d:61:57:17:c0:
                    b6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:99:37:51:F0:49:24:26:86:E7:81:16:5A:44:FC:96:B9:3F:CB:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b74ce6f7-4ed2-38df-8cdb-6e55ac02abb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:93:10:c2:f4:0a:84:0b:29:a0:95:cf:63:ca:14:c0:3b:de:
         3b:ff:69:9c:91:3c:19:53:bd:d6:5a:08:53:d4:4b:a6:23:4b:
         8c:80:63:90:e9:58:69:c1:bf:0f:f1:ed:fb:a5:1e:f6:92:6c:
         dd:ec:eb:07:13:fb:cc:f9:5c:5c:22:3f:10:33:7c:52:c3:e3:
         bf:ce:7d:d6:aa:48:00:8a:2d:30:1f:82:05:94:06:d9:3c:07:
         dd:65:73:f2:04:de:74:63:f4:1c:3f:ea:99:27:f3:c2:c7:93:
         15:d3:c2:3c:f9:8d:73:6f:1f:64:92:d9:58:eb:6d:d1:92:4a:
         1f:76:b5:d8:3a:98:26:fa:d6:18:a7:f4:25:1d:80:69:39:07:
         b8:b9:8a:af:f7:ad:c1:8b:60:d7:2e:8a:31:9b:a8:0b:b8:3d:
         33:1f:c5:9b:ff:a2:58:e6:a1:2b:6d:c4:9b:b9:57:34:8a:39:
         d7:15:4e:64:b4:f2:91:bc:69:11:00:df:ee:92:64:90:b2:60:
         1c:80:47:88:d1:46:9e:f9:64:60:ee:c9:b6:5d:e1:fd:94:12:
         a2:d3:63:6f:8f:28:6b:ed:a4:16:b1:d6:36:be:2f:6b:52:47:
         84:63:25:97:77:c4:34:4c:61:43:47:8f:84:13:cf:58:89:6c:
         0c:7a:c5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:37:44 2026 by rpki-client