Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/823afc20-a669-3d8a-a98c-dfff1a0e5f7c.roa
File:                     823afc20-a669-3d8a-a98c-dfff1a0e5f7c.roa (raw, json)
Hash identifier:          fPXxYEOwPkF7Njy1K1I3OF4w2AsFjv+tilcltLwqtIs=
Subject key identifier:   30:8E:39:ED:AF:BB:8E:14:C5:B3:14:E7:55:92:1E:DC:F8:36:D4:AF
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DEF45FFF88284084F48EE62A0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/823afc20-a669-3d8a-a98c-dfff1a0e5f7c.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     41264
IP address blocks:        104.132.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:45:ff:f8:82:84:08:4f:48:ee:62:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=7f68b570-52ac-4790-bb4f-6004e8af93b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d5:b2:e4:59:ce:42:ee:64:a9:82:69:22:50:
                    c8:5d:3b:8f:b0:84:8c:08:95:32:c9:31:d4:1b:3a:
                    f6:6e:47:ec:8b:e9:99:73:6a:c6:7b:6b:d8:bb:d0:
                    2e:13:4e:5b:62:9b:4e:bf:16:d5:74:ca:64:11:2f:
                    c6:ff:f1:6d:77:a1:3f:7e:37:c3:b9:a5:5b:51:ce:
                    fa:5b:2c:4c:29:68:19:20:77:22:9b:8f:6c:2c:73:
                    5d:7a:36:8c:12:03:ce:3e:ff:f1:aa:0f:ee:7d:0d:
                    ad:d2:3f:10:34:19:1b:18:63:9f:bd:a4:11:55:a5:
                    9b:3d:b3:ca:7b:17:c5:83:9c:1e:47:52:a6:7c:7a:
                    71:d2:84:15:37:04:6f:22:3b:4b:72:50:be:4e:2b:
                    8f:e7:cc:94:1c:51:4f:1c:46:70:b8:10:f4:ba:07:
                    4e:e4:67:b5:bd:c6:58:fe:07:fd:c7:50:01:11:79:
                    5f:3b:41:fa:89:8a:1d:95:94:8f:46:fd:dc:10:a3:
                    f4:c0:8a:4d:d6:99:78:f1:1e:7b:5a:57:5f:a6:f5:
                    7f:58:7d:0d:42:b0:08:61:57:3f:be:f3:56:f8:16:
                    41:c7:f0:2c:16:58:40:4b:62:f0:df:32:a9:91:e8:
                    76:5a:a9:4c:8f:91:fe:97:04:61:54:02:bf:aa:8c:
                    2a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:8E:39:ED:AF:BB:8E:14:C5:B3:14:E7:55:92:1E:DC:F8:36:D4:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/823afc20-a669-3d8a-a98c-dfff1a0e5f7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:49:cb:53:e0:cc:9c:dd:d6:03:0b:6e:a1:d3:97:9d:34:bd:
         79:b9:b2:4b:e5:36:5e:b4:32:4d:58:37:41:fa:aa:7a:09:d7:
         ef:14:86:71:b1:d4:4d:6d:d4:2a:fe:5a:cc:48:14:ad:4b:f3:
         73:f0:a8:ce:7f:f7:a3:b9:78:6f:c3:14:cd:2e:81:bc:26:c2:
         51:6d:b2:42:e7:0a:bf:0e:72:11:d3:ea:8b:d1:65:66:7f:9b:
         e5:dc:f0:bc:c1:63:f7:e8:19:3f:57:48:3a:98:e4:03:b0:a7:
         d7:6b:1d:91:9e:50:10:39:d2:1d:5b:98:96:b7:f4:c1:8d:fe:
         26:da:a8:20:93:f1:b9:f6:34:4f:45:67:d7:73:6b:70:dd:9e:
         4d:90:94:07:de:0d:75:8e:07:f4:c3:ea:02:e7:bf:5d:87:1f:
         5b:fe:eb:85:93:85:3c:18:00:50:c1:41:73:32:ae:88:c1:51:
         a0:f3:59:cb:86:5d:6f:36:a8:9f:f4:bc:5c:4a:91:b5:8d:ba:
         6c:ba:fc:10:de:4b:e4:b1:1b:10:d6:8d:de:f0:38:1a:78:13:
         1c:78:3e:be:c0:55:23:52:00:05:3d:ea:0e:3a:e9:b1:06:98:
         50:31:52:2d:aa:84:d0:58:15:01:9b:85:00:7e:ff:ba:65:e6:
         ea:75:27:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3vRf/4goQIT0juYqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDUyNDAxMDAyN1oXDTI2MDgyMjAxMDAyN1owLzEtMCsGA1UEAxMk
N2Y2OGI1NzAtNTJhYy00NzkwLWJiNGYtNjAwNGU4YWY5M2I0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNWy5FnOQu5kqYJpIlDIXTuPsISMCJUyyTHU
Gzr2bkfsi+mZc2rGe2vYu9AuE05bYptOvxbVdMpkES/G//Ftd6E/fjfDuaVbUc76
WyxMKWgZIHcim49sLHNdejaMEgPOPv/xqg/ufQ2t0j8QNBkbGGOfvaQRVaWbPbPK
exfFg5weR1KmfHpx0oQVNwRvIjtLclC+TiuP58yUHFFPHEZwuBD0ugdO5Ge1vcZY
/gf9x1ABEXlfO0H6iYodlZSPRv3cEKP0wIpN1pl48R57WldfpvV/WH0NQrAIYVc/
vvNW+BZBx/AsFlhAS2Lw3zKpkeh2WqlMj5H+lwRhVAK/qowq/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDCOOe2vu44UxbMU51WSHtz4NtSvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvODIzYWZjMjAtYTY2OS0z
ZDhhLWE5OGMtZGZmZjFhMGU1ZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIS1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMZJy1PgzJzd1gMLbqHTl500vXm5skvlNl60Mk1YN0H6qnoJ1+8UhnGx
1E1t1Cr+WsxIFK1L83PwqM5/96O5eG/DFM0ugbwmwlFtskLnCr8OchHT6ovRZWZ/
m+Xc8LzBY/foGT9XSDqY5AOwp9drHZGeUBA50h1bmJa39MGN/ibaqCCT8bn2NE9F
Z9dza3Ddnk2QlAfeDXWOB/TD6gLnv12HH1v+64WThTwYAFDBQXMyrojBUaDzWcuG
XW82qJ/0vFxKkbWNumy6/BDeS+SxGxDWjd7wOBp4Exx4Pr7AVSNSAAU96g466bEG
mFAxUi2qhNBYFQGbhQB+/7pl5up1J2I=
-----END CERTIFICATE-----
Generated at Fri Jun 12 09:11:51 2026 by rpki-client