Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/10ef1877-c0c5-3e4e-b34b-dc7258983421.roa
File:                     10ef1877-c0c5-3e4e-b34b-dc7258983421.roa (raw, json)
Hash identifier:          O4iWNdqfmkpSScgd0qoo/g/remDDbm4e1qdaBjHWlcQ=
Subject key identifier:   87:7A:B9:4C:B1:56:7F:05:F2:DE:12:FD:87:26:78:36:96:88:CC:C3
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF2109F2B6197EDA67379A7D0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/10ef1877-c0c5-3e4e-b34b-dc7258983421.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     41264
IP address blocks:        104.132.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:9f:2b:61:97:ed:a6:73:79:a7:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=aaca0667-8ab1-46d2-9283-90c733ff8a36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:34:08:d4:c2:75:e8:d3:b3:82:e2:ad:67:bd:
                    01:1d:77:5d:b0:75:a0:a5:9f:57:c2:fa:0a:8e:5a:
                    ff:77:c1:17:00:f6:19:1d:cf:47:0e:5f:49:46:94:
                    63:e3:46:c9:17:55:b1:8a:cc:15:d1:3c:cc:49:9e:
                    b1:49:de:1e:23:f2:53:8a:c6:85:12:47:a8:7b:a5:
                    57:d2:36:11:ba:cc:77:f1:c0:6c:fa:01:55:06:63:
                    20:36:2d:0e:7b:59:95:c1:e6:9d:cb:72:55:32:aa:
                    b1:72:ce:85:94:2d:a4:bb:d1:a4:08:91:bb:22:83:
                    b7:d3:0e:c6:de:4a:9a:77:cb:c7:d3:19:e1:d1:c9:
                    3f:e1:38:23:28:37:4f:f9:91:3b:2e:4b:c2:53:76:
                    4b:45:e9:85:f7:fd:26:dc:b3:b6:69:32:77:b7:d9:
                    95:3c:bb:8c:51:ed:22:1d:cc:5f:e5:35:39:93:a3:
                    34:88:cc:af:f9:9e:14:69:2c:dc:8a:ea:b0:2a:7b:
                    3e:0d:d8:75:5f:3c:38:68:75:e7:4a:97:82:75:ab:
                    33:cf:68:d7:fc:31:51:ed:6f:2f:2d:14:86:0c:62:
                    0e:5e:6b:ae:f7:ad:64:0a:fd:0e:1c:1e:cf:15:83:
                    06:28:04:d3:9f:e3:1e:19:09:92:ae:d7:91:37:c8:
                    8d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7A:B9:4C:B1:56:7F:05:F2:DE:12:FD:87:26:78:36:96:88:CC:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/10ef1877-c0c5-3e4e-b34b-dc7258983421.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:03:01:db:c7:39:97:9f:ca:77:e0:71:56:dd:10:0e:2d:5b:
         49:62:08:43:11:7c:ba:ef:cc:4a:78:86:83:75:7a:2d:23:b0:
         76:26:bb:12:cc:bb:c5:99:ec:44:dc:dd:84:4b:ff:3d:f9:b5:
         c9:4b:73:77:46:5e:3f:0d:9f:c4:be:52:9a:30:42:c1:7e:bb:
         b3:e3:ee:b6:ba:1b:46:dc:5d:15:e2:2e:68:8b:c2:38:71:cd:
         2a:3a:c8:78:d4:8e:1c:8d:d2:4b:7d:13:22:d0:3f:fa:72:ee:
         f2:af:96:6f:0c:56:c5:cb:fa:23:00:0d:6a:6a:08:26:96:6f:
         e4:fb:c6:82:0a:e5:d5:d8:e3:9c:14:7a:24:fc:d0:69:b2:f7:
         23:56:b5:cd:a3:8c:c1:e4:76:44:fe:58:ce:09:49:51:27:42:
         b3:23:c7:e0:f4:05:c8:c3:89:c3:44:94:59:a9:db:f6:9c:d6:
         97:83:2a:32:83:19:2d:fe:c9:55:78:1c:90:c6:20:cf:ad:61:
         78:cd:e0:91:f1:17:84:2d:58:cf:ff:76:2d:c3:77:3d:c6:95:
         54:e2:4e:27:cd:45:b9:63:76:ae:53:f1:de:79:b7:4d:7c:26:
         69:8a:35:cc:b9:ef:45:6c:9c:42:d9:fb:6a:c5:6f:c2:99:19:
         42:1c:16:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:30:51 2026 by rpki-client