Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5c0f9185-6e29-32b7-8ec5-9735178b7b8a.roa
File:                     5c0f9185-6e29-32b7-8ec5-9735178b7b8a.roa (raw, json)
Hash identifier:          huJtdRgq2F0a1bt6qrW/4T1uFj2R4Ys8UWCzke5A5+o=
Subject key identifier:   1D:2F:54:52:F9:75:AE:BA:07:DE:25:90:E5:6D:CF:07:5F:9B:15:BA
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF4DB7D6448169E8569E5B300
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5c0f9185-6e29-32b7-8ec5-9735178b7b8a.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     41264
IP address blocks:        104.133.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:7d:64:48:16:9e:85:69:e5:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=96dcbf7e-a0a9-4726-ac44-a0760b70c40d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cc:36:45:bb:99:93:73:d5:b1:08:f1:63:c6:
                    c8:16:be:95:bc:f8:5a:61:fe:1d:55:bf:0b:9d:ac:
                    d6:fb:e6:43:26:b5:d0:88:b0:a1:b0:86:53:de:53:
                    5e:e1:6c:30:f9:79:86:74:94:32:15:dc:2d:aa:71:
                    80:16:59:33:ea:d6:11:52:ec:e6:f8:6c:f0:d6:ca:
                    f1:ef:e0:44:50:be:5c:a2:42:8f:c5:78:2d:0f:8d:
                    ba:01:2f:e1:7f:05:91:4b:b2:3b:9b:58:f5:66:73:
                    80:78:2c:03:e9:38:10:f2:8e:4b:08:10:47:de:be:
                    be:1d:2c:79:c7:2f:03:43:d8:c2:ef:69:9c:51:2c:
                    7b:26:69:2c:7f:0e:db:cd:d4:47:72:d6:66:e1:82:
                    bd:be:13:64:20:84:e4:de:94:b0:4c:d7:91:16:10:
                    3c:86:28:53:6f:4e:54:53:7a:a8:76:bc:15:30:11:
                    2c:8c:41:21:de:2e:e2:b7:c4:28:93:8e:dd:ad:fb:
                    7c:38:25:3f:b5:5a:42:3a:c2:ad:a5:54:6b:71:04:
                    87:a7:86:5a:73:48:ef:fe:cb:34:5d:c6:0d:e0:bc:
                    9f:93:3c:d3:fb:8c:c4:c5:14:4f:11:71:11:b9:dc:
                    49:ce:83:4e:61:2b:c3:07:c7:7b:9c:b1:70:1d:1f:
                    7d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:2F:54:52:F9:75:AE:BA:07:DE:25:90:E5:6D:CF:07:5F:9B:15:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5c0f9185-6e29-32b7-8ec5-9735178b7b8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:ae:83:27:78:9e:f9:0b:6a:1d:d7:c2:7b:cc:da:62:c2:b2:
         b0:4d:d8:41:e1:55:62:eb:a0:ae:bd:58:7f:74:0a:41:99:f7:
         fb:a9:a5:b8:16:5b:88:cf:4e:17:c5:f1:5b:ea:f3:9d:84:78:
         b3:ad:66:66:09:3e:aa:a9:91:d9:c8:b9:da:3c:e6:25:76:d4:
         95:b5:d7:46:51:2f:79:5f:c3:00:84:69:24:30:d5:83:64:38:
         55:30:8d:a2:ad:a2:0f:e2:f6:c8:96:ea:12:5a:41:ad:04:b2:
         66:64:14:42:48:95:10:4b:47:bb:bf:36:ff:92:b3:ee:a1:32:
         79:79:8d:dc:22:e3:ac:c8:7f:93:c7:ac:e7:a5:38:64:3e:9d:
         1c:e6:31:1f:c0:9f:ff:0b:91:17:fe:88:a2:c5:27:ce:40:87:
         54:24:87:66:f2:b8:a4:82:2b:7d:c9:78:47:94:18:7b:67:f0:
         9b:c7:d4:e1:ae:3f:b1:aa:a1:b2:b7:d0:ea:f4:cc:30:ae:27:
         97:72:dc:73:83:81:87:55:6a:0f:55:cd:eb:04:f0:4d:cf:a9:
         75:7d:fd:04:1e:64:04:10:ae:ad:51:d6:79:a1:76:3c:00:c1:
         8a:5d:ac:a7:ba:ec:c6:3e:d2:6e:54:f4:e8:14:9b:b3:62:ff:
         3d:eb:4e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:32:59 2026 by rpki-client