Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4462c342-789f-32c1-87ce-a167a409d21b.roa
File:                     4462c342-789f-32c1-87ce-a167a409d21b.roa (raw, json)
Hash identifier:          jbpKH+Gnu99ya3zxSjZ3574TnFY9MJT/YUzla4mqcWM=
Subject key identifier:   F9:BE:CC:03:38:8A:19:F6:AB:67:80:08:30:36:68:6F:CD:23:69:F4
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DEF45FFC7B5376C72BB4168AE
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4462c342-789f-32c1-87ce-a167a409d21b.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     41264
IP address blocks:        104.132.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:45:ff:c7:b5:37:6c:72:bb:41:68:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=58844e74-de12-457b-8aee-38edc198b287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0a:01:49:f4:49:b9:80:d7:4c:30:ef:6a:2f:
                    73:3f:84:8d:26:8a:f4:07:59:21:96:51:94:e6:a8:
                    a4:de:22:df:d8:88:b1:72:75:9a:77:d1:a0:f5:1c:
                    c1:4d:d3:9e:30:ed:08:7d:b7:72:a4:21:80:98:01:
                    66:7f:d8:bf:cb:da:0f:f6:1c:4f:48:17:0d:b2:4e:
                    50:6a:6d:71:4d:65:3c:72:c5:43:d4:2c:b4:3a:bd:
                    ef:a3:be:8e:54:bb:48:44:33:dd:91:81:ad:40:01:
                    f5:b3:82:39:a3:59:6c:27:84:0e:59:25:69:77:39:
                    36:56:b3:79:35:30:b0:1d:26:9f:46:56:ba:67:83:
                    9f:53:ed:b9:d4:ba:14:c3:95:87:d1:b7:7f:90:05:
                    4e:d7:d5:aa:5a:e6:e4:30:8a:95:e7:19:38:8f:5c:
                    fb:a8:d8:62:2c:2d:fd:35:b5:15:94:02:d7:7d:18:
                    f4:34:6e:26:97:6a:53:6e:0a:40:28:53:e4:89:2b:
                    ae:01:55:b5:05:b9:c4:2c:54:14:30:6c:40:eb:68:
                    0b:e0:9c:0f:26:61:8e:b5:1d:8c:54:9a:72:aa:22:
                    d0:92:1d:e4:2c:de:65:78:fa:f5:7a:8d:7d:6c:2b:
                    25:33:42:19:33:29:c0:72:13:fb:39:0f:b7:5b:fb:
                    42:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BE:CC:03:38:8A:19:F6:AB:67:80:08:30:36:68:6F:CD:23:69:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4462c342-789f-32c1-87ce-a167a409d21b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:7b:0e:de:b8:2d:0a:d9:03:2f:72:77:89:ee:69:b2:b3:af:
         c1:58:27:4a:f5:7b:f5:cd:75:d7:61:c5:de:2a:43:01:26:2b:
         41:c8:1a:0c:a8:70:c8:7c:88:8d:35:f4:78:a6:48:ff:c8:d0:
         96:23:55:a4:dd:8d:93:ac:87:63:16:21:1f:5e:96:b5:d0:d1:
         8f:47:10:23:4a:2a:40:5f:7d:5e:cc:5d:3e:70:5f:02:9d:6d:
         34:45:c3:2f:b4:1b:fc:bb:47:8a:60:60:16:c1:49:3b:9d:a8:
         aa:4f:93:b8:65:09:03:4f:ea:38:93:13:2e:35:14:03:40:5f:
         fa:62:30:2f:4e:73:32:e5:9a:36:fb:2d:76:f6:9d:68:ce:e4:
         ed:40:30:18:43:99:dd:56:5f:b6:1c:fb:88:9c:04:40:d4:81:
         ec:91:71:d9:24:e3:4a:9a:ef:94:53:58:63:ef:bb:a3:47:30:
         cb:41:3c:78:db:e6:d9:7e:a0:df:5c:7e:b4:f1:e5:e0:7f:9c:
         3b:f9:b5:c4:2b:e1:5a:0d:ea:ac:d5:6e:1e:8d:f3:ed:6f:a7:
         92:77:74:61:c5:68:6b:cb:47:cd:7f:3e:a3:e7:39:88:ff:30:
         75:54:c2:52:6e:25:f7:a6:36:60:f3:d5:bc:c7:85:0b:f4:f3:
         5b:27:9c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:35:11 2026 by rpki-client