Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f534c7fa-4778-3907-81bb-3549d4841e74.roa
File:                     f534c7fa-4778-3907-81bb-3549d4841e74.roa (raw, json)
Hash identifier:          c6yhGvw3IOZNjRk2AzLn7dHwkusW3JXY+W/j9M/fUcA=
Subject key identifier:   DD:7D:33:89:15:90:E0:B9:C7:32:3C:0B:3F:F7:D3:3A:DB:6D:EA:29
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D143DA5ED2C81DEC537629800
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f534c7fa-4778-3907-81bb-3549d4841e74.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     41264
IP address blocks:        104.133.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:a5:ed:2c:81:de:c5:37:62:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=804dd785-e219-4427-a1bb-98f7d6f9998e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:49:5f:bc:dc:41:bc:f4:be:70:72:30:65:11:
                    77:2d:6f:a8:29:cd:6e:7a:64:38:b5:34:76:50:2b:
                    9b:20:bb:14:8f:67:a0:3c:bb:92:8c:53:1b:4c:e4:
                    9b:37:8b:fe:d0:16:fb:52:0e:ce:e9:1f:55:3f:cf:
                    df:1b:5d:f4:7a:6b:84:81:cb:79:8f:e1:83:59:00:
                    a0:ae:2e:ce:2f:99:4e:2a:26:95:1c:22:e2:7a:0e:
                    3f:9a:4d:e4:05:7a:d9:64:84:4c:8a:a3:de:7a:a1:
                    15:10:02:10:36:f0:69:35:16:6e:9d:83:21:ce:24:
                    d0:22:e8:ed:c9:cc:92:1c:cc:c0:a9:eb:d5:86:ab:
                    e4:d5:92:e5:b6:41:d2:43:02:e0:04:a3:54:2f:28:
                    e8:82:73:b6:38:0c:12:d0:00:41:8f:28:ae:7a:e7:
                    b2:b1:03:40:0a:ac:fb:21:9a:ab:8d:4c:a0:5c:ca:
                    c0:4c:99:e3:de:7d:2c:21:64:65:d8:68:fb:61:d0:
                    f2:65:30:68:ed:49:d7:c1:38:85:ac:1b:f9:01:c9:
                    60:5c:b0:65:ae:ce:43:77:f6:1e:fd:e2:97:76:a7:
                    7f:b3:f4:e8:4a:52:93:71:4d:cd:9c:1f:be:0b:6d:
                    87:ec:21:f9:e1:8e:d6:2a:f6:91:be:29:7a:59:37:
                    66:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:7D:33:89:15:90:E0:B9:C7:32:3C:0B:3F:F7:D3:3A:DB:6D:EA:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f534c7fa-4778-3907-81bb-3549d4841e74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:f7:a8:4e:43:37:76:fc:f4:19:0c:fc:ad:19:5d:9f:e9:25:
         a9:0c:f9:0b:bc:4c:e7:0a:04:9f:9b:32:f1:6e:3d:14:59:2c:
         08:ea:42:07:13:f8:36:d5:58:62:f8:9a:ab:4f:5a:46:3d:a6:
         6d:79:55:aa:4e:c0:81:f0:57:7f:ea:28:b7:86:29:bb:d4:2b:
         92:35:88:be:9b:b3:b0:4f:43:52:de:c5:5f:d7:3c:e2:a5:0a:
         8e:49:ad:6d:e7:f0:49:a3:55:4e:bf:9b:db:a2:f4:f5:9e:f8:
         42:a1:7f:f4:df:cc:b8:4e:82:f9:2e:9c:e1:d3:22:d2:c2:38:
         1b:c8:d6:fa:8b:72:08:3c:4d:7b:57:a0:0b:08:8e:a5:dd:d6:
         17:a1:5e:88:3c:6b:d1:0b:7a:61:0b:11:c7:b4:e1:4a:84:a8:
         24:5a:b1:79:e9:0c:df:03:9b:45:d3:da:b1:c9:11:cd:f4:ba:
         40:a4:3b:9f:78:4a:9c:36:bc:1e:d8:e0:84:c5:67:16:37:c6:
         5f:c5:f3:70:6b:7c:78:57:67:44:c3:d5:49:91:26:01:4d:87:
         ea:77:51:f0:03:f5:37:01:22:46:12:40:90:81:09:b9:a5:ff:
         13:65:36:74:f3:9e:07:0f:e0:68:d0:bf:4d:21:68:93:d4:91:
         8d:db:17:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:34:17 2026 by rpki-client