Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3bf92bab-dc83-35cd-b0a0-9b7808eea923.roa
File:                     3bf92bab-dc83-35cd-b0a0-9b7808eea923.roa (raw, json)
Hash identifier:          YKWQrtwCCq0/VewDRVCw/j7HNXqTNXxExzkfXdkrYQc=
Subject key identifier:   8D:7E:03:69:BC:47:2D:5A:61:84:14:CD:91:63:2E:6B:72:9E:65:8E
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF4DB6910A822DFD7D9F901C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3bf92bab-dc83-35cd-b0a0-9b7808eea923.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     41264
IP address blocks:        104.133.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:69:10:a8:22:df:d7:d9:f9:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=50211b1e-9423-4f10-a7ae-5292d159ca93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:20:4c:da:7a:a6:76:1d:19:37:dc:63:06:cd:
                    5c:f3:b0:c9:69:d3:44:ce:95:22:11:90:fd:65:e0:
                    b1:85:7c:a2:3c:42:50:8d:a1:0d:e7:34:b1:0c:cc:
                    f1:f6:54:44:93:f0:0a:4c:08:71:46:de:18:56:2d:
                    cc:bc:60:ea:e0:8c:23:44:07:89:ef:d0:b6:2d:28:
                    15:65:9e:37:39:d4:0b:47:93:c6:03:9d:34:0a:ae:
                    90:19:3a:5e:19:7b:75:14:36:ff:81:5e:b3:c9:a8:
                    62:a3:40:ae:98:25:8f:85:00:90:5e:26:7a:b9:26:
                    c8:36:8e:49:b3:34:83:61:7f:92:fc:db:a2:84:12:
                    e7:e8:cb:f1:13:2d:9e:dc:2b:e4:16:aa:00:b4:cf:
                    76:f4:97:3d:ce:21:a7:a1:ff:69:8f:37:ec:cc:aa:
                    ec:53:37:52:da:f7:61:fd:56:44:fc:9f:f5:40:25:
                    7d:f0:ac:46:b3:2a:36:69:35:ba:fd:8e:d7:98:aa:
                    15:3e:9e:b4:b2:b0:51:be:bc:55:04:d3:27:92:6f:
                    47:78:ec:0c:fa:92:08:0c:06:73:f5:93:e1:22:4c:
                    57:d9:a2:3c:7c:9a:34:74:2a:12:56:aa:b1:26:90:
                    ad:f5:44:17:85:70:9f:ab:cd:24:9a:8b:93:8d:37:
                    3c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:7E:03:69:BC:47:2D:5A:61:84:14:CD:91:63:2E:6B:72:9E:65:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3bf92bab-dc83-35cd-b0a0-9b7808eea923.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:82:db:02:fb:b8:79:5c:5c:8f:0c:e0:24:b9:24:3c:ad:8a:
         f0:83:ab:8a:f0:6e:48:cb:b6:b3:41:1d:eb:12:ba:98:7d:80:
         d4:ec:82:0d:07:05:ee:4b:81:4b:25:56:7d:43:9c:89:33:49:
         10:53:e2:68:83:05:de:49:34:81:26:a7:4c:8f:75:94:38:a2:
         bd:3d:81:ba:d0:44:a9:7c:54:2f:d8:41:aa:e0:9e:7a:83:05:
         44:d2:fd:0e:c1:f9:eb:ce:8a:0d:40:ed:ee:e5:d7:0a:5e:f3:
         39:7f:9b:47:77:d8:06:ab:ca:96:aa:bb:d1:66:10:0b:58:21:
         ae:3c:b2:b5:4a:4f:bf:b8:ed:c8:d5:eb:4f:73:72:a1:5a:be:
         2f:e3:1c:6a:5e:42:f0:18:2c:69:01:8c:8c:f5:23:2b:94:77:
         90:db:53:4f:5f:95:3d:2e:4d:96:0d:55:90:1a:b3:24:69:bd:
         81:8d:c2:51:ce:5d:e5:50:57:0d:ae:39:53:f2:a8:7d:f9:57:
         a5:cd:57:6c:c9:6b:98:68:02:41:c0:e6:63:d4:e1:50:df:33:
         4a:44:2e:d8:ff:74:f1:88:47:dc:be:5e:04:ba:a3:e0:80:ec:
         50:4c:6e:d2:65:36:ee:76:89:61:17:cd:96:85:40:5a:1c:91:
         2a:b8:a4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:30:32 2026 by rpki-client