Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4c02136a-b91c-3459-a9a5-847620ddc159.roa
File:                     4c02136a-b91c-3459-a9a5-847620ddc159.roa (raw, json)
Hash identifier:          SyYA3ONtDme2Gp9huoC4fn9bITgiUBC0HmePAxWuCDc=
Subject key identifier:   60:7D:37:F3:47:FF:92:20:60:DD:4D:D4:D3:F6:FB:81:61:AB:A4:FD
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF2109FAE92C0699A33C5DBA0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4c02136a-b91c-3459-a9a5-847620ddc159.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     41264
IP address blocks:        104.132.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:9f:ae:92:c0:69:9a:33:c5:db:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=7454f0aa-9ddd-44ba-94e8-a32b820ca656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:02:5f:26:ca:32:a8:91:7e:f0:2d:a0:f2:85:
                    57:01:21:fe:04:0e:e2:f0:60:da:54:c7:43:de:27:
                    af:02:2e:45:54:09:67:f1:f6:63:5b:73:59:f9:74:
                    cf:f1:35:0b:75:a7:d0:03:e9:f3:29:89:38:6e:1d:
                    48:3d:1e:ac:f5:ec:2a:c7:93:3d:1d:53:73:12:e8:
                    6a:4f:e1:94:d5:c9:33:18:e2:33:4a:e0:cd:11:ea:
                    1a:c2:0c:f2:4d:4a:22:3e:cb:f0:f1:cc:bc:cc:68:
                    0c:0d:2e:ce:c2:e8:d2:57:de:e7:5c:72:8a:52:ca:
                    89:b8:d3:52:70:b8:36:38:01:1f:0d:8b:7f:ba:50:
                    a3:5b:19:c8:6b:cb:50:37:a9:27:74:cf:17:b4:8f:
                    7b:a2:f7:04:77:b1:6b:a8:48:f3:33:0f:f5:ec:71:
                    e1:f5:13:6a:1b:ab:c5:78:85:17:bd:ba:67:1e:b6:
                    73:4a:8f:f3:84:02:dc:c9:4d:af:56:48:bb:fe:27:
                    be:9d:2b:52:bd:c6:72:4d:05:53:ae:15:87:b1:b3:
                    05:35:0e:1f:b7:a5:38:19:47:c7:1e:8b:27:39:8d:
                    b9:c9:36:d9:65:aa:59:93:87:d3:50:69:ff:9d:84:
                    53:16:94:96:48:bf:c9:9a:6a:88:63:e1:a6:5c:f6:
                    b9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:7D:37:F3:47:FF:92:20:60:DD:4D:D4:D3:F6:FB:81:61:AB:A4:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4c02136a-b91c-3459-a9a5-847620ddc159.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:36:3c:59:8c:f9:87:fc:55:01:90:7c:c1:91:f2:38:9c:a7:
         23:ba:18:50:93:e8:66:9a:62:ad:6e:40:c3:7e:a7:ba:66:b7:
         73:7a:01:a6:c7:98:59:35:18:32:b5:bb:63:39:b3:43:07:5c:
         49:65:43:bc:17:88:f8:cd:3a:9d:5c:b5:78:2b:c8:f8:db:26:
         fb:27:57:46:58:5f:4b:52:3c:0e:7b:dd:02:73:ef:31:c0:99:
         5e:2f:88:5a:e6:4a:92:df:b3:ad:33:8d:c5:4a:c1:35:1a:55:
         7c:38:99:d4:cb:72:f0:a7:d8:a4:9c:44:ff:8f:64:89:78:0a:
         a6:37:91:2f:64:95:cb:3f:82:31:60:ae:fc:9d:a1:23:29:46:
         c8:1e:ab:40:cd:74:52:2c:38:a5:81:e8:42:1a:49:36:f3:a0:
         c4:25:1c:ee:55:7a:91:81:f3:9d:5f:01:4b:b7:48:44:67:d2:
         67:2b:03:5f:30:c9:1b:ba:42:00:a4:ff:0e:ee:24:75:5f:13:
         94:94:6c:dc:cb:5b:0e:02:86:38:cc:75:7d:e5:a3:e0:d6:53:
         3c:eb:77:b8:40:07:62:ea:fb:fe:b1:5e:13:50:f9:17:19:ca:
         27:01:ec:aa:c0:6e:e4:13:b0:e9:a9:ab:ec:36:d1:57:ed:85:
         87:4f:c5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:33:49 2026 by rpki-client