Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7041d7f1-06a1-3587-ba2c-e05ad92eef26.roa
File:                     7041d7f1-06a1-3587-ba2c-e05ad92eef26.roa (raw, json)
Hash identifier:          qvCLq/HqRDIgMuUbBI6kedpRMK0HrqtBKCBmBuMo3tA=
Subject key identifier:   03:A2:3A:A5:50:AF:23:16:1D:B9:66:08:D1:8D:B5:3E:B6:B7:A9:CF
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584EA794A3D550DCA1CED7815FE0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7041d7f1-06a1-3587-ba2c-e05ad92eef26.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     41264
IP address blocks:        104.132.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:a3:d5:50:dc:a1:ce:d7:81:5f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4cb61f36-2153-4865-a85f-384af837bdf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:17:c1:8e:6d:81:48:6e:85:cb:38:ed:97:5f:
                    8e:42:21:26:03:58:cd:7e:96:10:bb:8b:52:05:fa:
                    52:3e:80:ef:35:aa:8c:2a:ea:5c:70:2e:b2:eb:aa:
                    d5:dd:bc:12:af:28:81:74:4d:77:8d:02:b4:ec:78:
                    21:16:ce:43:4f:3e:c3:15:4a:36:32:51:a7:e1:df:
                    48:55:06:ea:ba:15:08:6b:e3:1d:45:1b:49:07:3a:
                    df:82:be:63:7f:d6:41:99:83:28:0d:68:75:b7:69:
                    5c:c2:8e:d7:20:9d:a7:cc:4f:40:20:77:05:dc:66:
                    11:3f:8b:d1:d6:d8:ee:aa:2b:aa:5a:91:ff:f2:b9:
                    f7:39:e1:d6:98:95:fb:ea:c4:30:1a:2c:e6:25:9d:
                    7a:94:00:5a:a6:25:ce:c8:73:37:52:ae:1c:f7:27:
                    c6:fa:04:52:4b:3b:e8:cc:94:ab:a0:72:da:1f:53:
                    6e:dd:b4:14:04:72:37:b4:de:51:8d:4e:1e:99:6b:
                    18:ad:e2:7f:91:56:e3:cb:c0:c3:c4:bf:dc:f9:87:
                    8a:ef:4a:ff:71:6a:f8:eb:ec:a4:d3:99:36:ba:1b:
                    eb:e7:47:65:eb:a4:51:6c:88:53:2e:d0:d8:86:95:
                    e8:4b:6c:08:31:e0:6d:7f:fa:71:4a:cf:87:79:17:
                    0f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A2:3A:A5:50:AF:23:16:1D:B9:66:08:D1:8D:B5:3E:B6:B7:A9:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7041d7f1-06a1-3587-ba2c-e05ad92eef26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:ab:56:86:d8:e7:6e:96:cc:df:65:75:35:e5:fe:20:7f:80:
         e0:6d:ad:9e:15:01:84:b7:75:54:55:12:59:76:21:7a:b6:1b:
         ef:fe:f2:0c:5d:57:78:b5:1f:b0:7b:d0:1c:8a:e2:e6:a1:7d:
         c8:66:10:e1:f4:6c:1a:5f:1e:39:bc:ff:73:fe:74:12:98:06:
         6c:78:9c:08:12:a6:8a:f8:49:7a:31:10:82:bf:ac:b6:ae:4f:
         5a:65:07:93:55:0f:05:7b:6b:31:da:10:c8:9f:ea:e0:66:29:
         60:b0:44:20:99:7a:fd:af:c0:7a:97:66:b2:f4:c2:16:37:b0:
         d8:03:76:4e:99:2d:90:26:60:90:49:67:1f:9f:2e:dc:c7:bf:
         2c:79:9c:be:b6:c7:79:1b:12:0d:4f:5b:00:50:15:34:04:fc:
         96:db:bc:20:51:f0:d6:7e:86:11:51:9f:dd:c3:e6:07:d7:d3:
         da:6c:e7:6c:8f:ae:a1:31:cd:ef:7b:f6:4a:4c:74:45:01:89:
         50:87:8d:1c:5d:de:2e:b3:41:86:7d:5b:13:b0:eb:1a:34:64:
         65:85:aa:81:c1:10:e0:20:ac:38:ee:14:51:dc:a7:a6:f3:01:
         5e:46:2b:74:47:17:c8:19:bf:1c:b0:f4:4a:95:c7:ef:96:62:
         25:15:5b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:58:49 2026 by rpki-client