Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e9cdedfa-37cd-3c62-a9d6-a59dea6d29a5.roa
File:                     e9cdedfa-37cd-3c62-a9d6-a59dea6d29a5.roa (raw, json)
Hash identifier:          XM/GBffwV1w8IIviHLxDB6z56VWIeaSRh0HScXdfISY=
Subject key identifier:   D2:E5:64:64:76:E4:E2:13:8B:90:CF:71:DB:40:98:63:6A:D3:13:67
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D11727F0305AAFC447DB8D640
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e9cdedfa-37cd-3c62-a9d6-a59dea6d29a5.roa
Signing time:             Thu 05 Mar 2026 14:00:40 +0000
ROA not before:           Thu 05 Mar 2026 14:00:40 +0000
ROA not after:            Wed 03 Jun 2026 13:00:40 +0000
asID:                     41264
IP address blocks:        104.133.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:72:7f:03:05:aa:fc:44:7d:b8:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  5 14:00:40 2026 GMT
            Not After : Jun  3 13:00:40 2026 GMT
        Subject: CN=634b8855-26ff-44ee-a7c7-ce7be6fa3227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9d:4e:0b:27:69:07:a8:18:44:71:4f:ff:e9:
                    96:eb:eb:2b:7b:69:d4:53:06:2c:69:29:cc:b7:b4:
                    be:d8:46:51:19:04:61:66:e6:55:e4:5c:c5:d3:fb:
                    02:d0:2f:cf:fd:db:f8:5b:4b:55:c4:75:af:e0:51:
                    61:1a:a1:8a:43:04:d9:f7:5f:60:9f:2a:23:a9:bc:
                    2e:ce:22:29:8b:b2:b3:c7:1f:71:e0:8d:5b:11:ac:
                    5d:39:ad:f8:de:f6:d4:5a:da:b0:76:d0:3b:91:fa:
                    b1:be:d1:31:7c:79:79:8a:f1:c0:8a:f5:06:9c:5e:
                    da:1f:ef:47:72:d5:98:10:95:00:62:73:ef:c4:18:
                    4a:56:45:7d:66:9a:f7:96:96:22:74:93:37:ff:ce:
                    83:3b:68:50:bf:e8:ae:c9:a0:c7:fb:ce:8f:6b:ce:
                    53:01:49:6c:20:af:bd:e3:58:64:a9:7f:8c:4e:e5:
                    88:0d:7c:28:dc:fb:c6:95:b9:a7:2d:d8:7c:41:6b:
                    82:76:e9:7f:fc:20:37:8e:ae:33:1e:41:99:86:fa:
                    31:e4:a4:d6:4b:42:d5:eb:fb:8c:e3:c7:f4:56:49:
                    fe:05:d6:ff:b2:bd:cd:f1:48:9c:f7:3b:1d:73:a4:
                    f9:c7:bb:93:1d:0f:9b:32:4f:80:e0:5a:a4:be:5f:
                    ba:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E5:64:64:76:E4:E2:13:8B:90:CF:71:DB:40:98:63:6A:D3:13:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e9cdedfa-37cd-3c62-a9d6-a59dea6d29a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:70:8b:9b:63:ed:41:3d:e0:51:aa:87:bb:8b:4c:c9:28:d8:
         9a:5e:a8:e5:b8:e0:7b:b0:dc:09:ca:44:e8:24:93:a4:ac:2e:
         58:1f:d2:7b:fd:bd:1c:52:dd:88:af:02:48:89:50:5d:42:ff:
         cb:2c:42:34:4c:26:ef:3d:e9:30:73:69:51:a5:ef:d3:ab:c2:
         5c:70:58:f8:40:c2:55:68:ec:eb:ce:74:76:c3:be:71:9c:f9:
         e6:c4:dc:7e:05:93:11:6e:c1:cb:b6:f8:27:15:5f:d1:c0:2c:
         81:fe:6d:d4:69:e0:32:0a:c9:73:ef:d7:43:98:23:e9:1f:00:
         63:19:9d:e3:6e:5d:7a:a5:2c:2a:16:f2:1e:e5:7b:ad:6d:43:
         aa:c8:de:66:0b:a6:d1:0f:be:c3:7d:1a:5b:28:24:49:86:b1:
         26:9e:4d:56:72:86:f2:5e:fc:3e:ad:09:8d:c7:e4:ea:57:ab:
         2f:ab:94:14:e2:4b:59:0c:ea:5d:6a:54:69:1c:de:3c:c6:fb:
         f4:f6:a4:90:5f:77:40:61:93:d6:f6:02:31:85:a5:1a:95:8f:
         4e:45:32:23:2c:74:65:a1:d2:e1:77:e0:76:be:01:a0:bf:56:
         89:61:c4:94:e0:33:73:88:cd:86:36:db:eb:91:53:5d:46:03:
         7d:18:de:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:56:44 2026 by rpki-client