Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2beaf43d-cadb-35b2-8177-98ca27ff1332.roa
File:                     2beaf43d-cadb-35b2-8177-98ca27ff1332.roa (raw, json)
Hash identifier:          PW9fUbBcguym1gjZBxrcLUqFjpOZggSlPowTmb/7QDI=
Subject key identifier:   ED:E2:88:E1:45:8B:41:59:50:7D:DC:CF:12:85:57:A5:EE:BF:0E:02
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF4DB6D46E8766ACA8EA68B80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2beaf43d-cadb-35b2-8177-98ca27ff1332.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     41264
IP address blocks:        104.133.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:6d:46:e8:76:6a:ca:8e:a6:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=0cbca34a-9d56-4605-b8a7-6d4ae657c927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:36:78:8f:e9:10:dd:b5:65:10:d9:89:2f:0b:
                    17:d9:45:38:71:7b:6f:94:22:ab:4c:5c:35:a9:1a:
                    78:5b:f5:19:3c:8e:54:f3:ed:c4:e3:57:1f:13:65:
                    07:51:9c:74:bf:d7:55:21:be:1b:70:09:32:40:5f:
                    2e:35:fa:df:7d:a1:4d:c9:79:40:e5:0f:bc:3a:05:
                    7c:45:8e:05:55:88:d2:2b:77:b9:62:96:09:9f:e8:
                    b6:94:64:c5:06:c9:8f:8b:53:e1:63:8a:a6:02:cf:
                    a7:f8:1d:89:43:b3:05:d3:fd:9f:a3:e7:ea:8f:50:
                    ca:eb:74:78:6d:d3:c7:ff:9e:56:60:8f:2e:f1:25:
                    d2:51:fd:cb:0b:d3:a3:d3:1f:ae:e6:b3:e5:08:e7:
                    7a:14:d8:66:3f:f4:a4:28:fb:41:a8:17:66:44:90:
                    bf:c8:37:e2:d1:8f:6d:a6:2d:e2:8d:cf:40:de:2d:
                    1c:2a:01:4f:56:17:59:4c:98:4c:6b:48:b4:93:74:
                    10:70:6d:37:3f:d7:9c:ae:1d:fb:bd:67:db:e4:4f:
                    44:4a:44:73:51:a6:4d:fa:e7:46:d3:df:2f:4e:c0:
                    ac:d7:0c:3c:0a:61:73:b3:c7:ac:24:19:ed:f1:c8:
                    d1:47:25:f1:9f:12:7c:fa:0b:96:3d:00:e4:6d:9c:
                    1f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E2:88:E1:45:8B:41:59:50:7D:DC:CF:12:85:57:A5:EE:BF:0E:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2beaf43d-cadb-35b2-8177-98ca27ff1332.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:64:85:b2:a1:eb:b4:c0:a8:bf:b3:ee:4d:ee:79:38:51:d3:
         e3:a2:b7:69:73:4b:5e:4f:59:a0:d9:e2:a8:09:2d:61:1e:aa:
         16:a7:bf:76:84:ee:06:6b:15:0f:5f:d0:15:ba:58:3e:3d:41:
         ce:77:49:c3:d1:28:ef:70:51:6d:fa:55:30:c3:2a:80:d7:89:
         34:26:dd:2b:99:f3:60:7a:39:47:33:cc:ee:62:a3:97:68:a6:
         68:4c:4f:bb:fd:81:e6:3d:26:ee:0a:b8:4a:95:08:87:58:2a:
         43:8e:1f:a4:fa:59:7c:08:f1:b6:e4:fb:7e:05:81:3b:62:ee:
         0b:a3:b8:53:2b:01:9e:a9:ed:03:c2:55:8a:97:c1:30:fd:43:
         92:41:de:97:a6:07:03:3b:58:a3:12:92:39:f7:ac:f2:80:6d:
         0a:d1:e9:25:f9:cb:d6:6b:9b:d1:55:81:1c:e3:da:0e:a9:cd:
         82:80:82:9b:99:20:8d:b8:88:3d:ef:b9:e4:2e:ac:43:91:81:
         ce:82:cc:72:10:94:7e:53:f7:95:6f:83:e6:4a:41:a2:18:77:
         16:f2:80:03:c0:69:ee:a8:de:e3:11:7c:90:34:80:c6:f0:49:
         82:1f:ec:d8:3d:51:3f:22:e2:41:e8:5f:4d:92:4e:bd:27:48:
         cc:af:2e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:32:28 2026 by rpki-client