Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f574a129-c2d5-3b83-a3f2-f1cb8b01c6ab.roa
File:                     f574a129-c2d5-3b83-a3f2-f1cb8b01c6ab.roa (raw, json)
Hash identifier:          +DEMN7cTshQxYWWBUPemMvEWx6vQU91Es7fSu2SWyk0=
Subject key identifier:   12:09:AB:D8:07:D3:D9:C7:AF:AE:F1:F3:EA:7E:24:FF:13:BB:86:A3
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D117285CC75B064FE51321500
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f574a129-c2d5-3b83-a3f2-f1cb8b01c6ab.roa
Signing time:             Thu 05 Mar 2026 14:00:40 +0000
ROA not before:           Thu 05 Mar 2026 14:00:40 +0000
ROA not after:            Wed 03 Jun 2026 13:00:40 +0000
asID:                     41264
IP address blocks:        104.132.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:72:85:cc:75:b0:64:fe:51:32:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  5 14:00:40 2026 GMT
            Not After : Jun  3 13:00:40 2026 GMT
        Subject: CN=3ce88ce3-66f8-4bef-a8ad-0c20f9ba1340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:66:06:92:05:8e:24:78:6b:ad:9e:99:89:ca:
                    d7:3c:71:dd:09:58:ce:4f:00:13:85:d0:6c:f2:52:
                    60:de:5c:44:11:f7:2f:0b:d8:9b:13:4a:d6:ab:31:
                    03:50:69:38:2f:e7:3a:29:1f:68:7a:34:33:7e:85:
                    cd:5a:91:78:ff:a4:cd:20:ca:c4:be:f2:e7:5b:a3:
                    f8:be:0f:5c:52:7f:12:82:9b:f3:78:b0:0f:54:06:
                    d6:0d:23:58:41:26:ee:29:d4:47:76:89:84:d5:c0:
                    b1:8e:1e:74:7d:b2:07:b7:84:0c:c5:dc:09:ba:26:
                    34:70:28:af:52:c2:5a:da:30:c8:2a:6c:fa:4d:50:
                    00:50:ab:e3:36:a3:59:1a:25:a0:69:d8:b6:67:40:
                    12:b5:a0:b5:6a:e3:73:84:14:1c:1d:af:ef:f7:a1:
                    26:39:c2:84:20:be:52:97:99:10:7e:09:a7:62:69:
                    24:4d:2e:e4:32:99:b0:51:65:1e:86:63:64:60:6e:
                    5e:ce:8d:a8:aa:f7:6c:11:10:8f:9e:f3:31:e6:c3:
                    a0:8f:9e:23:c7:b9:32:ad:e0:2e:3a:cc:aa:2b:d7:
                    61:a9:41:58:b9:f0:c4:1f:df:9b:f0:85:17:3d:cc:
                    65:4d:11:39:6c:e7:0f:16:ab:48:28:17:fd:04:e7:
                    07:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:09:AB:D8:07:D3:D9:C7:AF:AE:F1:F3:EA:7E:24:FF:13:BB:86:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f574a129-c2d5-3b83-a3f2-f1cb8b01c6ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:03:11:86:c2:51:db:11:5a:e5:3e:48:18:4b:95:50:79:b8:
         07:d1:6f:fa:95:85:6c:df:fe:0b:1d:83:a6:d5:a3:05:09:ae:
         a7:7b:dd:fb:56:51:e1:6d:1f:11:04:42:ff:f1:39:86:e8:91:
         f6:2c:de:9f:b2:2f:ac:11:78:fb:49:07:a7:c9:dd:2b:96:86:
         7e:ee:5c:82:73:7f:ce:6e:e0:94:b4:b3:a9:21:5d:d0:fc:a3:
         de:2e:6a:b3:09:fe:4e:7f:bf:f2:1d:2e:f4:78:80:be:b3:4c:
         65:7a:55:82:01:50:ce:8e:4d:78:a2:b7:cd:12:59:15:2b:0c:
         b0:7c:bb:b4:b7:f4:bb:f6:f3:14:7a:4f:1a:eb:18:5e:84:a6:
         7b:7a:29:ee:b1:78:99:cb:ed:2b:99:15:61:85:f1:0e:b6:b2:
         61:47:0b:70:37:cf:c1:94:e3:66:8c:b2:d6:5c:91:f3:ac:54:
         af:ee:f8:1c:aa:45:55:22:fe:fb:49:d4:b5:6a:d8:e8:73:48:
         b4:a0:a5:ee:ec:74:5c:40:6b:1e:fb:e0:a2:8b:0f:df:43:08:
         8c:04:85:c9:79:3c:4e:5b:49:d7:b0:80:6f:7c:a8:ff:6a:35:
         6d:32:a9:50:6f:3f:6b:89:57:ec:eb:7d:d3:81:12:ef:ae:4e:
         68:c5:d3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:27:34 2026 by rpki-client