Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/57c6ac0c-b7d8-3275-af3b-980d7a5c658c.roa
File:                     57c6ac0c-b7d8-3275-af3b-980d7a5c658c.roa (raw, json)
Hash identifier:          TcMBTPRM/7wbOuymCDawm4xlmWkLKtoIRgOh5PFl4vw=
Subject key identifier:   C7:E5:C2:6E:02:83:8C:87:00:5D:3E:47:E1:0C:F6:BA:29:28:CB:3B
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF4DB70C4CF735905830BD420
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/57c6ac0c-b7d8-3275-af3b-980d7a5c658c.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     41264
IP address blocks:        104.133.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:70:c4:cf:73:59:05:83:0b:d4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=b4b269f6-3f98-4f2e-bd00-c1d53c50897a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:46:c3:79:5c:54:d7:bb:cc:f3:45:c2:be:22:
                    e3:33:e2:29:98:78:e2:08:1b:fa:2b:07:35:fc:64:
                    68:51:8f:6b:33:10:fc:d2:35:2d:f9:f9:1e:14:dd:
                    20:c8:03:bb:c8:4b:46:a5:26:5c:84:fa:05:a8:4e:
                    a2:0d:2b:db:3d:1d:43:44:59:ea:43:ed:9d:38:93:
                    74:09:97:24:b4:8e:8f:b5:74:22:b4:89:35:45:52:
                    73:ed:97:be:01:f9:8b:7a:a3:4a:a1:85:79:1d:48:
                    02:ca:17:f9:5b:7c:8f:2e:14:df:9f:3f:5a:88:b5:
                    6b:ba:91:62:24:81:3a:98:13:c1:bb:e0:cf:48:b0:
                    3a:aa:4f:f3:e9:69:91:d1:7c:fd:93:88:58:bc:c6:
                    f0:f7:2f:0f:7f:5b:49:41:03:83:c7:7b:08:03:5f:
                    81:6a:ce:03:bd:50:98:93:30:52:57:37:d8:9f:e3:
                    b3:4f:d3:63:c5:5e:5b:f1:6c:ff:70:ca:2b:cb:25:
                    16:e8:55:28:41:8f:09:52:ec:95:75:9c:21:3a:16:
                    b4:9b:d2:bf:e9:0a:fe:5e:c7:ad:eb:ca:9f:18:48:
                    55:26:14:ac:94:f1:d4:9d:fe:6d:c1:ea:0f:f6:f1:
                    be:44:90:d5:e9:ef:a2:dc:d0:ca:16:d2:f4:b8:8a:
                    cd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E5:C2:6E:02:83:8C:87:00:5D:3E:47:E1:0C:F6:BA:29:28:CB:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/57c6ac0c-b7d8-3275-af3b-980d7a5c658c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:c4:22:d5:cb:a1:79:1f:3f:72:bd:2a:42:e6:bc:2b:12:d7:
         10:c0:51:06:18:64:89:1d:14:88:f0:6a:35:02:00:67:ed:11:
         f8:a1:bc:c7:13:9c:a3:66:00:8f:83:db:37:82:08:6e:79:25:
         4e:ab:3a:98:d6:92:78:c1:04:be:10:41:69:45:7c:69:15:fa:
         01:fb:37:62:21:5e:1e:b1:5e:e0:eb:c4:3e:02:de:17:15:c8:
         2b:bb:40:e2:68:a0:40:58:ae:3c:92:ea:04:b3:56:8a:d7:4a:
         b5:af:81:96:0a:db:1e:e7:a0:9d:08:32:18:f7:27:56:96:f9:
         86:d6:2e:b2:60:e4:79:56:4e:a9:f3:7a:88:9c:c2:56:dd:98:
         32:1a:a5:35:7f:9b:68:ee:89:b9:ed:60:90:35:bf:3d:61:d3:
         16:99:f9:cf:a6:a3:08:ca:60:50:fe:4d:4f:5b:92:c5:07:0c:
         26:7f:60:f4:f2:6c:15:d0:f9:0f:27:46:d7:b9:07:ac:99:f0:
         c7:30:9b:4a:68:0e:13:7e:13:0c:1c:85:71:f2:e8:8c:b0:a6:
         a3:91:e5:bc:f0:fc:a2:38:ab:84:03:28:7e:fc:97:09:e9:56:
         e1:e0:f4:8b:db:14:d9:95:13:62:61:1c:4f:03:9b:ff:08:c0:
         e5:5d:59:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:34:07 2026 by rpki-client