Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3914c294-cd51-3175-b02b-781afb254873.roa
File:                     3914c294-cd51-3175-b02b-781afb254873.roa (raw, json)
Hash identifier:          DBrcuuT3usuLtt1GqUUwFAOTdqwduaTCTiIjZLxIQNM=
Subject key identifier:   9C:33:8D:E8:0D:7F:80:7F:B7:D0:78:3B:E8:66:DC:F1:DE:A4:89:2A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF2109FBB9CEF0D40064BCF80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3914c294-cd51-3175-b02b-781afb254873.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     41264
IP address blocks:        104.132.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:9f:bb:9c:ef:0d:40:06:4b:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=8fa8c762-ddee-4057-be58-9dc318c90019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:aa:2a:c3:e5:e6:7e:de:63:d6:ce:4c:3f:f4:
                    28:94:32:d1:43:0f:7d:0d:b6:eb:c6:69:9f:73:95:
                    4e:19:ee:39:76:bf:20:65:09:54:37:12:e3:89:6b:
                    50:30:ec:10:47:05:72:77:6b:88:99:e1:e6:91:5d:
                    14:e8:de:47:3b:b3:6f:fd:48:f6:4b:59:17:3f:20:
                    e9:dd:84:94:7a:3d:d4:1b:b0:67:0a:af:74:53:92:
                    de:f4:31:f9:75:c9:9b:c7:c7:36:e5:f3:60:f7:49:
                    f8:19:62:8f:41:e0:ff:6b:88:0f:68:f6:68:f9:20:
                    f8:69:90:2a:bc:e2:a2:d8:e6:7b:8a:1d:7c:a8:a0:
                    7d:ce:45:4b:ab:f4:a2:d5:cd:9b:d2:dd:00:b1:1a:
                    42:7e:93:11:c4:0d:ef:a8:6c:ab:69:5e:73:df:81:
                    39:de:f5:2c:b0:26:4e:c9:e4:77:bc:a9:97:79:9d:
                    cc:08:b8:23:d8:0f:7f:a3:9b:82:95:a4:18:2d:49:
                    c3:25:9d:01:61:28:d6:c7:ee:c9:b8:78:47:11:da:
                    7f:2c:7d:38:a6:8d:3c:51:70:71:73:07:69:b9:27:
                    41:c7:70:42:f0:b3:46:e5:dc:84:52:39:b5:59:3d:
                    f8:f7:cc:25:d9:6f:5a:3e:87:cb:c3:c9:5b:c1:f3:
                    f0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:33:8D:E8:0D:7F:80:7F:B7:D0:78:3B:E8:66:DC:F1:DE:A4:89:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3914c294-cd51-3175-b02b-781afb254873.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:be:8d:56:8b:59:b9:9f:fa:0f:11:75:59:a3:ef:68:81:9a:
         d1:3f:15:4a:25:2e:77:4a:a3:ae:26:da:db:f1:46:71:11:b1:
         42:54:fd:0e:96:c3:2b:74:7a:2d:8e:e8:a7:11:84:56:72:a4:
         af:76:d0:30:75:aa:68:7e:29:cb:0e:64:21:e2:b1:5e:58:6c:
         3a:3b:94:1d:f6:14:71:e7:6c:61:1d:54:32:d8:fb:07:0d:06:
         ed:4e:26:79:d4:1a:90:75:9d:be:d8:21:21:92:34:6b:98:c0:
         48:c5:19:ca:a3:66:9c:07:49:7b:15:fd:1e:0c:33:26:84:43:
         c1:17:24:77:3c:93:1e:c0:99:39:12:91:fe:4d:58:35:83:6b:
         c2:e2:7d:ea:53:cb:62:0d:4b:20:96:25:bd:4d:cd:c5:c8:56:
         e4:9e:2b:8e:a6:26:e6:1f:a9:2f:75:ff:ae:12:f1:03:90:aa:
         a2:76:f6:70:12:ae:9e:01:be:be:5a:da:06:3b:d3:ea:9f:4c:
         73:17:6b:a9:f2:5a:0f:10:1d:7b:d4:a2:f7:4d:cd:5a:7a:22:
         1d:34:c0:73:7a:f8:53:d5:da:b7:72:ac:54:68:56:60:17:e7:
         3b:dd:c5:5f:1d:ef:97:d0:24:8b:21:b7:b5:ec:90:f5:65:81:
         0e:c1:27:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:35:16 2026 by rpki-client