Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1aea7d94-7c58-3867-9697-570f065837e1.roa
File:                     1aea7d94-7c58-3867-9697-570f065837e1.roa (raw, json)
Hash identifier:          V0Zzon65NdA2GpcJq/NFJK1C6TRfmR8nU3kSZetJMWo=
Subject key identifier:   7C:63:5E:16:59:83:32:91:63:83:EB:C1:9A:17:5D:37:19:91:82:A4
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584EA796B4AAF5FF42AF7245F700
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1aea7d94-7c58-3867-9697-570f065837e1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     41264
IP address blocks:        104.133.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:b4:aa:f5:ff:42:af:72:45:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=192035f8-b64d-47b5-9367-e282a30a877b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:43:b5:94:b8:b3:ff:d2:d3:cc:f1:5a:ac:8d:
                    75:11:f8:82:21:67:84:e8:b7:09:a6:99:0c:c0:a6:
                    de:2f:d2:37:65:33:6f:51:4b:14:a6:65:f0:45:22:
                    89:2d:c1:bd:9f:9b:39:1e:0f:c9:e3:a8:88:5a:be:
                    f4:70:43:49:6b:45:be:cb:3a:3a:75:e1:bc:22:03:
                    be:3c:74:48:3b:80:82:9e:77:55:2b:1c:54:72:13:
                    6a:ac:2d:1b:23:20:da:a1:ee:17:ce:39:79:70:0a:
                    3f:91:0a:6d:3d:2a:17:37:cf:96:66:c6:63:2e:f6:
                    22:e9:fc:f0:33:67:6f:53:8e:70:5e:ce:55:ac:cf:
                    9b:9a:fe:e4:da:3c:1d:32:f1:f6:8e:ae:ae:00:ec:
                    43:f4:48:0a:de:e9:54:1b:03:ff:05:e1:1f:bb:a7:
                    17:0d:26:24:3c:42:3a:8b:c8:ea:fe:75:08:ad:4b:
                    fc:c4:66:36:66:34:6b:7b:0b:6c:c6:25:01:1e:15:
                    69:90:be:5f:6d:c4:3b:23:44:79:83:61:48:c9:93:
                    c6:7c:46:f2:5b:35:6c:98:e2:68:00:6c:1a:f3:9d:
                    c3:2b:8b:22:a7:e8:90:63:85:98:7a:6e:09:ee:f0:
                    41:ea:26:04:1a:a2:ea:53:52:c3:c8:9d:ec:c8:10:
                    63:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:63:5E:16:59:83:32:91:63:83:EB:C1:9A:17:5D:37:19:91:82:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1aea7d94-7c58-3867-9697-570f065837e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:41:51:91:09:5f:3f:46:1c:d4:6a:64:fe:b6:44:1e:3a:ed:
         b0:f1:78:fa:1b:77:fe:0e:de:b8:de:3e:c5:d7:07:42:ec:69:
         54:7b:b7:e0:6e:aa:90:0a:c9:67:cc:ec:c0:81:4f:25:7b:e8:
         97:dc:37:22:64:75:0f:43:33:40:4c:69:b3:44:e1:db:db:e4:
         7f:93:56:69:a9:50:74:03:44:88:58:3d:43:01:4e:59:9b:de:
         ac:56:0f:6d:d2:77:25:d9:e6:2c:0b:46:e9:d2:de:34:7a:4d:
         4a:5c:cd:6e:46:ae:df:49:ff:96:ee:30:47:84:64:f7:9b:9b:
         c9:40:c9:bf:bd:94:bc:4b:30:04:15:5c:2f:0e:b6:51:4d:e7:
         28:5a:4f:91:c7:0a:9c:5a:8c:55:44:c7:cb:1c:2b:86:4e:97:
         c7:da:f1:08:3c:a2:46:7f:fd:ea:80:e6:1e:03:06:86:24:d1:
         59:1b:e2:f6:ef:c2:d5:66:62:2f:80:1e:29:ae:3f:08:29:96:
         32:5d:2a:f4:e1:59:1a:6c:2b:e6:e0:65:52:a0:5a:d0:2f:57:
         b6:db:52:fc:c3:bb:54:84:89:08:5e:3b:dc:f2:77:fe:ac:ec:
         36:11:83:43:fb:e6:14:ff:38:90:b1:a2:37:df:bd:f1:95:f0:
         9a:a1:93:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlrSq9f9Cr3JF9wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MTkyMDM1ZjgtYjY0ZC00N2I1LTkzNjctZTI4MmEzMGE4NzdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkO1lLiz/9LTzPFarI11EfiCIWeE6LcJppkM
wKbeL9I3ZTNvUUsUpmXwRSKJLcG9n5s5Hg/J46iIWr70cENJa0W+yzo6deG8IgO+
PHRIO4CCnndVKxxUchNqrC0bIyDaoe4Xzjl5cAo/kQptPSoXN8+WZsZjLvYi6fzw
M2dvU45wXs5VrM+bmv7k2jwdMvH2jq6uAOxD9EgK3ulUGwP/BeEfu6cXDSYkPEI6
i8jq/nUIrUv8xGY2ZjRrewtsxiUBHhVpkL5fbcQ7I0R5g2FIyZPGfEbyWzVsmOJo
AGwa853DK4sip+iQY4WYem4J7vBB6iYEGqLqU1LDyJ3syBBjmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHxjXhZZgzKRY4PrwZoXXTcZkYKkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMWFlYTdkOTQtN2M1OC0z
ODY3LTk2OTctNTcwZjA2NTgzN2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADNBUZEJXz9GHNRqZP62RB467bDxePobd/4O3rjePsXXB0LsaVR7t+Bu
qpAKyWfM7MCBTyV76JfcNyJkdQ9DM0BMabNE4dvb5H+TVmmpUHQDRIhYPUMBTlmb
3qxWD23SdyXZ5iwLRunS3jR6TUpczW5Grt9J/5buMEeEZPebm8lAyb+9lLxLMAQV
XC8OtlFN5yhaT5HHCpxajFVEx8scK4ZOl8fa8Qg8okZ//eqA5h4DBoYk0Vkb4vbv
wtVmYi+AHimuPwgpljJdKvThWRpsK+bgZVKgWtAvV7bbUvzDu1SEiQheO9zyd/6s
7DYRg0P75hT/OJCxojffvfGV8Jqhk5Q=
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:42:21 2026 by rpki-client