Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ff3dbfc2-21d7-391e-85a3-49fe7943fbfc.roa
File:                     ff3dbfc2-21d7-391e-85a3-49fe7943fbfc.roa (raw, json)
Hash identifier:          xGyiDkt1N99l7r/gpN4zcPLtJhaxnGUklu4AjGCCDA4=
Subject key identifier:   69:6D:B2:D7:C7:BE:2F:36:7E:8A:51:73:F6:74:E2:B6:C8:82:05:B6
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584D143D88EDA649520DC61F8500
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ff3dbfc2-21d7-391e-85a3-49fe7943fbfc.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     41264
IP address blocks:        104.133.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:88:ed:a6:49:52:0d:c6:1f:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=e0019c28-127c-45e1-9d2f-d29892e4da1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d6:f8:50:a8:6a:12:a4:bf:b4:b4:7e:e8:a5:
                    4c:bd:a5:bb:f6:29:80:e8:84:f7:ed:22:83:f5:09:
                    b9:50:95:4a:13:23:28:43:be:cb:a9:e8:98:0d:94:
                    ff:54:25:71:30:e7:66:98:60:5c:b9:2c:6f:a7:8c:
                    77:29:11:83:21:72:d9:35:48:8b:3a:77:b5:ff:40:
                    8a:36:79:70:8b:3b:75:4c:cb:1d:2e:fd:d4:0d:b8:
                    dd:d6:4a:e4:55:55:f4:e9:53:24:b2:3a:01:cc:7d:
                    d2:b0:99:b1:f9:39:ee:37:79:92:98:51:fe:b2:77:
                    13:88:f3:b3:c7:4d:a5:10:bb:50:5b:f9:7f:fb:9d:
                    1e:62:e2:4a:37:e3:68:d5:9c:4e:05:e7:f2:b8:b0:
                    c1:65:1c:9f:82:b1:c0:32:ea:18:19:cf:6c:a3:b6:
                    8b:70:da:ed:cb:1a:b6:7e:a1:3f:d6:b1:26:30:4f:
                    91:81:ee:46:01:2d:66:48:d9:52:56:13:a6:ce:e9:
                    8e:6a:95:45:89:a4:05:c8:b3:f9:ed:7a:c4:f1:76:
                    18:fa:ea:cc:b2:8a:38:25:c6:b8:a0:29:71:ba:71:
                    34:5b:9e:de:f2:82:de:5b:45:88:74:b1:c1:69:84:
                    74:7f:df:dc:b0:a9:61:9c:96:2c:11:22:36:01:3e:
                    d6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:6D:B2:D7:C7:BE:2F:36:7E:8A:51:73:F6:74:E2:B6:C8:82:05:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ff3dbfc2-21d7-391e-85a3-49fe7943fbfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:c8:50:a1:e5:4b:66:cd:5c:7d:fc:53:21:d6:be:7c:a4:4e:
         fa:be:f8:83:98:34:f8:a2:11:3a:5b:d2:5a:ab:ea:fe:1d:24:
         99:c6:a6:60:e0:66:11:f9:35:a0:ef:31:f1:b8:8b:79:77:74:
         83:17:34:d1:8a:4f:15:f9:24:ef:1d:16:04:80:02:a4:67:4f:
         c2:e0:78:76:f7:62:8a:45:6c:9e:0b:c7:d0:b6:bd:5d:ea:91:
         74:a7:e9:57:83:07:93:1c:15:2e:d2:f1:98:ce:b6:6c:cc:51:
         19:23:bf:1b:61:e4:9b:fe:21:4b:ee:2a:08:04:a9:5f:16:c8:
         55:25:94:cf:2a:58:c1:71:88:66:4e:74:4c:52:b9:b5:93:11:
         c5:fa:d6:7d:69:55:34:0c:8b:0a:31:74:ad:20:3c:f9:7a:f8:
         3b:07:0b:10:a4:36:e5:08:20:4d:5f:16:a7:fd:1a:be:d0:09:
         33:31:d0:38:3a:4e:82:bd:35:d2:73:32:ee:3d:d1:4f:62:57:
         0e:97:a9:0e:7a:65:e0:bd:db:fe:e2:aa:ad:1a:2c:09:0b:60:
         30:3f:55:e5:91:b7:00:08:c6:4c:9c:51:2c:65:5c:95:5a:5a:
         40:72:5a:c1:75:11:ba:71:22:bb:91:87:e3:f6:d0:a0:34:e7:
         25:f3:f4:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPYjtpklSDcYfhQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk
ZTAwMTljMjgtMTI3Yy00NWUxLTlkMmYtZDI5ODkyZTRkYTFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNb4UKhqEqS/tLR+6KVMvaW79imA6IT37SKD
9Qm5UJVKEyMoQ77LqeiYDZT/VCVxMOdmmGBcuSxvp4x3KRGDIXLZNUiLOne1/0CK
Nnlwizt1TMsdLv3UDbjd1krkVVX06VMksjoBzH3SsJmx+TnuN3mSmFH+sncTiPOz
x02lELtQW/l/+50eYuJKN+No1ZxOBefyuLDBZRyfgrHAMuoYGc9so7aLcNrtyxq2
fqE/1rEmME+Rge5GAS1mSNlSVhOmzumOapVFiaQFyLP57XrE8XYY+urMsoo4Jca4
oClxunE0W57e8oLeW0WIdLHBaYR0f9/csKlhnJYsESI2AT7WMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGltstfHvi82fopRc/Z04rbIggW2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZmYzZGJmYzItMjFkNy0z
OTFlLTg1YTMtNDlmZTc5NDNmYmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIViMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK7IUKHlS2bNXH38UyHWvnykTvq++IOYNPiiETpb0lqr6v4dJJnGpmDg
ZhH5NaDvMfG4i3l3dIMXNNGKTxX5JO8dFgSAAqRnT8LgeHb3YopFbJ4Lx9C2vV3q
kXSn6VeDB5McFS7S8ZjOtmzMURkjvxth5Jv+IUvuKggEqV8WyFUllM8qWMFxiGZO
dExSubWTEcX61n1pVTQMiwoxdK0gPPl6+DsHCxCkNuUIIE1fFqf9Gr7QCTMx0Dg6
ToK9NdJzMu490U9iVw6XqQ56ZeC92/7iqq0aLAkLYDA/VeWRtwAIxkycUSxlXJVa
WkByWsF1EbpxIruRh+P20KA05yXz9Io=
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:02 2026 by rpki-client