Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba74a687-cd45-3577-aaf0-c5080f1c2996.roa
File:                     ba74a687-cd45-3577-aaf0-c5080f1c2996.roa (raw, json)
Hash identifier:          hAUYWSOSURKaWGH6JERKn7vmCWv4z+zYX2wMi6+2j1Q=
Subject key identifier:   36:3B:74:93:C7:A2:AD:D4:06:DC:28:71:CC:7F:F8:14:E9:2F:F3:64
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF2109D4DD1658EDBAD402980
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba74a687-cd45-3577-aaf0-c5080f1c2996.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     41264
IP address blocks:        104.132.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:9d:4d:d1:65:8e:db:ad:40:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=87854b18-07a3-4f95-98a8-9851f740291f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:73:1f:10:06:f9:49:b6:e2:7d:94:4d:66:55:
                    52:43:14:20:f5:45:54:6b:0c:49:20:ca:a3:95:83:
                    2e:36:bc:74:a6:dc:49:c2:40:85:ff:95:ee:41:d6:
                    80:ec:e1:5e:13:81:63:61:d5:a3:23:5f:65:d7:b9:
                    4d:a5:1d:0b:4d:9b:6d:12:29:c1:72:ff:97:48:31:
                    6a:b6:3b:e0:1b:79:06:17:20:75:cd:53:96:6a:41:
                    ea:0f:3c:3d:39:ad:9e:4c:a7:1b:59:6b:a0:01:bf:
                    6b:28:ae:bd:5c:4b:96:d4:bc:61:b5:be:c3:76:ba:
                    a8:1f:eb:75:50:87:6a:a9:86:e0:b6:c5:06:7e:7f:
                    62:d1:55:17:ad:ce:2d:6a:e0:43:07:7b:7f:14:59:
                    79:c9:ec:8d:fb:67:c5:7d:c5:ec:1c:f6:7c:61:f0:
                    18:f2:cb:04:d5:ac:b8:b3:37:0f:6d:24:9e:5f:a4:
                    29:6f:8d:78:b9:47:4a:99:d4:d2:6a:db:f2:cf:5a:
                    76:4d:5e:a7:ed:54:19:c5:17:dc:76:dd:87:58:55:
                    8a:55:92:43:47:4d:8c:e6:3d:17:8f:8e:cc:a2:e7:
                    b4:0f:de:4d:14:ea:2b:e1:0f:4c:73:fd:e2:d7:15:
                    4b:61:80:6e:44:43:db:05:fc:fe:f4:51:5e:3b:19:
                    dc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:3B:74:93:C7:A2:AD:D4:06:DC:28:71:CC:7F:F8:14:E9:2F:F3:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba74a687-cd45-3577-aaf0-c5080f1c2996.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:24:24:49:11:17:d1:ac:0f:cd:2b:cd:ae:48:2b:9d:04:8a:
         96:11:4a:91:88:a1:d0:c6:97:3a:42:f8:2b:b5:22:36:6f:5a:
         24:0d:e0:29:43:8f:3b:5c:19:95:1c:6b:91:57:bb:2c:dc:79:
         cf:9c:c4:52:81:c2:98:92:23:7c:a3:4e:07:e2:62:ea:47:0e:
         61:21:b8:38:9e:9e:6b:32:5e:5a:93:b4:27:ed:94:76:ea:38:
         27:86:ae:de:9b:d1:60:34:03:c7:36:bd:2d:b7:79:ed:51:37:
         a0:61:6c:c5:de:db:ce:f4:d6:02:b1:45:fc:cc:9c:02:39:21:
         41:3e:27:87:79:de:d0:db:cb:e3:0c:c5:f5:5f:8c:01:ab:53:
         6b:28:30:0f:6f:7a:42:48:b4:c9:b6:1d:f9:70:ae:cc:b9:05:
         1d:9f:6c:dd:87:b9:7d:51:e0:d9:3a:10:4d:58:56:2a:bd:54:
         7d:82:c0:7c:bd:73:a5:e1:2c:f6:08:61:fc:a2:f8:21:fa:86:
         05:34:05:e2:d6:0d:f1:95:39:2e:75:08:ee:7a:f8:78:dd:1b:
         f4:8f:91:0e:e3:35:80:48:d2:dd:1e:44:d4:07:30:c8:78:71:
         25:bf:12:7d:08:d5:58:94:a2:ea:a9:9a:f4:71:e1:c7:28:c7:
         78:10:33:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3yEJ1N0WWO261AKYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDUyNTAxMDAyNFoXDTI2MDgyMzAxMDAyNFowLzEtMCsGA1UEAxMk
ODc4NTRiMTgtMDdhMy00Zjk1LTk4YTgtOTg1MWY3NDAyOTFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHMfEAb5SbbifZRNZlVSQxQg9UVUawxJIMqj
lYMuNrx0ptxJwkCF/5XuQdaA7OFeE4FjYdWjI19l17lNpR0LTZttEinBcv+XSDFq
tjvgG3kGFyB1zVOWakHqDzw9Oa2eTKcbWWugAb9rKK69XEuW1Lxhtb7DdrqoH+t1
UIdqqYbgtsUGfn9i0VUXrc4tauBDB3t/FFl5yeyN+2fFfcXsHPZ8YfAY8ssE1ay4
szcPbSSeX6Qpb414uUdKmdTSatvyz1p2TV6n7VQZxRfcdt2HWFWKVZJDR02M5j0X
j47Moue0D95NFOor4Q9Mc/3i1xVLYYBuREPbBfz+9FFeOxncawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDY7dJPHoq3UBtwoccx/+BTpL/NkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYmE3NGE2ODctY2Q0NS0z
NTc3LWFhZjAtYzUwODBmMWMyOTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACUkJEkRF9GsD80rza5IK50EipYRSpGIodDGlzpC+Cu1IjZvWiQN4ClD
jztcGZUca5FXuyzcec+cxFKBwpiSI3yjTgfiYupHDmEhuDienmsyXlqTtCftlHbq
OCeGrt6b0WA0A8c2vS23ee1RN6BhbMXe28701gKxRfzMnAI5IUE+J4d53tDby+MM
xfVfjAGrU2soMA9vekJItMm2Hflwrsy5BR2fbN2HuX1R4Nk6EE1YViq9VH2CwHy9
c6XhLPYIYfyi+CH6hgU0BeLWDfGVOS51CO56+HjdG/SPkQ7jNYBI0t0eRNQHMMh4
cSW/En0I1ViUouqpmvRx4ccox3gQM+E=
-----END CERTIFICATE-----
Generated at Fri Jun 12 09:13:42 2026 by rpki-client