Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/40fc80eb-657f-34a3-8e76-07ca3891476f.roa
File:                     40fc80eb-657f-34a3-8e76-07ca3891476f.roa (raw, json)
Hash identifier:          Ctm0bf57ZdrjQMA1QAo5Q5cQij5+Wn0/rsOVdkNv2FU=
Subject key identifier:   7E:7F:D7:8C:31:74:DB:3E:F7:6D:CB:84:DD:A0:AC:D9:43:0F:DB:5A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF2109D06448249D8769E9400
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/40fc80eb-657f-34a3-8e76-07ca3891476f.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     41264
IP address blocks:        104.132.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:9d:06:44:82:49:d8:76:9e:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=f01d3274-3eeb-4249-9473-2a0ed64f662d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7e:e7:d8:cb:d9:11:a3:72:33:ee:e0:5f:b4:
                    ba:4e:c6:6d:22:43:72:d3:d0:d1:51:52:e9:f3:b7:
                    85:07:21:0c:64:f9:a3:02:20:c6:8b:cb:7f:73:e4:
                    e2:55:92:e5:dc:c4:3e:9a:34:dc:9a:88:2f:05:20:
                    e7:94:07:23:7c:97:a3:ef:9a:92:b9:56:96:f5:33:
                    ad:f0:d9:bf:c2:62:b3:c4:0b:45:9e:47:88:00:26:
                    b1:0a:d7:78:b9:39:2c:61:d5:c7:e2:f5:d3:b7:c1:
                    ad:fa:44:a7:5d:fd:1c:a0:d9:7b:f9:63:5b:66:eb:
                    0b:97:68:22:e2:ed:a6:aa:c7:d4:3d:a8:92:29:eb:
                    ed:36:7d:5c:60:6b:23:aa:ad:03:ae:d3:d6:52:ed:
                    c5:c4:50:45:e5:3d:26:38:9d:25:e5:b7:e6:d2:ba:
                    a2:8b:b5:b6:7e:0c:bb:aa:0d:ca:6d:a9:a2:55:e3:
                    d4:03:57:8c:62:ad:17:64:ba:79:6f:33:de:e0:9c:
                    b4:30:eb:c1:8f:27:93:75:9b:40:ef:e8:f0:1e:39:
                    a9:02:73:ae:4f:ab:5d:aa:5f:b3:3d:a6:cf:51:5b:
                    ac:40:31:03:a4:66:44:cf:7e:de:d0:7c:74:0f:1e:
                    07:6f:e2:62:f4:b2:46:19:ce:3f:81:06:41:f6:35:
                    65:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7F:D7:8C:31:74:DB:3E:F7:6D:CB:84:DD:A0:AC:D9:43:0F:DB:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/40fc80eb-657f-34a3-8e76-07ca3891476f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:f3:8d:62:c2:3c:84:8b:d5:f2:5a:8e:b2:8d:a7:80:a1:b0:
         ce:3b:4b:ad:49:70:b4:50:9d:da:41:64:e6:cb:8b:ea:fc:1e:
         b5:21:9a:b5:cd:75:c8:75:c5:f8:58:d5:1c:17:b7:3e:71:79:
         df:31:a6:c6:bb:4f:c8:b7:ee:7e:0d:26:e2:1a:ae:32:fc:13:
         36:ff:3f:35:53:42:44:16:1a:c6:9e:a6:ee:43:39:20:1f:ea:
         31:62:23:c2:7f:ce:59:df:de:62:59:f1:24:24:85:7e:e1:c6:
         e8:9d:d6:90:70:a6:5e:a8:da:46:c7:d2:04:70:c5:04:59:fa:
         50:51:24:be:d0:af:34:ea:e9:a5:23:1a:ab:4f:37:33:20:77:
         37:0a:e5:ce:bb:17:43:bc:06:e8:a0:bf:fa:12:07:8d:e1:33:
         7f:b5:11:3a:17:f9:f3:89:e4:7e:c4:0a:e5:f4:15:b3:4b:22:
         1e:b4:d6:7b:a0:3e:71:d3:7b:8b:b2:c0:80:ec:b3:c2:c8:3e:
         5f:66:e4:49:fa:d4:35:80:d1:7d:7a:ca:cc:6e:a8:a7:a3:05:
         22:9c:b6:5e:78:d9:d3:b9:96:e3:3d:3d:bc:e3:86:3a:82:31:
         25:39:40:06:99:2a:a8:8f:4c:4f:28:1a:d2:bc:9c:8b:da:e4:
         6b:e4:20:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:30:53 2026 by rpki-client