Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e11c8739-0762-3f39-8b52-e8de88090ed5.roa
File:                     e11c8739-0762-3f39-8b52-e8de88090ed5.roa (raw, json)
Hash identifier:          xBzVL19AqF3kXhVi6RaEXgqXjkYTL60QQNKL/Peml54=
Subject key identifier:   05:AE:C0:5C:BC:2D:A8:6A:F7:C2:BF:12:F1:B5:A1:24:95:41:E3:4D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D143DA2E6814F85E03FB2A680
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e11c8739-0762-3f39-8b52-e8de88090ed5.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     41264
IP address blocks:        104.133.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:a2:e6:81:4f:85:e0:3f:b2:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=e8c18ed8-fb05-4d71-ad3f-a33224717f77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ab:43:8c:a9:80:05:37:d0:11:a1:95:54:21:
                    81:a9:b2:d9:07:6a:b8:35:ac:56:47:b0:b0:03:9a:
                    32:5e:b0:63:5a:71:6e:4c:da:fd:8d:76:2b:54:dd:
                    fb:32:fb:7b:d0:0a:19:b1:b7:14:25:90:73:e2:02:
                    2e:4c:2a:9d:39:12:58:da:5e:34:b3:5e:a5:f9:e4:
                    ec:98:a3:ae:5a:90:ab:60:1b:46:78:eb:8e:e1:40:
                    d1:08:36:0b:27:bc:05:91:52:38:d3:2c:25:f0:f7:
                    71:8c:1a:cf:a0:f1:a1:a2:fa:ea:09:c2:9d:f0:49:
                    5a:cc:a1:ee:cf:34:3b:26:07:36:a2:47:e7:14:22:
                    bb:47:a1:9a:46:07:84:09:2c:8a:6c:b8:e5:0c:9c:
                    77:0d:f1:3d:e4:a7:2a:cb:ab:68:08:40:ce:71:43:
                    2a:a7:8c:18:9b:15:f8:24:78:10:61:4f:57:44:66:
                    16:3b:35:e0:cd:6a:f2:af:a2:52:fd:dc:e9:a5:81:
                    11:d5:58:f6:0a:06:7d:fc:0e:da:8c:21:0b:3b:5f:
                    fa:b4:fb:da:30:69:96:7f:7b:28:b1:fb:96:f6:f0:
                    2e:27:d8:da:94:f8:02:99:12:cc:de:ee:9a:77:b3:
                    c6:23:30:75:dd:d0:42:44:80:f3:7a:bc:f6:50:26:
                    8b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AE:C0:5C:BC:2D:A8:6A:F7:C2:BF:12:F1:B5:A1:24:95:41:E3:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e11c8739-0762-3f39-8b52-e8de88090ed5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:03:fd:9f:2f:d7:ab:fa:2a:de:54:d4:1d:fa:d0:80:49:de:
         8a:15:a7:4f:b0:11:2a:43:3b:dd:70:43:24:e9:88:6b:9e:da:
         a4:ba:ae:87:35:0d:2d:29:85:b8:5e:bc:f7:5e:52:b3:ce:3a:
         ba:f1:e0:9c:4f:12:7e:2a:2b:30:c3:fb:86:a9:71:38:21:fa:
         a2:a9:7c:d2:6f:da:59:ce:b2:c2:4f:14:7d:c5:8b:7c:8f:d4:
         b3:b9:b2:88:a8:8d:1d:cf:87:48:06:df:36:2f:a9:98:79:71:
         1f:01:cb:36:4b:60:6f:72:6e:f4:78:fa:b3:83:3d:c0:63:02:
         d6:ac:30:32:6d:70:f6:6d:a3:7a:e2:21:77:8d:4b:8b:ad:a2:
         85:10:82:87:2d:a9:73:37:c8:94:85:36:2a:4c:2d:37:0f:20:
         31:26:6a:14:d5:a5:2f:9d:36:ef:8b:d2:fa:1e:b0:3c:58:10:
         a4:ff:48:ca:90:19:ae:0e:ec:28:35:52:22:8d:45:f9:8f:42:
         89:d8:bb:eb:65:93:23:79:b9:d8:25:46:9b:bf:d5:10:9e:78:
         de:89:5f:f9:44:f8:b0:bb:a7:d3:db:a7:44:55:1c:99:f3:3f:
         74:59:c8:b8:63:d6:f8:a1:91:dc:de:98:38:8b:d0:f5:08:a3:
         59:f0:f5:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPaLmgU+F4D+ypoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk
ZThjMThlZDgtZmIwNS00ZDcxLWFkM2YtYTMzMjI0NzE3Zjc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKtDjKmABTfQEaGVVCGBqbLZB2q4NaxWR7Cw
A5oyXrBjWnFuTNr9jXYrVN37Mvt70AoZsbcUJZBz4gIuTCqdORJY2l40s16l+eTs
mKOuWpCrYBtGeOuO4UDRCDYLJ7wFkVI40ywl8PdxjBrPoPGhovrqCcKd8ElazKHu
zzQ7Jgc2okfnFCK7R6GaRgeECSyKbLjlDJx3DfE95Kcqy6toCEDOcUMqp4wYmxX4
JHgQYU9XRGYWOzXgzWryr6JS/dzppYER1Vj2CgZ9/A7ajCELO1/6tPvaMGmWf3so
sfuW9vAuJ9jalPgCmRLM3u6ad7PGIzB13dBCRIDzerz2UCaLiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAWuwFy8Lahq98K/EvG1oSSVQeNNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZTExYzg3MzktMDc2Mi0z
ZjM5LThiNTItZThkZTg4MDkwZWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADwD/Z8v16v6Kt5U1B360IBJ3ooVp0+wESpDO91wQyTpiGue2qS6roc1
DS0phbhevPdeUrPOOrrx4JxPEn4qKzDD+4apcTgh+qKpfNJv2lnOssJPFH3Fi3yP
1LO5soiojR3Ph0gG3zYvqZh5cR8ByzZLYG9ybvR4+rODPcBjAtasMDJtcPZto3ri
IXeNS4utooUQgoctqXM3yJSFNipMLTcPIDEmahTVpS+dNu+L0voesDxYEKT/SMqQ
Ga4O7Cg1UiKNRfmPQonYu+tlkyN5udglRpu/1RCeeN6JX/lE+LC7p9Pbp0RVHJnz
P3RZyLhj1vihkdzemDiL0PUIo1nw9Yo=
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:58:15 2026 by rpki-client