Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/139f85c5-1208-3a89-a5eb-678a534ceee4.roa
File:                     139f85c5-1208-3a89-a5eb-678a534ceee4.roa (raw, json)
Hash identifier:          blXaLfpmN7tdRuke+LN09V1SZeg8eLIMyeR1VODFl5g=
Subject key identifier:   B3:D2:0F:42:60:07:07:DC:6F:A8:99:64:74:D8:E9:89:6E:7F:E8:96
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF2109C8D5C8B8FC285BBC240
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/139f85c5-1208-3a89-a5eb-678a534ceee4.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     41264
IP address blocks:        104.132.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:9c:8d:5c:8b:8f:c2:85:bb:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=97b9070b-bc4e-42e7-a5b6-4982e53f0f92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a0:18:7d:e5:27:fa:4c:af:b8:29:63:5c:83:
                    48:b9:bc:d6:18:4f:fb:1f:c1:88:4f:f5:bd:48:aa:
                    80:11:db:ca:65:f0:9d:70:78:91:cd:63:4d:b6:2c:
                    9c:d2:8f:7b:14:f8:a9:a4:7d:18:96:a8:8c:60:0b:
                    01:07:b2:bf:69:2a:2f:2e:12:a4:10:7a:80:6a:3e:
                    87:b4:83:99:82:a4:c8:43:f3:eb:6a:fa:5c:94:58:
                    4c:aa:10:eb:d6:ac:9e:86:2f:41:f7:cc:1c:15:51:
                    e7:0e:3c:4d:7b:af:c5:77:d2:8c:4e:f3:9c:2c:e0:
                    32:b0:df:cb:8d:84:82:44:2f:4a:0e:8c:49:6a:b5:
                    31:15:af:16:e7:5f:15:52:a4:46:6c:4d:08:d8:7d:
                    a6:3a:74:1d:31:6d:30:f6:3a:7d:5e:7f:40:68:ae:
                    1b:49:cc:bc:1f:8d:72:ef:03:b6:75:ce:60:bd:c3:
                    a9:08:92:8a:5d:69:b7:24:4f:a9:70:80:12:9a:c3:
                    90:42:82:49:de:fd:e3:8a:4c:51:6f:1b:a2:2a:1d:
                    4b:7e:6c:49:c7:92:78:5b:b4:05:2b:df:46:ff:56:
                    92:f3:b2:2a:1a:7c:10:1f:70:fa:52:b5:e2:fe:34:
                    e5:1f:4f:6c:09:07:19:cf:c6:ee:34:eb:88:2a:96:
                    c3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D2:0F:42:60:07:07:DC:6F:A8:99:64:74:D8:E9:89:6E:7F:E8:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/139f85c5-1208-3a89-a5eb-678a534ceee4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:2f:cb:a5:42:cb:d2:33:1f:c2:d9:58:48:0c:f5:fb:85:66:
         d7:d4:70:7a:d0:d2:da:05:e4:d0:96:f8:7d:54:15:5b:37:9c:
         79:39:6b:f9:ba:ee:e1:9f:d9:a9:2e:27:6e:57:9e:b6:bb:eb:
         89:db:f4:28:a7:a7:59:70:a1:63:bd:e0:0e:7e:44:72:fd:ff:
         79:68:58:dc:f7:b8:13:3e:a8:63:2f:71:63:15:a9:01:6a:56:
         27:2e:a4:1b:e3:e3:6e:96:89:51:43:36:5c:ea:16:46:56:65:
         e0:f6:0b:2c:dd:22:22:e5:6a:5a:b9:3b:5d:9b:5b:1d:a5:b5:
         87:c1:f4:62:c8:3f:ee:02:01:de:de:5d:97:35:dd:fb:3f:0a:
         ba:a1:23:7c:0f:00:86:22:4c:78:b5:c4:6e:68:9f:db:08:97:
         d2:4c:e4:4b:d6:3c:c0:00:fb:ff:ce:b1:66:0b:b5:6b:03:f3:
         87:f0:75:c8:fd:47:58:bb:06:fc:15:69:ba:de:eb:cb:a8:52:
         19:e8:36:99:c3:21:99:4d:f9:9c:55:e3:53:70:c2:57:b1:97:
         54:b0:17:55:a8:c4:28:ba:64:49:80:ea:ff:61:56:a2:3d:bb:
         af:aa:db:ad:0c:53:c6:f2:9b:52:1f:01:17:09:1f:57:50:28:
         1d:ea:2b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:32:26 2026 by rpki-client