Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/12579e4f-074a-34bf-8839-fd469eee8d67.roa
File:                     12579e4f-074a-34bf-8839-fd469eee8d67.roa (raw, json)
Hash identifier:          ZCdWOA4BlkbJ7cuhFcsJ4UCoU3Ib3mr/qYXqSaWI4Iw=
Subject key identifier:   2D:FC:A8:1B:55:7C:58:4B:49:10:91:C4:2D:B0:FF:43:DB:07:C1:75
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF210A7E67D66E264DA514C80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/12579e4f-074a-34bf-8839-fd469eee8d67.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     41264
IP address blocks:        104.132.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:a7:e6:7d:66:e2:64:da:51:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=aa8cb21f-1878-4109-895a-c58bb7d155f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a8:14:db:57:28:1d:ea:dc:87:c4:48:ce:5f:
                    7b:8f:1e:bc:3e:7e:66:69:a6:76:ee:a6:db:a8:c3:
                    c2:2d:48:bc:1b:5d:e4:dc:66:c2:34:b6:5d:7a:9d:
                    29:d0:02:a9:6a:13:1d:5f:5f:00:e6:0c:1b:6d:47:
                    e1:78:d7:a0:0c:32:40:01:e0:72:4d:0b:a6:bf:e6:
                    e3:23:0f:e5:8d:eb:19:9e:44:a4:b2:01:54:8d:6c:
                    55:94:ae:1d:70:fa:4c:57:9d:56:49:3e:47:d4:c3:
                    30:9e:36:17:6e:f7:24:e9:11:98:8f:e5:b1:5c:0c:
                    f0:d5:d8:7b:8c:94:69:b4:b4:4d:ec:5d:61:2c:80:
                    12:34:19:2e:0c:ec:8e:53:35:4b:16:8a:c4:7d:5c:
                    6d:86:b0:e4:bf:a5:18:62:7c:a6:26:5b:85:23:5a:
                    06:24:9d:91:0e:9a:9c:4f:8a:1d:cf:ff:f9:19:9c:
                    22:f4:3d:2e:6c:73:6e:fc:68:ac:8e:f6:47:93:86:
                    18:40:06:61:8a:ad:f8:15:74:f3:b2:6b:e3:89:3d:
                    27:8d:c6:eb:10:32:54:88:38:f9:71:25:72:93:4d:
                    35:86:32:c3:f0:b2:6b:fb:6c:65:43:54:93:68:9f:
                    ed:dd:7b:56:10:93:eb:4f:13:1e:e8:8c:b3:88:c4:
                    ef:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:FC:A8:1B:55:7C:58:4B:49:10:91:C4:2D:B0:FF:43:DB:07:C1:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/12579e4f-074a-34bf-8839-fd469eee8d67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:8e:b9:19:bf:4c:0b:38:56:13:02:d2:7b:01:39:fd:f9:79:
         54:9f:2c:32:8e:5e:59:11:ef:88:f2:e8:b8:97:14:9d:6d:27:
         65:98:cd:a6:b5:6b:2b:5a:26:41:f3:09:0e:4e:05:30:ff:1d:
         a8:a5:fb:0e:22:6b:c2:49:3c:b0:e1:b5:d1:d0:0b:cb:3d:c2:
         b6:57:38:80:88:96:35:ac:70:c8:4c:c2:fd:ba:40:0a:63:d5:
         ea:9c:17:99:f7:50:11:3a:24:ee:51:a1:d7:a0:0c:1b:13:49:
         04:fa:09:f3:32:c0:9e:dc:82:c5:2f:83:0c:61:66:22:85:46:
         2e:59:1b:cf:03:14:55:07:1f:71:45:15:05:65:f5:6a:97:bd:
         01:da:dd:17:60:f4:4e:f6:b2:16:e1:60:70:ae:bc:0c:4b:29:
         ad:55:c8:bb:53:8d:1a:07:c0:f2:09:f9:95:28:d0:07:d3:f2:
         c5:3d:c5:a9:a7:c9:ca:97:84:25:b7:7e:6e:97:a0:90:51:60:
         6a:12:63:31:35:fe:9e:a0:f1:3a:d0:54:3f:b4:95:b5:e8:ae:
         8f:c4:b9:2d:cb:4b:99:3b:6f:49:77:d1:f0:ab:07:21:28:da:
         3a:c6:58:57:45:b7:1f:ca:f8:b3:09:f2:ed:01:0b:76:70:a1:
         96:92:b7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:32:21 2026 by rpki-client