Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0ff2df3b-70d5-34fd-87e6-b887b580b020.roa
File:                     0ff2df3b-70d5-34fd-87e6-b887b580b020.roa (raw, json)
Hash identifier:          o8I6SrfdW/3pUOzkqf3Nb/q1RLZJLZgiHK/HP/6bd+I=
Subject key identifier:   3F:6E:D3:02:0D:09:36:3A:AB:08:21:7C:C5:FB:5B:50:28:C9:DB:54
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF4DB691C9299585A30A31EE0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0ff2df3b-70d5-34fd-87e6-b887b580b020.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     41264
IP address blocks:        104.133.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:69:1c:92:99:58:5a:30:a3:1e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=0e931443-018c-40c2-849d-0ad60c6d4d07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:88:bb:9a:50:00:9c:7c:7c:3a:66:e9:bd:13:
                    19:00:8a:ec:e2:92:ec:71:bc:0e:86:88:e5:3a:cf:
                    99:64:3a:74:5c:a6:8b:f3:d1:52:6e:43:cf:6e:d2:
                    b8:cd:50:bd:09:fd:16:6e:9e:0b:07:41:99:80:b8:
                    7f:2e:8d:8d:5a:a8:cd:22:b2:e2:32:14:ce:a4:27:
                    bd:7c:7e:a2:43:b5:01:55:f0:02:1e:ba:52:4c:5a:
                    ef:46:9b:17:41:43:fe:42:bb:0b:6b:9e:62:0c:30:
                    d6:fd:fc:b9:67:a6:fd:41:e8:7d:66:e2:ae:d2:26:
                    64:45:c0:52:61:29:04:53:2b:e5:3b:08:fb:56:27:
                    8f:12:4e:99:62:8c:ed:aa:18:b3:51:6d:e2:f0:f6:
                    77:2a:61:cc:b6:4d:53:ac:23:ee:9e:84:5d:d4:a4:
                    36:45:67:7a:87:d9:e4:37:3e:4b:20:fa:a1:51:38:
                    4d:3a:ff:67:51:cc:34:2e:e3:18:6d:e8:3b:a1:65:
                    52:d4:ad:24:82:77:36:51:76:19:40:9b:82:10:1a:
                    ea:7a:29:3e:49:d4:31:20:cc:1a:ad:95:a6:ba:55:
                    85:a8:f0:45:cf:9a:b9:11:98:7c:40:18:6c:5e:3f:
                    98:5a:34:99:a2:99:ed:e7:f8:7f:e0:77:64:93:2f:
                    00:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:6E:D3:02:0D:09:36:3A:AB:08:21:7C:C5:FB:5B:50:28:C9:DB:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0ff2df3b-70d5-34fd-87e6-b887b580b020.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:16:10:74:a6:f0:00:8f:89:44:6f:3e:10:ca:27:61:90:18:
         65:12:6e:7e:50:ca:ac:a5:e1:0c:a1:e3:4c:55:94:18:6d:aa:
         c9:7d:b2:4e:b0:d0:54:0e:09:dc:1d:b1:03:33:56:a2:a1:6d:
         d1:fb:85:1d:46:30:51:cc:b2:1a:58:ac:75:19:1c:6b:5b:ba:
         62:92:3b:b4:57:1d:0a:f3:4f:12:7b:9a:a6:23:21:11:87:76:
         6e:c3:c0:ac:eb:db:a7:61:68:c3:dd:69:1d:07:35:94:9d:24:
         25:ba:a9:1e:b4:92:06:d3:35:8b:78:3d:53:a5:a5:ff:7a:87:
         48:aa:2e:70:9d:c2:5c:9a:7a:85:90:e8:7b:96:4a:10:82:16:
         ec:db:ce:38:f4:3b:21:3d:09:5f:b1:f1:9f:b3:dc:cd:0d:b7:
         74:15:dd:8f:2f:a7:54:7f:a6:f7:a0:9e:7a:4a:e1:d0:d9:db:
         c8:fb:f5:15:75:47:db:3a:f0:42:92:7f:9a:25:b6:fc:37:dd:
         8e:45:9b:94:e4:0f:8b:b3:d4:cf:59:66:22:bb:d9:ce:f1:49:
         f2:ad:22:87:4d:bc:bb:bf:e4:26:90:4a:6d:0a:86:52:49:11:
         83:37:a4:be:e3:5c:8a:df:8b:dc:fc:b2:d3:c9:99:09:ad:48:
         3b:f2:b2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:11:57 2026 by rpki-client