Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d2f0743a-f494-39d7-a466-63a02f175a9e.roa
File:                     d2f0743a-f494-39d7-a466-63a02f175a9e.roa (raw, json)
Hash identifier:          1VByC0rqUS/GANCXbOL62Bav8AQ881Vhw7dJkT6lc1I=
Subject key identifier:   8B:CB:0B:85:9D:E7:12:1E:6D:83:F6:2E:BB:B0:77:8B:8E:DC:60:7E
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D0EA7E86772BCE784290F17C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d2f0743a-f494-39d7-a466-63a02f175a9e.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     41264
IP address blocks:        104.132.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:e8:67:72:bc:e7:84:29:0f:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=4f4c6410-12d9-47e4-8a80-ad2f20b34841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4a:da:b2:5d:4c:72:ee:e5:f7:2f:d7:83:4e:
                    5d:3d:df:39:4d:b8:e0:74:1e:27:91:34:6c:dc:9f:
                    03:7d:11:c6:b4:84:fc:90:36:bc:66:e0:a4:7f:9d:
                    d2:05:5f:fe:e5:05:49:fd:b4:fb:94:8b:e6:f1:ea:
                    66:ea:b1:d4:c1:9a:2d:05:e3:05:38:7d:a3:69:a9:
                    0b:cc:b6:37:d3:53:cf:2d:8a:6a:07:11:c0:0a:b6:
                    5f:7b:1c:53:64:8e:41:82:d5:a3:84:ef:30:b7:6c:
                    ab:fe:0e:51:88:c7:7a:58:b0:30:83:cc:6c:e5:b3:
                    c3:88:82:cd:ce:93:9f:3c:05:db:17:72:9b:ba:12:
                    33:16:e1:4f:e7:61:df:f4:5c:8c:d2:59:fd:ec:8e:
                    e7:38:cc:12:42:94:9b:67:ad:ee:b1:b5:7b:a2:54:
                    cb:32:a0:f6:8e:30:91:9b:cc:43:a1:76:40:b5:ae:
                    dc:57:51:ed:2d:d8:9d:84:ad:0f:f9:68:21:36:37:
                    6c:d7:00:c0:2a:c2:88:99:e6:c6:c9:86:4a:50:27:
                    b1:99:8b:1a:97:18:b0:5d:01:d0:08:92:12:68:77:
                    e5:97:3b:f5:cd:08:15:a1:c3:c3:e0:90:55:b8:0c:
                    0a:c6:3e:b7:cf:00:ef:e0:82:f4:b6:96:7f:b6:f2:
                    5e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CB:0B:85:9D:E7:12:1E:6D:83:F6:2E:BB:B0:77:8B:8E:DC:60:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d2f0743a-f494-39d7-a466-63a02f175a9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:78:2b:6e:1b:b2:c4:b1:6e:d7:8f:8d:82:ce:30:ce:ca:bd:
         85:9a:c8:57:11:6e:0f:7a:e7:12:fd:10:8d:31:ad:84:c0:a0:
         12:e0:06:c4:45:a0:24:8b:36:cb:64:14:a4:d1:cc:f4:1c:f8:
         47:42:47:0a:6e:35:0a:74:a0:ac:ba:5f:1e:cf:97:df:c3:2c:
         9c:3a:ff:66:d3:b4:56:e7:59:aa:65:ee:41:4f:f2:7a:91:20:
         97:9d:c2:94:17:cf:41:78:91:9f:04:45:bb:e5:48:e1:2a:b0:
         31:56:10:d7:71:7f:32:d3:da:e8:f2:8b:4a:e2:f8:52:d3:95:
         37:d3:2d:c0:6b:f3:5d:0d:c1:ea:98:38:40:5e:d3:b0:45:d2:
         98:79:5c:ba:6a:c8:14:65:45:76:4e:57:b5:75:91:d8:0f:6f:
         cc:da:c5:39:5b:c9:22:e3:57:73:bf:a9:fa:7a:90:d5:6e:22:
         6c:8b:ca:ab:b9:83:f0:bb:ee:99:88:f0:1f:e2:31:96:1a:c3:
         87:b3:26:b6:e5:2b:9b:7b:e3:05:4b:ab:2e:97:1c:4c:03:b5:
         91:d1:83:16:72:00:47:dd:58:47:0f:bf:ec:7f:7b:2b:de:b5:
         8b:9d:35:ab:af:4f:b7:a5:55:1a:4e:65:df:67:8a:3c:f9:c0:
         7d:80:cd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:54:58 2026 by rpki-client