Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d8d9e9c9-631d-344c-b8b5-aece603b5762.roa
File:                     d8d9e9c9-631d-344c-b8b5-aece603b5762.roa (raw, json)
Hash identifier:          snpKNKMntBqT0me7Bkir+rVtXTz+Rz+kjzkBkobcDUE=
Subject key identifier:   99:05:AC:6D:D9:D8:02:90:0E:41:25:9B:9B:81:57:24:E8:1E:24:66
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D117281915226BCB706E922F0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d8d9e9c9-631d-344c-b8b5-aece603b5762.roa
Signing time:             Thu 05 Mar 2026 14:00:40 +0000
ROA not before:           Thu 05 Mar 2026 14:00:40 +0000
ROA not after:            Wed 03 Jun 2026 13:00:40 +0000
asID:                     41264
IP address blocks:        104.133.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:72:81:91:52:26:bc:b7:06:e9:22:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  5 14:00:40 2026 GMT
            Not After : Jun  3 13:00:40 2026 GMT
        Subject: CN=72492f29-778d-4a23-830b-6226d225d59d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:90:e7:65:23:07:d0:65:12:09:39:ee:dc:3b:
                    54:cd:2a:32:86:fd:f9:c5:cf:5c:8a:47:f8:d5:37:
                    ca:59:c9:d7:5a:74:ab:ac:07:b2:51:e0:49:29:fd:
                    f0:dd:04:c8:2c:ac:d8:3b:56:9b:c6:f6:fa:5c:46:
                    f0:2b:e7:14:77:96:a3:32:8e:6a:b4:7a:da:3f:bd:
                    2d:82:da:4c:35:5a:f5:25:f7:7a:53:6c:3c:a2:2c:
                    e2:55:ab:4d:83:ae:24:42:ad:6a:5b:ca:6c:87:48:
                    54:ac:2e:32:18:1f:af:67:0f:68:56:3d:5f:14:42:
                    a2:04:6c:da:c4:bc:2b:f5:dc:a8:d1:1c:e7:aa:36:
                    ba:2b:62:c6:7b:2c:a5:57:42:02:1f:db:79:b2:79:
                    ab:bc:71:cd:cf:5b:aa:58:bc:f3:86:27:38:9b:f3:
                    04:26:be:d8:8b:35:eb:1c:23:88:84:37:0b:87:b0:
                    bc:1d:e3:93:a1:ba:01:65:5d:c3:ac:b0:4f:cc:fa:
                    00:c6:5b:72:2b:b8:7b:7b:b4:a0:fe:a5:1f:83:64:
                    0e:6a:7a:fe:46:4b:77:55:30:d6:76:a5:ea:ea:92:
                    30:15:4b:1e:6c:c6:3b:fb:eb:13:df:ed:c0:58:00:
                    7a:78:c1:82:06:87:a5:42:b9:e3:e1:12:89:0b:ea:
                    0c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:05:AC:6D:D9:D8:02:90:0E:41:25:9B:9B:81:57:24:E8:1E:24:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d8d9e9c9-631d-344c-b8b5-aece603b5762.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:c0:34:8c:60:ab:78:39:9d:1c:dd:9b:8e:6e:50:90:d5:ec:
         8d:95:f1:d9:8c:a0:65:1f:75:44:ca:f1:7c:20:87:8b:17:7c:
         1b:37:35:5b:f5:46:41:50:e5:e1:bc:3a:6e:c4:05:1b:01:ad:
         05:f8:b5:6b:4a:92:f9:a1:af:7b:a2:59:be:59:39:83:a0:a1:
         aa:d3:40:1c:78:ec:cd:a3:84:33:9b:da:9d:dc:7b:c6:d0:4b:
         a5:aa:38:70:8a:66:56:10:fc:05:9f:54:34:07:57:26:b9:89:
         9b:7f:32:96:5e:41:34:95:1a:fb:5d:f9:83:48:49:4a:02:96:
         af:22:e5:6c:60:47:ca:8f:73:c7:b3:5c:4e:a1:37:dd:09:df:
         d0:d2:4a:7f:bc:90:ce:43:2d:5e:66:5f:cd:31:8a:3a:29:14:
         20:c1:bc:b3:8a:20:60:63:f3:fe:8f:d8:ad:ce:e8:48:43:40:
         c1:9e:f5:c3:b0:26:fa:18:b8:f6:17:c4:56:b4:f8:ad:5f:19:
         b6:b7:52:8f:8d:2a:86:73:f1:a2:63:58:c9:09:45:79:1f:e6:
         37:5f:29:39:88:fa:11:6a:11:d0:38:34:6d:a8:69:83:3d:59:
         74:f0:c2:da:83:19:d9:3b:6d:04:84:7e:94:07:95:6f:a9:3a:
         b0:f2:60:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:38:47 2026 by rpki-client