Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7041d7f1-06a1-3587-ba2c-e05ad92eef26.roa
File:                     7041d7f1-06a1-3587-ba2c-e05ad92eef26.roa (raw, json)
Hash identifier:          ya4MYSDIFZVpeC1M8ZvxCba/s1WtNWxcgYcRsKGNtB4=
Subject key identifier:   A9:17:A1:C9:66:2B:70:39:50:87:AD:15:2A:64:43:08:30:33:0B:F1
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584F497C5D6B53B2C003E5703A00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7041d7f1-06a1-3587-ba2c-e05ad92eef26.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     41264
IP address blocks:        104.132.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:5d:6b:53:b2:c0:03:e5:70:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cffd9319-6492-42d5-9836-289f5ef3d652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cd:6a:56:d6:73:c8:31:95:7f:37:ee:58:e3:
                    6d:d7:00:b9:93:f1:4a:a7:7e:85:99:44:ba:f8:ea:
                    ec:af:7b:a7:ee:4f:7b:ec:d5:74:3a:c6:a9:f1:ca:
                    20:88:9d:54:fd:54:99:03:2d:eb:18:2e:86:9e:8f:
                    1d:70:28:8e:8b:53:1e:e3:1f:c1:d2:da:9e:93:fb:
                    af:73:f4:d7:aa:d3:44:d3:68:9c:c5:d3:3c:5c:0f:
                    71:5e:fc:c7:b3:9d:6c:dc:86:ba:91:2b:4c:1d:0b:
                    56:2b:3f:69:20:55:96:a9:1b:f3:d6:e8:ae:00:0f:
                    af:fe:ed:09:81:7a:d4:b8:77:7f:59:39:b9:76:1b:
                    8b:08:41:6e:4d:36:dc:11:c2:db:80:e0:42:4b:e9:
                    e0:17:59:7e:e1:28:4c:76:e3:e6:32:e5:58:2a:1a:
                    72:f5:4c:cb:09:2c:a7:3e:83:1e:55:51:c4:b8:e7:
                    3b:77:63:7a:f6:6d:21:22:01:aa:d2:79:cf:a8:4f:
                    78:a4:16:c6:3d:cf:75:4b:1f:92:4d:ed:08:e6:70:
                    9a:bc:4c:b4:2b:92:73:a2:fe:a8:28:d5:a4:26:82:
                    db:b9:86:77:2e:11:b5:e2:e7:df:43:9b:60:d7:e7:
                    4f:a6:da:bd:2a:21:66:54:9f:b8:d6:e7:ea:ee:e0:
                    fb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:17:A1:C9:66:2B:70:39:50:87:AD:15:2A:64:43:08:30:33:0B:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7041d7f1-06a1-3587-ba2c-e05ad92eef26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:24:49:35:97:cf:26:10:8a:2f:80:ab:36:5f:93:b0:2d:8b:
         ec:91:69:2e:e9:be:c9:a2:f0:6c:46:ee:32:7c:e2:ec:07:fa:
         50:86:29:9f:46:89:70:d3:a5:7a:96:81:29:f3:3f:aa:dd:ba:
         14:4a:fd:4a:35:99:94:a2:e2:14:ae:c1:52:3e:d2:06:66:dc:
         3f:3a:7e:1b:17:d2:89:a8:a5:71:21:63:86:73:9e:8f:2e:eb:
         43:7b:c8:ef:0c:7b:ad:61:75:e2:7d:64:56:9c:a9:5a:ac:f1:
         72:6d:52:c3:5c:45:8d:44:82:10:1f:17:ed:c8:79:50:57:72:
         d1:a4:8d:aa:50:e8:73:33:ab:6d:b3:7e:3e:00:3f:a1:4c:d0:
         77:bd:5b:33:fc:82:d5:bd:53:01:16:39:c4:29:93:d9:fa:e8:
         c1:38:02:7d:46:58:f7:07:ee:c8:4d:4e:de:97:b4:ea:c6:0e:
         61:96:1e:1c:56:b8:a8:2e:91:d7:c8:cd:6f:70:06:ef:ac:4c:
         43:e0:7e:6a:d6:c5:05:47:02:2c:6a:a3:73:d3:cf:f8:7c:af:
         96:be:80:b4:50:41:80:f1:6a:c2:f1:a1:d8:fb:d0:97:71:80:
         c6:cb:7d:ad:09:7c:e1:10:c7:c7:99:7a:9c:ff:6e:30:33:aa:
         d5:3f:25:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 02:46:15 2026 by rpki-client