Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/30bec6c7-921a-30e3-ad65-03b4098f34f4.roa
File:                     30bec6c7-921a-30e3-ad65-03b4098f34f4.roa (raw, json)
Hash identifier:          xoILwQi4bQuQA0cmnBzjZtCQ/dW8fnoFwtT7qB08RUs=
Subject key identifier:   33:92:73:68:1A:B7:E4:53:96:9F:6B:85:69:1C:5F:F7:BC:AC:79:40
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF210A9287F00F0C953707500
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/30bec6c7-921a-30e3-ad65-03b4098f34f4.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     41264
IP address blocks:        104.132.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:a9:28:7f:00:f0:c9:53:70:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=d43412e1-c752-4f98-ae98-c677af91bd8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:20:41:0e:fa:21:d8:b6:a6:99:d2:09:94:eb:
                    3d:68:72:54:af:ea:5a:3f:20:27:99:05:ba:5f:3d:
                    1d:a9:31:64:cf:09:ff:58:a7:0c:50:23:d7:eb:e8:
                    53:a3:07:99:52:7a:28:6b:47:d1:2c:d9:78:7e:b6:
                    73:28:16:6d:da:df:45:81:45:57:89:df:27:59:fc:
                    92:f2:f3:83:af:c8:29:af:de:1d:ac:0d:99:6c:a2:
                    bb:5c:f9:de:d3:76:ea:74:87:a2:8d:38:0c:3a:71:
                    27:ae:e8:76:1a:9f:cf:5b:c1:fa:f6:a1:5b:33:96:
                    cc:c0:86:18:34:a3:d8:a8:0d:44:d6:27:ec:15:cc:
                    92:90:88:f2:46:44:03:42:2c:9a:f5:c7:e2:30:5f:
                    69:6a:7a:7b:79:83:f2:39:ca:81:ef:46:4e:cf:cc:
                    e3:31:68:f8:d1:15:7d:a0:9a:6e:ee:14:92:f1:d6:
                    d1:21:b6:12:a7:5a:e1:10:55:e2:76:c8:61:59:cb:
                    14:54:3b:32:5e:a1:e2:21:2c:84:1f:91:d0:b6:48:
                    3e:dd:27:9b:bd:47:57:ed:15:43:a0:31:53:42:29:
                    0f:4e:d1:04:bd:08:14:18:5e:5c:00:2b:a4:a2:d4:
                    36:46:21:a0:45:ab:7f:e4:18:7a:0d:61:69:5e:e7:
                    5d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:92:73:68:1A:B7:E4:53:96:9F:6B:85:69:1C:5F:F7:BC:AC:79:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/30bec6c7-921a-30e3-ad65-03b4098f34f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:a1:72:66:21:da:51:97:c4:c2:f1:07:e4:8f:7f:e6:d1:fd:
         06:e9:8a:65:5d:2c:50:06:e9:fe:21:e8:e3:e4:ca:3d:5b:13:
         35:6d:55:3d:33:fe:e8:eb:dd:35:d0:69:ba:8e:69:5e:30:cd:
         89:fa:af:b9:9a:41:11:07:17:94:eb:45:8b:5f:f6:61:69:a5:
         1f:5a:d1:48:e7:85:6a:b9:b2:4a:c5:31:81:d0:6e:67:52:68:
         5a:64:59:7c:ef:ed:41:04:a5:ac:71:96:f9:e5:95:61:e3:ca:
         b0:1c:6e:d3:2f:79:7b:77:52:9b:9c:46:a0:68:16:d6:d3:56:
         b7:cf:0a:9b:af:46:22:3b:7e:95:19:f8:dd:f4:93:3c:b5:13:
         dd:1f:7e:d8:7a:66:fc:c8:2a:7d:21:76:f1:fb:36:d3:c8:23:
         3d:89:5c:94:00:c5:d8:db:fd:dc:f7:64:60:77:82:32:a3:53:
         53:d0:64:61:ea:4e:31:de:21:2b:3b:18:c4:89:3d:1a:46:b4:
         52:6f:bf:84:59:dc:e3:75:72:8a:43:48:54:db:db:8a:81:62:
         3f:2f:c1:34:23:c3:98:98:22:ca:8c:8e:0e:ef:64:5f:b5:2e:
         f1:fa:4e:a7:0a:95:07:4b:fd:16:1b:23:d7:38:86:93:a9:58:
         6f:55:35:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:34:07 2026 by rpki-client