Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0b803bd3-c1cf-339e-9368-880d31d8be70.roa
File:                     0b803bd3-c1cf-339e-9368-880d31d8be70.roa (raw, json)
Hash identifier:          WsxEw3l7Ozd1xOs+bn4bt9Udvk+Y3Rm5ZhNFYxBSLB8=
Subject key identifier:   C0:BB:6C:BC:1B:47:C3:BC:B5:CB:D1:A7:72:68:40:BE:A9:EC:C2:5F
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF4DB78D5AEE96D29B2127940
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0b803bd3-c1cf-339e-9368-880d31d8be70.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     41264
IP address blocks:        104.133.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:78:d5:ae:e9:6d:29:b2:12:79:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=6852cf8c-3b7e-4959-80e6-c46efcc6a85e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9d:67:1d:29:a3:b3:94:72:91:db:75:5e:b6:
                    d3:ce:f6:77:15:55:dd:7a:3f:27:9a:ef:1d:91:65:
                    11:67:c8:47:aa:0e:67:f8:f9:18:2a:3d:fe:77:22:
                    3e:07:29:12:16:52:88:b7:89:9d:8b:f1:ca:0a:74:
                    84:cd:33:d7:a7:3b:fd:41:20:24:17:c8:73:e2:1e:
                    54:cc:c0:35:2b:5a:dd:73:01:ae:6d:7e:06:d7:f0:
                    ac:40:c4:b8:ba:74:ab:b1:94:3c:52:80:2f:68:ef:
                    37:f3:c4:bc:08:0f:a0:fc:92:36:b8:ce:30:21:a6:
                    59:f6:0e:42:27:ec:bf:c6:7e:af:64:17:1e:27:d3:
                    62:92:d0:23:22:be:32:7a:47:a6:16:03:36:d7:3a:
                    ef:f4:15:69:f9:af:b8:d5:40:3f:98:4f:c6:e2:a9:
                    1e:2a:c3:1f:2f:b7:98:37:24:f9:9f:4f:7b:9c:59:
                    30:71:c4:2f:a9:d6:2f:74:9c:82:85:84:cb:55:aa:
                    5c:bd:eb:0c:a7:08:c2:ac:ea:6b:f0:4b:69:7f:e9:
                    5c:0f:18:3a:27:7d:51:73:6c:c7:00:7a:76:8e:85:
                    ae:42:82:a9:82:ba:cf:9a:e8:8c:ff:8b:38:1d:3d:
                    e1:92:fa:38:22:2d:3b:bd:73:20:14:d2:7f:fd:b8:
                    12:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BB:6C:BC:1B:47:C3:BC:B5:CB:D1:A7:72:68:40:BE:A9:EC:C2:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0b803bd3-c1cf-339e-9368-880d31d8be70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:6e:07:ef:f0:6a:2a:35:7d:ec:2b:f2:07:96:1d:ab:a7:a3:
         44:2d:cc:3b:9d:d1:73:96:66:2b:b3:bc:92:43:15:60:e5:53:
         f9:c2:70:c9:bc:38:35:a6:85:0f:88:6b:4d:d3:d0:47:86:31:
         62:b8:7f:89:f9:c2:fc:40:46:ef:a2:78:b0:b1:1a:8d:e7:b7:
         57:e6:c5:25:d2:55:3d:78:82:22:f9:f6:d8:91:c5:7e:31:70:
         fb:47:cb:5c:4f:fa:42:93:ee:8a:d7:60:3f:7f:96:c8:f3:74:
         d5:26:4e:97:e8:fb:7d:ac:c7:a2:b3:a0:a9:5c:bd:8c:8f:77:
         98:54:45:48:2c:31:55:5a:b2:3b:bf:0f:b4:43:22:f8:42:3b:
         e7:19:43:78:23:8c:de:f4:0e:d8:a6:cd:68:ce:4a:7e:66:08:
         58:47:23:59:5f:f2:26:fd:eb:8e:cd:69:8c:75:f5:02:07:ae:
         6d:25:96:7a:88:91:6f:f1:97:11:68:95:fc:a7:95:97:23:bd:
         33:71:75:10:35:ce:0e:d2:f4:e9:fa:2e:45:4b:93:bb:e9:10:
         60:ca:51:f3:b9:fd:34:66:58:f8:b2:cb:54:c9:cd:e9:ef:10:
         91:4e:60:48:8d:2e:16:ec:71:0a:39:42:d3:e7:d0:74:51:56:
         40:77:b4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:33:47 2026 by rpki-client